last executing test programs: 14m2.480081422s ago: executing program 32 (id=48): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x86, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000003000)="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", 0x2000, &(0x7f0000002f40)={&(0x7f0000000180)={0x50, 0x0, 0x3, {0x7, 0x2b, 0xfffffffd, 0xffffffffb381020d, 0x1ff, 0x5, 0xc5b, 0xe01, 0x0, 0x0, 0x40, 0x2458b030}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000000540)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000007040)="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", 0x2000, &(0x7f0000009880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)={0x78, 0x0, 0x0, {0x5, 0x74a, 0x0, {0x5, 0x81, 0x3, 0x5, 0x5, 0xf, 0x0, 0x100, 0x4e8, 0xa000, 0x2, r1, r2, 0x7, 0xdf}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000200)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00', 0x0, 0x0) 13m19.834026264s ago: executing program 33 (id=342): pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) mkdirat(r2, &(0x7f0000000040)='./file0\x00', 0x0) fchdir(r2) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 13m14.637746267s ago: executing program 34 (id=381): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00030000000000004c001280110001006272696467655f736c61766500000000340005800500190002"], 0x98}}, 0x0) 12m24.073697514s ago: executing program 35 (id=569): socket$inet_mptcp(0x2, 0x1, 0x106) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 12m15.986653227s ago: executing program 36 (id=717): r0 = socket$kcm(0x2b, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x1ee9, 0x5177, 0x41, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) 12m10.437562879s ago: executing program 37 (id=751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) io_setup(0x5, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f00000004c0)=[&(0x7f0000000480)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) readv(r1, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/203, 0xcb}], 0x1) 11m56.389957191s ago: executing program 38 (id=747): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000200)={@val={0xa}, @void, @eth={@multicast, @remote, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x8, 0x11, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], {0x4f19, 0x4e20, 0x8}}}}}}}, 0x42) 11m52.48834845s ago: executing program 39 (id=827): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x68) r3 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r3, 0x2007ffc) fallocate(r2, 0x0, 0x0, 0x1001ed) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x26, 0x0, 0xa697, 0x3}) 11m24.801050674s ago: executing program 40 (id=966): r0 = socket(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000300)=@assoc_value={r3, 0x8}, 0x8) 11m13.266571524s ago: executing program 8 (id=1023): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r0], 0x28}}, 0x0) 11m13.011663121s ago: executing program 8 (id=1024): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_io_uring_setup(0xd37, &(0x7f0000000280)={0x0, 0x7732, 0x80, 0x1, 0x350}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x36, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 11m12.196336616s ago: executing program 8 (id=1028): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$netlink(0x10, 0x3, 0xf) close_range(r3, 0xffffffffffffffff, 0x0) 11m11.64424971s ago: executing program 8 (id=1032): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbdf, &(0x7f0000000c00)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) syz_mount_image$fuse(0x0, 0x0, 0x300f401, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) 11m10.829474111s ago: executing program 8 (id=1034): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000740)={r3}, &(0x7f00000000c0)=0x8) 11m8.184481939s ago: executing program 8 (id=1044): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 11m7.316080766s ago: executing program 41 (id=1044): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 10m52.249401871s ago: executing program 9 (id=1134): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) 10m51.755762281s ago: executing program 9 (id=1136): socket(0x1d, 0x2, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 10m51.268546346s ago: executing program 9 (id=1140): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x82c1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 10m49.245261394s ago: executing program 9 (id=1155): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$nilfs2(&(0x7f0000000140), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x2, 0xf04, &(0x7f0000000f40)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 10m48.325081285s ago: executing program 9 (id=1164): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) munlockall() 10m47.448720531s ago: executing program 9 (id=1170): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c22000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000002b000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 10m46.278656265s ago: executing program 42 (id=1170): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000c22000/0x3000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000002b000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000000000000, 0x0, 0x100, 0x0, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3}) 9m43.39258771s ago: executing program 6 (id=1493): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x100, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) io_uring_enter(r2, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 9m41.307072318s ago: executing program 6 (id=1503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$'], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1000, 0x1) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002004000) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) 9m40.949503073s ago: executing program 6 (id=1505): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000004c0), &(0x7f0000000440), &(0x7f0000000340)="94c14146f79c29fb4016c9d17e8040b8940ebf9c2db88dbad8af3b5516979a57e80b5f5e73001f8713f6b1c051cb6d08d2d082ac6c01b7e858f2b274a79a870bfa354e6b301c26b9d484ee1c9e28c336d013be7aa5d3edc593293845a375dff3401004440c50360a68b8a16c1f3cfacd9c9b0ee79d30cde69f397089ca03919d41aa483f8891b1c5c038c530f6caf30b1f3c15d4f7c0f7964230aa7199d63b0237f18e5ca8d130516c031f4afacc6576ddacc3ec81898561154adce958145d74", 0xc0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 9m38.250985992s ago: executing program 6 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x100) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 9m37.69278557s ago: executing program 6 (id=1529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 9m35.026086794s ago: executing program 6 (id=1549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc417", 0xb}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c950", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be", 0x61}, {&(0x7f0000000a00)="a7c652df", 0x4}, {&(0x7f00000021c0)="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", 0x148}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb8", 0xa7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000000500)}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 9m33.93944675s ago: executing program 43 (id=1549): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="91b8a91fd3108691bbc417", 0xb}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c950", 0xba}], 0x2}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000140)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001d7545517fd18b5d29978f32a5b5c81755cb89cc0490958", 0x75}, {&(0x7f0000000740)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be", 0x61}, {&(0x7f0000000a00)="a7c652df", 0x4}, {&(0x7f00000021c0)="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", 0x148}], 0x4}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="157873e2c9542e45e27dea3315e396369a51bd63b2c4f6a8272d27ff0675547ec9a31d3a42ecb0583efde7adc254e59416050c1eb7a1fc02536c070f4964e8b18941198253d8da9fbf8c456af254ebf1795878f3a3256ee70c2964d3f010587a5fe800f697966822ccb7cc3257b6f1ed3d66646315c63b79f1c87ada02da4cf577d9dc1daaf1332400dead2760122a2669a387ad030550c0580bd9adc59af055e059c887c0b5c02779310337b803821ccf3aa365e1a057d5129c02d8c4", 0xbd}, {&(0x7f0000000800)="775d1ea0235b1d8979bc06a446925deee745776767c450620fa4e27c6dbaa98ec6c093e8d1e1519164a5f89f42ea672b529b4c4d1644463bcaf7c0cb1879b6eda4faf92a8ef59a375beb350482930d962e17d10db3ebb49508d4dfe192e193054216615c1b80ad3efb23a8b29a420bf54e9b5fef66f6eddddfb1f80a2d5b006053bad44d711e65980031615426249bc62c092feb5db72a135b2ba904c82f561ff2099dd9e08bb8", 0xa7}], 0x2}}, {{0x0, 0x0, &(0x7f0000000fc0), 0x0, &(0x7f0000000500)}}], 0x4, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m15.619347236s ago: executing program 7 (id=2448): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 6m14.474672421s ago: executing program 7 (id=2453): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) listen(r0, 0x7f) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 6m12.291094289s ago: executing program 7 (id=2462): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) recvmmsg$unix(r2, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}}], 0x1, 0x40000000, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 5m59.664120428s ago: executing program 7 (id=2503): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) setpgid(r0, r0) setpgid(0x0, r0) wait4(r0, 0x0, 0x2, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, r0, 0x0, 0x4, 0x0) setpgid(r1, r1) setpgid(0x0, r1) 5m55.747349837s ago: executing program 7 (id=2516): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) pipe2$9p(0x0, 0x800) unshare(0x22020600) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7fff, 0x100008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)='|', 0xfd}], 0xf, 0x0) 5m53.828619701s ago: executing program 7 (id=2526): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 5m38.249653953s ago: executing program 44 (id=2526): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0x3) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4m6.600677516s ago: executing program 5 (id=2814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) close(0x3) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000001c0)=0x1) 4m1.910832885s ago: executing program 5 (id=2832): close(0x3) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r2, 0x4004743a, &(0x7f0000000080)=0x200020) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x1a) 3m48.42035673s ago: executing program 5 (id=2860): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, 0x10, 0x701, 0x0, 0x25dfdbfc, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x16\x00'}]}, 0x1c}}, 0x44080) 3m46.42422067s ago: executing program 5 (id=2862): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1f}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 3m38.772740944s ago: executing program 5 (id=2886): connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) r1 = syz_io_uring_setup(0x5c2, &(0x7f00000003c0)={0x0, 0x2, 0x10, 0x4, 0x219}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r1, 0x6e2, 0x3900, 0x3, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r4, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r4, 0xda90) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet_nvme_of_msg(r5, &(0x7f00000001c0)={@data_h2c={{0x6, 0x2, 0x18, 0x3}, 0x1, 0x8, 0x7ff, 0x7, "103fcafa"}, @val=0x0}, 0x88, 0x0, 0x0, 0x0) 3m35.82363729s ago: executing program 5 (id=2893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r4, 0x0, 0x2000fb) 3m19.410661373s ago: executing program 45 (id=2893): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@security={'security\x00', 0x4, 0x4, 0x448, 0xffffffff, 0x2a8, 0x1d0, 0x1d0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0xffffff00, 0xff], 'dvmrp0\x00', 'vlan0\x00', {0xff}, {}, 0x2f, 0xb, 0x3, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x2, 0x2, 'system_u:object_r:lib_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @local, [], [0x0, 0xffffff00], 'geneve1\x00', 'macvlan0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0xd) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r4, 0x0, 0x2000fb) 2m4.221199582s ago: executing program 1 (id=3089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000004c0)={0x0, @in6={{0x2, 0x4e22, 0x0, @mcast2, 0x1}}, 0x0, 0x4}, &(0x7f0000000300)=0x90) 2m2.866516572s ago: executing program 1 (id=3091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) close(r3) 2m1.725601953s ago: executing program 1 (id=3092): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x23, &(0x7f0000000000), 0x4) recvmsg$unix(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb}, 0x40) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x1}, 0x8) sendmsg$inet(r1, 0x0, 0x20004805) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f00000002c0), 0x0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334844d232279ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f448128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb8"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x1, 0xa, 0x0, 0x0) 2m0.461544946s ago: executing program 1 (id=3096): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xfc, 0x16, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0xa, 0x4, 0x18, 0x19}, [@mark={0xc, 0x15, {0x35075c, 0x1}}]}, 0xfc}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, 0x0, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 1m54.284149644s ago: executing program 1 (id=3107): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) timer_delete(0x0) fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) 1m52.210100397s ago: executing program 1 (id=3112): syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 1m35.939435283s ago: executing program 46 (id=3112): syz_open_dev$tty20(0xc, 0x4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49b, &(0x7f0000000380)={0x0, 0x2c0c, 0x400, 0x7, 0x2000284}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0) 18.369766019s ago: executing program 3 (id=3265): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000180)=@sg0, 0xee01, &(0x7f0000000340)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 16.112585025s ago: executing program 3 (id=3268): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) 14.660358582s ago: executing program 3 (id=3272): open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmctl$IPC_RMID(r2, 0x0) 13.56277095s ago: executing program 0 (id=3274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000003000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 12.309020202s ago: executing program 0 (id=3276): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x95, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x8, 0x4, 0x2, 0x7, 0x87, 0x67, 0x0, 0xfd, 0x5c, 0x0, @rand_addr=0x64010101, @remote, {[@end, @ra={0x94, 0x4, 0x1}, @end, @ra={0x94, 0x4}]}}, "c669edcbd48ceedfb3557caabcc0ca1ce63215e6eb6a89d05ee9489288cfe59ae6c25ad9865201bffd33159cf7db5a89e1a3c261623e8757c7942a546daa823224d0f3720813e1643cc5fa4f64362291835eed2c779b3af3a0ee3f39327e787b19e930e966896b"}}}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) 11.89728741s ago: executing program 2 (id=3277): bpf$TOKEN_CREATE(0x24, &(0x7f0000000340), 0x8) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xbc8) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380), 0xc) unshare(0x20000400) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010102, 0x4e20, 0x3, 'rr\x00', 0x1, 0xa7e, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4f21, 0x3, 'lc\x00', 0x5, 0x8, 0x6c}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e20, 0x10000, 0xcd, 0x1}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11.672732344s ago: executing program 2 (id=3278): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x10000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0xa) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f00000002c0)={0x4a8}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) 11.385957171s ago: executing program 2 (id=3280): syz_open_dev$usbfs(0x0, 0x555d1ea8, 0x4426c3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x674, 0x4080800) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x1, 0x4, 0x2007, 0x1fd}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x50) 10.489742152s ago: executing program 4 (id=3281): socket$inet_udplite(0x2, 0x2, 0x88) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20008004) syz_io_uring_setup(0x339e, &(0x7f0000000200)={0x0, 0x8733, 0x800, 0x0, 0x4}, 0x0, 0x0) fanotify_init(0x8, 0x80000) socket$inet_icmp(0x2, 0x2, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 10.145035942s ago: executing program 0 (id=3282): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) 9.459305665s ago: executing program 2 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000340)='./file0\x00', 0xdafbe5d6891b7d4) r4 = inotify_init1(0x0) r5 = inotify_add_watch(r4, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r3, &(0x7f0000005640)=ANY=[@ANYRES16=r5], 0x69) close(r3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 7.969711048s ago: executing program 2 (id=3284): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty, 0x30}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000001380)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6261636b67726f756e645f67633d73796e632c61636c2c616c6c6f635f6d6f64653d72657573652c696e6c696e655f78617474722c6e6f666c7573685f6d657267652c6d6f64653d6c66732c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c6167655f657874656e745f63616368652c646973636172642c6e6f696e6c696e655f64656e7472792c008bfb3c1e4b1b12ae77c937da8858"], 0x1, 0x5505, &(0x7f0000002480)="$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") r1 = open(&(0x7f0000000440)='./file1\x00', 0x84242, 0x1df2a23c5997fa7f) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x6, 0x0, 0x5, 0x81, 0x1, 0x1, {0x6, 0xff, 0x5, 0x8, 0xe, 0xd615, 0x9, 0x1, 0xfffffffe, 0x1000, 0x5, 0x0, 0xffffffffffffffff, 0x5, 0x2000000}}, {0x0, 0x19}}}, 0xa0) sendfile(r1, r1, &(0x7f0000000080), 0x7f03) 7.779709106s ago: executing program 4 (id=3285): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r3 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x30, 0x0, 0x31]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0x0) keyctl$update(0x2, r3, &(0x7f0000000040)="b8", 0x1) 7.776203104s ago: executing program 0 (id=3286): syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x4ae60) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x80, 0x40}}}}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r3 = dup(r2) r4 = syz_io_uring_setup(0x118d, &(0x7f0000000640)={0x0, 0x8d2dc, 0x80, 0xffffffff, 0x400003c8}, &(0x7f00000003c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x47f5, 0x0, 0x0, 0x0, 0x0) 5.592940273s ago: executing program 4 (id=3287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa", 0x32}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab", 0x1e}], 0x2}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)=""/83, 0x53}], 0x1}, 0x0) 5.561372562s ago: executing program 3 (id=3288): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) io_submit(r4, 0x1, &(0x7f00000012c0)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000200)="0500000093cb1faf16da39de706f646800580f02000000003f420f0000000000ff030f02000000003f420f00000000003bf81b05ff000000", 0x38}]) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000100)='./bus\x00', 0x18418, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$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") 4.479067424s ago: executing program 4 (id=3289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916360000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18487b6feb89752cd600000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe0000000000000000000000000044585397feaadda3fcc64e7b0c08f7ac5c64cb190f1712a3b10fc34eb758705f1751d8c8b712eb39d2b8ad44f129c2c9aedb15"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.350638795s ago: executing program 2 (id=3290): ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x40000) socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0x0) 3.324525654s ago: executing program 0 (id=3291): openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x20980, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0x1) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a9", 0x6, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.67564506s ago: executing program 3 (id=3292): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x522, &(0x7f00000006c0)="$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") sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) setreuid(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000140)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) 1.4919266s ago: executing program 4 (id=3293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x4048084) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x200000ea, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 22.905392ms ago: executing program 4 (id=3294): socket$inet_udplite(0x2, 0x2, 0x88) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x16, 0x0, 0x8400, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x20008004) syz_io_uring_setup(0x339e, &(0x7f0000000200)={0x0, 0x872f, 0x800}, 0x0, 0x0) fanotify_init(0x8, 0x80000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x121e, &(0x7f0000001b00)="$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") lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trusted.'], 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) 11.737497ms ago: executing program 3 (id=3295): syz_clone(0x1e18ae000, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) fcntl$setlease(r0, 0x400, 0x2) 0s ago: executing program 0 (id=3296): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x5b42, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x103fc, 0x159}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 0_macvtap: entered promiscuous mode [ 335.856918][T10424] veth1_macvtap: entered promiscuous mode [ 336.044178][T10424] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.117842][T10424] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.229009][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.269969][T10924] loop2: detected capacity change from 0 to 1024 [ 336.277380][T10924] hfsplus: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ' [ 336.288974][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.364155][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.463625][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.266770][ T764] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.285262][ T764] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.634446][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.670768][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.818815][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 339.434750][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 339.509829][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.546043][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.576411][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 339.597647][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 339.668057][ T9] usb 2-1: Product: syz [ 339.718988][ T9] usb 2-1: Manufacturer: syz [ 339.749862][ T9] hub 2-1:4.0: USB hub found [ 339.961995][ T9] hub 2-1:4.0: 2 ports detected [ 341.206830][ T9] hub 2-1:4.0: activate --> -90 [ 341.411195][T11007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1330'. [ 341.422732][ T5825] usb 2-1: USB disconnect, device number 6 [ 341.433747][ T9] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 341.544938][T10998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.596450][T10998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.193164][T10998] bridge1: left promiscuous mode [ 342.211080][T10998] bridge1: left allmulticast mode [ 342.259141][T11007] bridge_slave_1: left allmulticast mode [ 342.302256][T11007] bridge_slave_1: left promiscuous mode [ 342.316318][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.390797][T11007] bridge_slave_0: left allmulticast mode [ 342.407277][T11007] bridge_slave_0: left promiscuous mode [ 342.428416][ T6008] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 342.437931][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.608493][ T6008] usb 7-1: Using ep0 maxpacket: 32 [ 342.620700][ T6008] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 342.633832][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.643180][ T6008] usb 7-1: config 0 has no interface number 0 [ 342.667131][ T37] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.667863][ T6008] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 342.774336][ T37] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.808541][ T37] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.865822][ T6008] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.063834][ T6008] usb 7-1: Product: syz [ 343.078732][ T6008] usb 7-1: Manufacturer: syz [ 343.083399][ T6008] usb 7-1: SerialNumber: syz [ 343.140074][ T6008] usb 7-1: config 0 descriptor?? [ 343.768019][ T6008] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 343.810321][ T6008] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 344.494010][T11044] netlink: 'syz.7.1341': attribute type 15 has an invalid length. [ 345.269635][ T6008] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 345.337011][ T6008] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 345.414929][ T6008] usb 7-1: USB disconnect, device number 4 [ 346.131096][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 347.298700][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 347.931180][T11104] overlayfs: failed to clone upperpath [ 350.808153][T11168] loop1: detected capacity change from 0 to 128 [ 350.887794][T11168] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 352.193627][T11208] loop2: detected capacity change from 0 to 64 [ 352.861516][T11226] loop6: detected capacity change from 0 to 2048 [ 353.219785][T11235] tipc: Failed to remove unknown binding: 66,1,1/0:2385337091/2385337093 [ 353.289394][T11235] tipc: Failed to remove unknown binding: 66,1,1/0:2385337091/2385337093 [ 353.367516][T11235] tipc: Failed to remove unknown binding: 66,1,1/0:2385337091/2385337093 [ 353.799539][T11240] IPVS: Scheduler module ip_vs_sip not found [ 354.147030][T11256] overlayfs: failed to clone upperpath [ 354.313106][T11253] loop1: detected capacity change from 0 to 4096 [ 354.386760][T11253] EXT4-fs: inline encryption not supported [ 354.483365][T11253] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 354.497381][T11221] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1388'. [ 354.570908][ T5906] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 354.578410][T11253] System zones: 0-5 [ 354.617055][T11253] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.765604][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 354.832180][ T5906] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.903313][ T5906] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.118339][ T30] audit: type=1800 audit(1771707492.507:135): pid=11253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1395" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 355.197443][ T5906] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 355.276559][ T5906] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 355.333376][ T5906] usb 3-1: Product: syz [ 355.337617][ T5906] usb 3-1: Manufacturer: syz [ 355.423707][ T5906] hub 3-1:4.0: USB hub found [ 355.531330][T11283] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 355.538442][T11283] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.622142][ T5906] hub 3-1:4.0: 2 ports detected [ 355.667763][T11283] vhci_hcd vhci_hcd.0: Device attached [ 355.688593][T11289] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 355.769119][T11284] vhci_hcd: connection closed [ 355.778476][ T36] vhci_hcd vhci_hcd.0: stop threads [ 355.839659][ T36] vhci_hcd vhci_hcd.0: release socket [ 355.850259][ T8603] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.916381][ T36] vhci_hcd vhci_hcd.0: disconnect device [ 356.097552][T11299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1407'. [ 356.139271][T11299] bond0: invalid ARP target 0.0.0.0 specified for addition [ 356.164849][T11299] bond0: option arp_ip_target: invalid value (0) [ 356.207379][T11303] netlink: 'syz.6.1408': attribute type 10 has an invalid length. [ 356.273195][T11303] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1408'. [ 356.440944][T11303] team0: Port device geneve0 added [ 356.535013][T11309] overlayfs: failed to clone upperpath [ 356.869777][ T5906] hub 3-1:4.0: activate --> -90 [ 356.926293][T11324] tipc: Enabling of bearer rejected, failed to enable media [ 356.978659][T11321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.016961][T11321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.163274][ T5906] hub 3-1:4.0: hub_ext_port_status failed (err = -71) [ 357.164620][ T6008] usb 3-1: USB disconnect, device number 4 [ 357.177107][T11321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.186432][T11321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.201835][ T30] audit: type=1326 audit(1771707494.597:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7fc00000 [ 357.325721][ T30] audit: type=1326 audit(1771707494.597:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72db59c629 code=0x7fc00000 [ 357.420186][ T30] audit: type=1326 audit(1771707494.597:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11331 comm="syz.4.1418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7fc00000 [ 358.184437][T11348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1421'. [ 358.908408][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 359.289786][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 359.305026][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 359.355285][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 359.420783][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.521738][ T24] usb 1-1: Product: syz [ 359.525959][ T24] usb 1-1: Manufacturer: syz [ 359.555428][ T24] usb 1-1: SerialNumber: syz [ 359.593980][ T24] usb 1-1: config 0 descriptor?? [ 359.647929][ T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 359.659187][ T24] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 360.279785][ T24] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 360.949794][ T24] em28xx 1-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 360.994444][ T24] em28xx 1-1:0.0: board has no eeprom [ 361.209571][ T24] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 361.237377][ T24] em28xx 1-1:0.0: dvb set to bulk mode. [ 361.261241][ T6008] em28xx 1-1:0.0: Binding DVB extension [ 361.318374][ T24] usb 1-1: USB disconnect, device number 7 [ 361.377552][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 361.630031][ T6008] em28xx 1-1:0.0: Registering input extension [ 361.649826][ T24] em28xx 1-1:0.0: Closing input extension [ 361.846872][ T24] em28xx 1-1:0.0: Freeing device [ 362.671175][ T5819] Bluetooth: hci4: command 0x0406 tx timeout [ 364.314852][T11459] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1449'. [ 365.181853][T11472] lo: entered allmulticast mode [ 365.241667][T11471] lo: left allmulticast mode [ 365.313526][T11475] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 366.043278][T11492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 366.119689][T11495] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1457'. [ 366.253643][T11495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1457'. [ 366.509648][ T5933] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 366.684508][ T5933] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 366.708906][ T5933] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 366.761237][ T5933] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.789545][ T5933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.823353][ T30] audit: type=1804 audit(1771707504.207:139): pid=11506 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1462" name="/newroot/132/file0" dev="tmpfs" ino=723 res=1 errno=0 [ 366.864188][T11497] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 366.929330][ T5933] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.157612][T11514] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1465'. [ 367.207684][T11514] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1465'. [ 367.409146][T11518] 9p: Unknown uid 00000000004294967295 [ 367.459824][ T5933] usb 3-1: USB disconnect, device number 5 [ 370.054269][T11583] netlink: 'syz.6.1485': attribute type 13 has an invalid length. [ 370.091650][T11583] netlink: 'syz.6.1485': attribute type 17 has an invalid length. [ 370.438366][T11587] loop6: detected capacity change from 0 to 4096 [ 370.723994][T11587] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 371.095892][T11583] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 371.269268][ T9701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.828432][ T5884] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 375.975889][T11700] uprobe: syz.4.1520:11700 failed to unregister, leaking uprobe [ 375.992575][ T30] audit: type=1804 audit(1771707513.367:140): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1520" name="file0" dev="tmpfs" ino=666 res=1 errno=0 [ 376.009510][ T5884] usb 3-1: Using ep0 maxpacket: 16 [ 376.091359][ T5884] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 376.142957][ T5884] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.173493][ T5884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.218524][ T5884] usb 3-1: Product: syz [ 376.230399][ T5884] usb 3-1: Manufacturer: syz [ 376.245322][ T5884] usb 3-1: SerialNumber: syz [ 376.309806][ T5884] usb 3-1: config 0 descriptor?? [ 376.337969][ T5884] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.419045][ T5884] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 377.117875][ T5884] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 377.437431][ T1148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.597776][T11739] overlayfs: failed to clone lowerpath [ 377.670796][T11741] overlayfs: failed to clone lowerpath [ 377.749175][ T5884] em28xx 3-1:0.0: board has no eeprom [ 377.769931][ T1148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.038347][ T5884] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 378.064945][ T5884] em28xx 3-1:0.0: dvb set to bulk mode. [ 378.086557][ T5933] em28xx 3-1:0.0: Binding DVB extension [ 378.110682][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1534'. [ 378.139360][ T5884] usb 3-1: USB disconnect, device number 6 [ 378.181867][ T5884] em28xx 3-1:0.0: Disconnecting em28xx [ 378.222589][ T1148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.376996][ T5933] em28xx 3-1:0.0: Registering input extension [ 378.405830][ T5884] em28xx 3-1:0.0: Closing input extension [ 378.519038][ T5884] em28xx 3-1:0.0: Freeing device [ 378.693175][ T1148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.815662][T11763] lo: entered allmulticast mode [ 379.386448][ T1148] bridge_slave_1: left allmulticast mode [ 379.423020][ T1148] bridge_slave_1: left promiscuous mode [ 379.437858][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.493421][T11787] tmpfs: Bad value for 'mpol' [ 379.509959][ T1148] bridge_slave_0: left allmulticast mode [ 379.515725][ T1148] bridge_slave_0: left promiscuous mode [ 379.578794][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.070135][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 381.076490][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.254455][T11820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1556'. [ 381.313812][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 381.331453][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 381.352245][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 381.366878][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 381.375327][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 381.385161][ T1148] team0: Port device geneve0 removed [ 381.475717][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.522838][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.560701][ T1148] bond0 (unregistering): Released all slaves [ 381.701808][T11820] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.853403][T11828] macvlan2: entered promiscuous mode [ 381.900594][T11828] macvlan2: entered allmulticast mode [ 381.921056][T11828] bond1: entered promiscuous mode [ 381.937231][T11828] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 381.964417][T11828] bond1: left promiscuous mode [ 382.438913][ T5906] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 382.619984][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 382.629874][ T5906] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 382.644995][ T5906] usb 3-1: config 0 has no interface number 0 [ 382.651921][ T5906] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 382.663048][ T5906] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 382.674836][ T5906] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 382.686500][ T5906] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 382.705338][ T5906] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 382.714536][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.755182][ T5906] usb 3-1: config 0 descriptor?? [ 382.790198][ T5906] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 383.487114][ T51] Bluetooth: hci1: command tx timeout [ 383.619898][ T5906] usb 3-1: USB disconnect, device number 7 [ 383.625802][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 383.645467][T11847] ldusb: No device or device unplugged -19 [ 383.645469][ T5906] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 383.793445][T11825] chnl_net:caif_netlink_parms(): no params data found [ 384.880118][T11913] tipc: Failed to remove unknown binding: 66,1,1/0:95050526/95050528 [ 384.933898][T11913] tipc: Failed to remove unknown binding: 66,1,1/0:95050526/95050528 [ 384.992853][T11825] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.103465][T11825] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.122338][T11825] bridge_slave_0: entered allmulticast mode [ 385.152953][T11825] bridge_slave_0: entered promiscuous mode [ 385.240371][T11825] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.247545][T11825] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.298803][T11825] bridge_slave_1: entered allmulticast mode [ 385.330310][T11825] bridge_slave_1: entered promiscuous mode [ 385.543996][ T51] Bluetooth: hci1: command tx timeout [ 385.695922][T11825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.822944][T11825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.928096][ T1148] hsr_slave_0: left promiscuous mode [ 385.990274][ T1148] hsr_slave_1: left promiscuous mode [ 386.015230][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.017577][T11936] overlayfs: failed to clone upperpath [ 386.043860][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.113353][ T30] audit: type=1804 audit(1771707523.507:141): pid=11936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1583" name="file1" dev="tmpfs" ino=1351 res=1 errno=0 [ 386.166766][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.192488][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.249737][ T1148] veth1_macvtap: left promiscuous mode [ 386.297326][ T1148] veth0_macvtap: left promiscuous mode [ 386.580590][ T1148] veth1_vlan: left promiscuous mode [ 386.797472][ T1148] veth0_vlan: left promiscuous mode [ 386.933438][T11947] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1586'. [ 387.658316][ T51] Bluetooth: hci1: command tx timeout [ 389.469268][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 389.673424][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 389.698367][ T51] Bluetooth: hci1: command tx timeout [ 390.769400][T11825] team0: Port device team_slave_0 added [ 390.803543][T11825] team0: Port device team_slave_1 added [ 390.978661][T11825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.985735][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.165998][T11825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.235921][T11825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.257677][T11825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 391.374316][T11825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.517621][T12038] tipc: Started in network mode [ 392.568379][T12038] tipc: Node identity 7f000001, cluster identity 4711 [ 392.575445][T12038] tipc: Enabling of bearer rejected, failed to enable media [ 392.591677][T12045] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 392.624258][T11825] hsr_slave_0: entered promiscuous mode [ 392.643543][T11825] hsr_slave_1: entered promiscuous mode [ 392.676689][T11825] debugfs: 'hsr0' already exists in 'hsr' [ 392.682933][T11825] Cannot create hsr debugfs directory [ 394.012951][T12100] loop1: detected capacity change from 0 to 256 [ 394.109371][T12100] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 394.222438][T12100] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff) [ 395.237994][T12128] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 395.280420][T12128] block device autoloading is deprecated and will be removed. [ 395.352982][T12137] overlayfs: failed to clone upperpath [ 395.375569][T12131] bond1: entered promiscuous mode [ 395.392628][T12135] macvlan2: entered promiscuous mode [ 395.398966][T12135] macvlan2: entered allmulticast mode [ 395.406815][T12135] bond1: (slave macvlan2): Opening slave failed [ 395.870844][T11825] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 395.914417][T11825] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 395.937428][T11825] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 395.977850][T11825] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 396.046651][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1642'. [ 396.071151][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1642'. [ 396.294865][T11825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 396.362636][T11825] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.404919][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.412247][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.978059][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.985294][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.035632][T11825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.830001][T11825] veth0_vlan: entered promiscuous mode [ 399.874097][T11825] veth1_vlan: entered promiscuous mode [ 400.074296][T11825] veth0_macvtap: entered promiscuous mode [ 400.183672][T11825] veth1_macvtap: entered promiscuous mode [ 400.316126][T11825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.350318][T11825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.405640][ T1139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.454419][ T1139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.491708][ T1148] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.511561][ T1148] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.999633][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.037512][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.206144][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.251571][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.722438][T12264] loop3: detected capacity change from 0 to 512 [ 401.772627][T12264] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 401.833919][T12264] EXT4-fs (loop3): 1 truncate cleaned up [ 401.854524][T12264] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.163105][T11825] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.308114][T12279] Cannot find add_set index 0 as target [ 403.186207][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1677'. [ 403.387072][T12304] netlink: 'syz.3.1681': attribute type 4 has an invalid length. [ 403.890579][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1687'. [ 403.910839][T12329] netlink: 'syz.0.1689': attribute type 5 has an invalid length. [ 404.383507][T12345] netlink: 'syz.7.1695': attribute type 1 has an invalid length. [ 404.602045][T12348] loop3: detected capacity change from 0 to 2048 [ 404.652090][T12345] veth1: entered promiscuous mode [ 404.688569][T12345] bond1: (slave veth1): Enslaving as a backup interface with a down link [ 404.747102][ T5877] loop3: p1 p2 [ 404.766323][T12348] loop3: p1 p2 [ 404.845289][T12359] io-wq is not configured for unbound workers [ 405.229230][ T6086] udevd[6086]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 405.251226][ T5877] udevd[5877]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 407.567505][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1715'. [ 408.299872][T12434] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.497950][T12439] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 408.715619][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 408.724735][T12444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1725'. [ 408.728177][T12439] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 409.828758][T12465] loop3: detected capacity change from 0 to 128 [ 409.946483][T12465] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.114017][T12465] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 410.393953][T12465] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 410.544833][T12483] trusted_key: syz.4.1734 sent an empty control message without MSG_MORE. [ 410.651008][T11825] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 410.976255][T12496] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 411.586248][T12518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1743'. [ 411.859064][T12521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 412.061057][T12521] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.138794][T12528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1744'. [ 412.194126][T12528] nbd: socks must be embedded in a SOCK_ITEM attr [ 412.422091][T12551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1750'. [ 412.482548][T12551] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1750'. [ 412.602184][T12556] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 412.786830][ T5877] udevd[5877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 413.004277][T12564] binder: BINDER_SET_CONTEXT_MGR already set [ 413.040256][T12564] binder: 12563:12564 ioctl 4018620d 200000004a80 returned -16 [ 413.863075][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 414.169467][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1760'. [ 414.440175][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1761'. [ 414.596498][T12583] bond2: entered promiscuous mode [ 414.649657][T12583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.817047][T12588] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.855444][T12588] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 414.882477][T12588] bond2: (slave sit1): Error -95 calling set_mac_address [ 415.634206][ T51] Bluetooth: hci4: unexpected event for opcode 0x0c47 [ 415.754041][T12612] xt_hashlimit: size too large, truncated to 1048576 [ 416.202588][T12617] overlayfs: bad index found (index=index/00fb210001624a43e3954248c3bc713adce042442f926d88256502000000000000, ftype=2000, origin ftype=a000). [ 419.292890][T12662] Illegal XDP return value 4294967294 on prog (id 143) dev syz_tun, expect packet loss! [ 419.699179][ T51] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 419.708085][ T51] Bluetooth: hci4: Injecting HCI hardware error event [ 419.718191][ T51] Bluetooth: hci4: hardware error 0x00 [ 420.108497][ T791] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 420.338461][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 420.352849][T12685] vivid-000: disconnect [ 420.398428][ T791] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 420.484656][ T791] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 420.518955][ T5819] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 420.537048][ T791] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 420.587985][T12679] vivid-000: reconnect [ 420.588555][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.668296][ T791] usb 1-1: Product: syz [ 420.672510][ T791] usb 1-1: Manufacturer: syz [ 420.677103][ T791] usb 1-1: SerialNumber: syz [ 420.749205][ T791] usb 1-1: config 0 descriptor?? [ 420.796823][ T791] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 420.858404][ T791] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 421.177381][T12698] random: crng reseeded on system resumption [ 421.390945][ T791] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 421.399236][ T791] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 421.911495][T12713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1796'. [ 421.941853][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 422.049810][ T791] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 422.255659][T12713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 422.262633][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 422.280531][ T791] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 422.290233][ T791] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 422.339240][ T791] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 422.398650][ T791] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 422.450043][ T791] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 422.728784][ T791] usb 1-1: USB disconnect, device number 8 [ 422.817903][ T9] libceph: connect (1)[c::]:6789 error -101 [ 422.841993][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 422.899727][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 422.916038][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 422.922843][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 422.929108][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 423.202589][ T791] libceph: connect (1)[c::]:6789 error -101 [ 423.209017][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 423.216311][T12726] ceph: No mds server is up or the cluster is laggy [ 423.263046][ T9] libceph: connect (1)[c::]:6789 error -101 [ 423.323787][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 423.335400][T12732] ceph: No mds server is up or the cluster is laggy [ 423.336247][ T791] libceph: connect (1)[c::]:6789 error -101 [ 423.418378][T12731] ceph: No mds server is up or the cluster is laggy [ 423.457942][ T791] libceph: mon0 (1)[c::]:6789 connect error [ 423.979277][ T5825] libceph: connect (1)[c::]:6789 error -101 [ 423.985842][ T5825] libceph: mon0 (1)[c::]:6789 connect error [ 426.070736][ T791] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 426.272602][ T791] usb 3-1: Using ep0 maxpacket: 32 [ 426.302111][ T791] usb 3-1: config 0 has no interfaces? [ 426.307644][ T791] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 426.358376][ T791] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.423574][ T791] usb 3-1: config 0 descriptor?? [ 427.854296][ T791] usb 3-1: USB disconnect, device number 8 [ 428.665292][T12857] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1820'. [ 428.742684][T12857] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 429.307583][ T30] audit: type=1326 audit(1771707566.697:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 429.408937][ T30] audit: type=1326 audit(1771707566.697:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 429.551649][ T30] audit: type=1326 audit(1771707566.707:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 429.645406][ T30] audit: type=1326 audit(1771707566.707:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 429.815949][ T30] audit: type=1326 audit(1771707566.707:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 429.939561][ T30] audit: type=1326 audit(1771707566.717:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 430.584145][ T30] audit: type=1326 audit(1771707566.717:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 432.297239][ T30] audit: type=1326 audit(1771707566.717:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 432.414064][T12904] overlayfs: failed to set uuid (119/file0, err=-1); falling back to uuid=null. [ 432.448738][ T30] audit: type=1326 audit(1771707566.737:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 432.490156][T12904] overlayfs: failed to verify upper root origin [ 432.579013][ T30] audit: type=1326 audit(1771707566.737:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12871 comm="syz.4.1826" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f72db59c629 code=0x7ffc0000 [ 432.687660][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 434.128072][ T5899] IPVS: starting estimator thread 0... [ 434.278492][T12943] IPVS: using max 33 ests per chain, 79200 per kthread [ 434.340380][ T5819] Bluetooth: hci2: command 0x0406 tx timeout [ 436.728421][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 436.737703][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 436.749432][ T5819] Bluetooth: hci1: hardware error 0x00 [ 437.052645][T12993] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1858'. [ 437.215822][T12993] bridge0: port 1(veth0_to_bond) entered blocking state [ 437.488886][T12993] bridge0: port 1(veth0_to_bond) entered disabled state [ 437.538527][ T6013] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 437.552028][T12993] veth0_to_bond: entered allmulticast mode [ 437.591498][T12993] veth0_to_bond: entered promiscuous mode [ 437.720819][ T6013] usb 3-1: Using ep0 maxpacket: 8 [ 437.797972][ T6013] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 437.846985][ T6013] usb 3-1: config 179 has no interface number 0 [ 437.863704][ T6013] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 437.906567][ T6013] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 437.948316][ T6013] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 437.972814][ T6013] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 438.010639][ T6013] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 438.043583][ T6013] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 438.060714][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.105914][T13000] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 438.773815][ T6013] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input10 [ 438.816924][T13000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.072627][T13000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.138867][ T5819] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 439.435109][ T5933] usb 3-1: USB disconnect, device number 9 [ 439.435613][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 439.449356][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 442.517418][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 442.528626][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.588654][ T36] bridge_slave_1: left allmulticast mode [ 442.594364][ T36] bridge_slave_1: left promiscuous mode [ 442.626051][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.670071][ T36] bridge_slave_0: left allmulticast mode [ 442.696218][ T36] bridge_slave_0: left promiscuous mode [ 442.708573][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.141751][T13092] overlayfs: failed to clone upperpath [ 443.695041][T13094] netlink: 'syz.2.1886': attribute type 1 has an invalid length. [ 443.875570][T13101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1888'. [ 444.417422][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.460266][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.486728][ T36] bond0 (unregistering): Released all slaves [ 444.523154][T13094] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 445.486821][T13112] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 447.086351][ T36] hsr_slave_0: left promiscuous mode [ 447.121231][T13168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.214477][ T36] hsr_slave_1: left promiscuous mode [ 447.226501][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.293644][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.396833][T13172] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 447.431854][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.440512][T13172] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1907'. [ 447.483342][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 448.851190][ T36] veth1_macvtap: left promiscuous mode [ 448.868629][ T36] veth0_macvtap: left promiscuous mode [ 448.892017][ T36] veth1_vlan: left promiscuous mode [ 448.922695][ T36] veth0_vlan: left promiscuous mode [ 450.464290][ T36] team0 (unregistering): Port device team_slave_1 removed [ 450.584218][ T36] team0 (unregistering): Port device team_slave_0 removed [ 453.029403][T13278] netlink: 'syz.3.1935': attribute type 1 has an invalid length. [ 453.150081][T13278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.279999][T13285] overlayfs: failed to clone upperpath [ 453.325998][T13278] bond1: (slave ip6gretap1): making interface the new active one [ 453.393048][T13288] netlink: 'syz.1.1938': attribute type 39 has an invalid length. [ 453.420116][T13278] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 453.958002][T13306] overlayfs: failed to clone upperpath [ 454.282083][T13309] batadv_slave_0: entered promiscuous mode [ 455.478699][T13308] batadv_slave_0: left promiscuous mode [ 461.334114][T13382] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1960'. [ 461.567775][T13389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1960'. [ 461.945796][T13394] overlayfs: failed to clone upperpath [ 461.999658][T13398] overlayfs: failed to clone upperpath [ 462.808752][T13409] tipc: Failed to remove unknown binding: 66,0,0/0:3654405122/3654405123 [ 462.862340][T13409] tipc: Failed to remove unknown binding: 66,0,0/0:3654405122/3654405123 [ 463.154988][T13417] netlink: 'syz.0.1968': attribute type 4 has an invalid length. [ 463.222297][T13417] netlink: 'syz.0.1968': attribute type 4 has an invalid length. [ 465.082198][T13447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1978'. [ 465.127346][T13444] loop2: detected capacity change from 0 to 256 [ 465.523801][T13444] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 466.989939][T13471] loop2: detected capacity change from 0 to 4096 [ 467.145856][T13471] ntfs3(loop2): Failed to initialize $Extend/$ObjId. [ 468.468455][ T5933] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 468.476296][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 468.801038][T13521] overlayfs: failed to clone lowerpath [ 468.818334][ T5933] usb 3-1: device descriptor read/64, error -32 [ 469.108478][ T5933] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 469.480231][ T5933] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.218624][ T5933] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 470.232193][ T5933] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 470.241834][ T5933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.252855][ T5933] usb 3-1: Product: syz [ 470.257671][ T5933] usb 3-1: Manufacturer: syz [ 470.263165][ T5933] usb 3-1: SerialNumber: syz [ 470.798532][ T5933] cdc_ncm 3-1:1.0: bind() failure [ 470.861498][ T5933] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 470.912392][ T5933] cdc_ncm 3-1:1.1: bind() failure [ 470.958440][ T5933] usb 3-1: USB disconnect, device number 11 [ 476.340894][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 476.340919][ T30] audit: type=1804 audit(1771707613.737:158): pid=13644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2019" name="/newroot/118/file0" dev="tmpfs" ino=689 res=1 errno=0 [ 476.638726][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 476.729164][T13660] netlink: 'syz.3.2025': attribute type 4 has an invalid length. [ 476.819622][T13660] netlink: 'syz.3.2025': attribute type 4 has an invalid length. [ 476.863415][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.907614][ T24] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 476.961841][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.018999][ T24] usb 3-1: config 0 descriptor?? [ 477.334806][T13650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.456382][T13650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.185159][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 478.247739][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 478.470163][ T24] usb 3-1: USB disconnect, device number 12 [ 479.467225][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2038'. [ 479.512486][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2038'. [ 482.848880][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 483.784207][T13763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2054'. [ 483.855008][T13765] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2054'. [ 483.945453][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.953211][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.999864][T13765] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.007102][T13765] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.014721][T13765] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.021922][T13765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.067172][T13765] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2054'. [ 484.133912][T13765] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.143497][T13765] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.196024][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.231750][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.274072][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.321357][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.356901][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.389491][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.434892][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.455052][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.467735][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 484.524606][T13768] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 489.014620][T13844] overlayfs: failed to clone upperpath [ 491.246973][T13874] overlayfs: failed to clone upperpath [ 492.413379][ T30] audit: type=1326 audit(1771707629.807:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13897 comm="syz.1.2092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01d3f9c629 code=0x0 [ 493.505338][T13922] netlink: 'syz.2.2098': attribute type 10 has an invalid length. [ 493.610861][T13925] bond0: (slave bond_slave_0): Releasing backup interface [ 493.714829][T13925] bond0: (slave bond_slave_1): Releasing backup interface [ 493.827722][T13925] team0: Port device team_slave_0 removed [ 493.923421][T13925] team0: Port device team_slave_1 removed [ 493.961214][T13925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.055915][T13925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.188074][T13925] net_ratelimit: 3 callbacks suppressed [ 494.188094][T13925] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 494.318550][T13922] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 495.460234][T13959] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 498.348383][ T5948] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 498.500216][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 498.532124][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.593978][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.649412][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 498.705815][ T5948] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 498.762635][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.814555][ T5948] usb 1-1: config 0 descriptor?? [ 499.301224][ T5948] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 499.366503][ T5948] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 499.546478][ T5948] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input11 [ 499.901655][ T5948] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 499.934794][ T5948] usb 1-1: USB disconnect, device number 9 [ 500.231151][T13919] udevd[13919]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 500.315697][T13919] udevd[13919]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 500.593247][T14041] fido_id[14041]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 503.834002][ T6008] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 503.947145][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.953565][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.132422][ T6008] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.175900][ T6008] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 504.215697][ T6008] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.256050][ T6008] usb 1-1: config 0 descriptor?? [ 504.314793][ T6008] pwc: Askey VC010 type 2 USB webcam detected. [ 504.560640][ T6008] pwc: send_video_command error -71 [ 504.602959][ T6008] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 504.645475][ T6008] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 504.693644][T14102] overlayfs: failed to resolve './file1': -2 [ 504.710215][ T6008] usb 1-1: USB disconnect, device number 10 [ 504.750535][T14090] syz.1.2133 (14090) used greatest stack depth: 17472 bytes left [ 505.500904][T14122] netlink: 'syz.0.2142': attribute type 1 has an invalid length. [ 505.640718][T14134] overlayfs: failed to clone upperpath [ 505.734172][T14122] 8021q: adding VLAN 0 to HW filter on device bond2 [ 505.881047][T14131] bond2: (slave veth3): Enslaving as an active interface with a down link [ 505.934634][T14135] bond2: (slave veth0_to_bond): making interface the new active one [ 505.950518][T14135] veth0_to_bond: entered promiscuous mode [ 505.967006][T14135] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 513.768407][ T30] audit: type=1326 audit(1771707651.157:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 513.878332][ T30] audit: type=1326 audit(1771707651.207:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 513.971860][ T30] audit: type=1326 audit(1771707651.207:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.125980][ T30] audit: type=1326 audit(1771707651.207:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.253569][ T30] audit: type=1326 audit(1771707651.207:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.332970][ T30] audit: type=1326 audit(1771707651.217:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.423514][ T30] audit: type=1326 audit(1771707651.217:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.456400][ T30] audit: type=1326 audit(1771707651.217:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.525694][ T30] audit: type=1326 audit(1771707651.217:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.602267][ T30] audit: type=1326 audit(1771707651.217:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14251 comm="syz.2.2172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 514.807099][T14290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.840005][T14292] loop2: detected capacity change from 0 to 128 [ 514.920489][T14290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.664271][T12775] veth0_to_bond: left promiscuous mode [ 523.650770][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 523.650793][ T30] audit: type=1326 audit(1771707661.037:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 523.848351][ T30] audit: type=1326 audit(1771707661.107:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.074799][ T30] audit: type=1326 audit(1771707661.107:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.225683][ T30] audit: type=1326 audit(1771707661.107:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.379544][ T30] audit: type=1326 audit(1771707661.107:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25c79c2bb code=0x7ffc0000 [ 524.472600][ T30] audit: type=1326 audit(1771707661.107:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.606344][ T30] audit: type=1326 audit(1771707661.107:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.712272][ T30] audit: type=1326 audit(1771707661.107:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.811784][ T30] audit: type=1326 audit(1771707661.107:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 524.927238][ T30] audit: type=1326 audit(1771707661.107:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14414 comm="syz.3.2217" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x7ffc0000 [ 526.413476][T14463] tipc: Failed to remove unknown binding: 66,0,0/0:1695298257/1695298258 [ 526.473968][T14463] tipc: Failed to remove unknown binding: 66,0,0/0:1695298257/1695298258 [ 527.124576][T14481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2235'. [ 527.179422][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 527.234426][T12763] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.234656][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 527.295752][T14484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2235'. [ 527.328830][T14488] tipc: Failed to remove unknown binding: 66,0,0/0:1258440615/1258440617 [ 527.352524][T14488] tipc: Failed to remove unknown binding: 66,0,0/0:1258440615/1258440616 [ 527.377438][T14488] tipc: Failed to remove unknown binding: 66,0,0/0:1258440615/1258440617 [ 527.386494][ T13] wlan1: Trigger new scan to find an IBSS to join [ 527.437913][T14488] tipc: Failed to remove unknown binding: 66,0,0/0:1258440615/1258440616 [ 527.480915][T12763] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.506634][T12763] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.515627][T12763] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 527.609693][T14491] ptrace attach of "./syz-executor exec"[7121] was attempted by "./syz-executor exec"[14491] [ 529.483022][T14513] overlayfs: failed to clone upperpath [ 529.610270][T14524] overlayfs: failed to resolve './file1': -2 [ 530.384227][T14514] process 'newroot/277/bus/file0' started with executable stack [ 530.553640][T14527] loop2: detected capacity change from 0 to 4096 [ 530.636885][T14527] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512). [ 530.691923][T14527] ntfs3(loop2): ino=3, mi_enum_attr [ 530.755810][T14527] ntfs3(loop2): Failed to initialize $Secure::$SDH (-22). [ 530.781035][T14527] ntfs3(loop2): Failed to initialize $Secure (-22). [ 532.341702][T12775] wlan1: Trigger new scan to find an IBSS to join [ 534.999564][T12775] wlan1: Creating new IBSS network, BSSID ee:2c:a2:5c:f7:15 [ 537.956967][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.964503][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.512475][T14617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.547786][T14617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.915925][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 539.915949][ T30] audit: type=1326 audit(1771707677.307:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.021290][ T30] audit: type=1326 audit(1771707677.307:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.098322][ T30] audit: type=1326 audit(1771707677.307:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.175482][ T30] audit: type=1326 audit(1771707677.307:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.233459][ T30] audit: type=1326 audit(1771707677.307:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.245216][ T5906] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 540.311305][ T30] audit: type=1326 audit(1771707677.307:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.370867][ T13] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.409292][ T13] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.418091][ T30] audit: type=1326 audit(1771707677.307:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.515950][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.529818][ T5906] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.539434][ T30] audit: type=1326 audit(1771707677.317:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.628771][ T5906] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 540.638323][ T30] audit: type=1326 audit(1771707677.317:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.661304][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 540.743332][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 540.773182][ T30] audit: type=1326 audit(1771707677.327:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14653 comm="syz.2.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fddaed9c629 code=0x7ffc0000 [ 540.799214][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.852028][ T5906] usb 3-1: Product: syz [ 540.856272][ T5906] usb 3-1: Manufacturer: syz [ 540.898030][ T5906] usb 3-1: SerialNumber: syz [ 540.945430][ T5906] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 540.997268][ T5906] cdc_ncm 3-1:1.0: bind() failure [ 541.036939][ T5906] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 541.498781][ T5906] cdc_ncm 3-1:1.1: bind() failure [ 541.653259][ T791] usb 3-1: USB disconnect, device number 13 [ 543.863642][T14702] input: syz0 as /devices/virtual/input/input12 [ 544.710330][T14718] 9pnet: p9_errstr2errno: server reported unknown error 0x0 [ 549.196409][T14766] overlayfs: failed to clone upperpath [ 549.316910][T14765] 8021q: adding VLAN 0 to HW filter on device bond3 [ 549.428751][T14769] bond_slave_0: entered promiscuous mode [ 549.435019][T14769] bond_slave_1: entered promiscuous mode [ 549.480917][T14769] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.593807][T14769] bond3: (slave macvlan2): making interface the new active one [ 549.642851][T14769] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 551.950403][ T791] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 552.111634][ T791] usb 1-1: Using ep0 maxpacket: 16 [ 552.133495][ T791] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 552.171389][ T791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.211313][ T791] usb 1-1: Product: syz [ 552.453047][ T791] usb 1-1: Manufacturer: syz [ 552.468468][ T791] usb 1-1: SerialNumber: syz [ 552.538824][ T791] r8152-cfgselector 1-1: Unknown version 0x0000 [ 552.554138][ T791] r8152-cfgselector 1-1: config 0 descriptor?? [ 553.555791][T14838] netlink: 'syz.7.2332': attribute type 83 has an invalid length. [ 555.515729][T14660] r8152-cfgselector 1-1: USB disconnect, device number 11 [ 555.868419][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:641768066/641768068 [ 555.913917][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:641768066/641768067 [ 555.946677][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:641768066/641768068 [ 556.007855][T14872] tipc: Failed to remove unknown binding: 66,0,0/0:641768066/641768067 [ 557.820085][T14902] tipc: Failed to remove unknown binding: 66,0,0/0:605800295/605800297 [ 557.928468][T14902] tipc: Failed to remove unknown binding: 66,0,0/0:605800295/605800296 [ 557.967630][T14902] tipc: Failed to remove unknown binding: 66,0,0/0:605800295/605800297 [ 558.008022][T14902] tipc: Failed to remove unknown binding: 66,0,0/0:605800295/605800296 [ 558.256764][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 558.256791][ T30] audit: type=1804 audit(1771707695.627:298): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2350" name="bus" dev="ramfs" ino=43500 res=1 errno=0 [ 558.398399][ T30] audit: type=1804 audit(1771707695.647:299): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2350" name="bus" dev="ramfs" ino=43500 res=1 errno=0 [ 559.006390][T14931] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2356'. [ 559.645568][T14939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.862241][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 559.871972][T14957] syz_tun: entered allmulticast mode [ 559.915580][T14958] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2363'. [ 559.918414][T14955] syz_tun: left allmulticast mode [ 560.138129][T14956] team1: entered promiscuous mode [ 560.168025][T14956] team1: entered allmulticast mode [ 560.217480][T14956] 8021q: adding VLAN 0 to HW filter on device team1 [ 560.251888][T14958] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 560.543184][T14958] team2: entered promiscuous mode [ 561.548439][T14958] team2: entered allmulticast mode [ 561.554091][T14958] 8021q: adding VLAN 0 to HW filter on device team2 [ 562.007706][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 562.258472][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2371'. [ 565.409268][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.415743][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.519738][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 568.025375][T15052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2386'. [ 568.145373][T15054] veth1_to_bond: entered promiscuous mode [ 568.185722][T15054] veth1_to_bond: entered allmulticast mode [ 570.154072][T15090] loop2: detected capacity change from 0 to 128 [ 570.260177][T15090] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 570.430983][T15090] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 571.539054][T15124] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 576.727501][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2438'. [ 576.853587][T15212] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2438'. [ 578.261035][T15232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2443'. [ 579.079336][T15236] netlink: 'syz.1.2444': attribute type 10 has an invalid length. [ 579.206632][T15236] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.214043][T15236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.301115][T15236] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 580.311027][T15261] overlayfs: failed to clone upperpath [ 580.340692][ T30] audit: type=1800 audit(1771707717.727:300): pid=15259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2452" name="file1" dev="tmpfs" ino=1540 res=0 errno=0 [ 581.517861][T15280] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2456'. [ 585.912213][ T30] audit: type=1326 audit(1771707723.227:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15329 comm="syz.3.2472" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa25c79c629 code=0x0 [ 589.170212][T15364] netlink: 'syz.1.2460': attribute type 4 has an invalid length. [ 589.329549][T15364] netlink: 'syz.1.2460': attribute type 4 has an invalid length. [ 590.281023][T15374] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2483'. [ 590.290657][T15374] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2483'. [ 590.552506][T15386] capability: warning: `syz.0.2484' uses 32-bit capabilities (legacy support in use) [ 590.688796][T15391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2485'. [ 590.950332][T15395] netlink: 17780 bytes leftover after parsing attributes in process `syz.1.2487'. [ 591.794351][T15398] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 594.580021][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 594.784183][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 594.867576][T15431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2499'. [ 597.534824][T12777] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 603.010833][T14039] IPVS: starting estimator thread 0... [ 603.139638][T15527] IPVS: using max 26 ests per chain, 62400 per kthread [ 603.323612][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 603.561994][T15529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 604.906467][ T30] audit: type=1804 audit(1771707742.297:302): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2533" name="bus" dev="ramfs" ino=45638 res=1 errno=0 [ 604.994384][ T30] audit: type=1804 audit(1771707742.327:303): pid=15541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2533" name="bus" dev="ramfs" ino=45638 res=1 errno=0 [ 609.540817][T15571] overlayfs: failed to clone upperpath [ 617.827091][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 617.840493][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 617.850868][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 617.862794][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 617.879292][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 620.025771][ T5819] Bluetooth: hci6: command tx timeout [ 622.133329][ T5819] Bluetooth: hci6: command tx timeout [ 624.188398][ T5819] Bluetooth: hci6: command tx timeout [ 626.258493][ T5819] Bluetooth: hci6: command tx timeout [ 626.376011][T15662] loop2: detected capacity change from 0 to 1024 [ 626.491991][T15621] chnl_net:caif_netlink_parms(): no params data found [ 626.644890][T15662] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.823999][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.840458][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.895883][T10014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.931723][ T30] audit: type=1800 audit(1771707765.297:304): pid=15682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2571" name="bus" dev="ramfs" ino=46682 res=0 errno=0 [ 628.243750][T12777] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.488993][T15675] netlink: 'syz.1.2569': attribute type 12 has an invalid length. [ 629.280330][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 629.439815][T15689] ip6gre1: entered promiscuous mode [ 629.445261][T15689] ip6gre1: entered allmulticast mode [ 629.524026][T15693] netlink: 'syz.2.2573': attribute type 6 has an invalid length. [ 629.575702][T15693] netlink: 'syz.2.2573': attribute type 7 has an invalid length. [ 629.858505][T15693] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2573'. [ 634.605463][T15732] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2584'. [ 634.803174][T12777] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.800801][T15621] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.822210][T15621] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.040573][T15621] bridge_slave_0: entered allmulticast mode [ 636.113998][T15621] bridge_slave_0: entered promiscuous mode [ 636.179151][T15754] Invalid option length (57448) for dns_resolver key [ 636.880665][T15621] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.888060][T15621] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.973630][T15621] bridge_slave_1: entered allmulticast mode [ 636.999257][T15621] bridge_slave_1: entered promiscuous mode [ 637.475108][T12777] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.517503][T15775] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 638.551284][T15621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.656942][T12777] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.768005][T15621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.040992][T15621] team0: Port device team_slave_0 added [ 640.161108][T15621] team0: Port device team_slave_1 added [ 641.480743][T15621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.511724][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.555631][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2603'. [ 641.596301][T15621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.814435][T15621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.878447][T15621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 641.953184][T15621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.265304][T15621] hsr_slave_0: entered promiscuous mode [ 644.353787][T15621] hsr_slave_1: entered promiscuous mode [ 644.371860][T15621] debugfs: 'hsr0' already exists in 'hsr' [ 644.396494][T15621] Cannot create hsr debugfs directory [ 644.423461][ T30] audit: type=1804 audit(1771707781.807:305): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2608" name="file0" dev="hugetlbfs" ino=47109 res=1 errno=0 [ 644.498359][ T30] audit: type=1804 audit(1771707781.817:306): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2608" name="file0" dev="hugetlbfs" ino=47109 res=1 errno=0 [ 644.603123][T12777] veth0_to_bond: left allmulticast mode [ 644.608930][T12777] veth0_to_bond: left promiscuous mode [ 644.634906][T12777] bridge0: port 1(veth0_to_bond) entered disabled state [ 644.939884][T12777] bond_slave_0: left promiscuous mode [ 644.965579][T12777] bond_slave_1: left promiscuous mode [ 647.239390][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358d1800: rx timeout, send abort [ 647.545977][T12777] bond3 (unregistering): (slave macvlan2): Releasing active interface [ 647.572900][T12777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.594699][T12777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.624811][T12777] bond0 (unregistering): Released all slaves [ 647.672269][T12777] bond1 (unregistering): (slave veth1): Releasing backup interface [ 647.691747][T12777] bond1 (unregistering): Released all slaves [ 647.739530][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054469c00: rx timeout, send abort [ 647.747865][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880358d1800: abort rx timeout. Force session deactivation [ 647.765839][T12777] bond2 (unregistering): Released all slaves [ 647.852390][T12777] bond3 (unregistering): Released all slaves [ 648.247867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054469c00: abort rx timeout. Force session deactivation [ 650.729551][ T5819] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 651.702743][T15907] overlayfs: bad index found (index=index/00fb21000128149cd3666b4d299c2da075c3bd77d195debfd60f05000000000000, ftype=2000, origin ftype=a000). [ 651.726343][T15907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2628'. [ 651.747889][T15907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2628'. [ 653.244190][T12777] hsr_slave_0: left promiscuous mode [ 653.273364][T12777] hsr_slave_1: left promiscuous mode [ 654.140591][T12777] veth1_macvtap: left promiscuous mode [ 654.164344][T12777] veth0_macvtap: left promiscuous mode [ 654.210079][T12777] veth1_vlan: left promiscuous mode [ 654.215405][T12777] veth0_vlan: left promiscuous mode [ 655.751018][T15938] xt_socket: unknown flags 0x50 [ 656.944992][T15947] netlink: 'syz.2.2641': attribute type 21 has an invalid length. [ 656.953510][T15947] IPv6: NLM_F_CREATE should be specified when creating new route [ 661.011005][T15991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2655'. [ 662.412021][T16011] loop2: detected capacity change from 0 to 128 [ 663.181943][T16011] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 663.306269][T16011] ext4 filesystem being mounted at /229/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 663.374542][T15621] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 663.424722][T15621] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 663.526474][T15621] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 663.565540][T16011] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2658'. [ 663.613781][T15621] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 664.139653][T15621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.192993][T15621] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.246296][T12767] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.253543][T12767] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.348599][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.355856][T12767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.364829][T10014] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 664.507140][T15621] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 664.570504][T15621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.681307][ T6008] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 664.868494][ T6008] usb 1-1: device descriptor read/64, error -71 [ 665.178411][ T6008] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 665.282457][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 666.164993][T12775] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 666.253494][ T6008] usb 1-1: device descriptor read/64, error -71 [ 666.331888][T16078] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 666.369011][T16069] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2671'. [ 666.386128][ T6008] usb usb1-port1: attempt power cycle [ 667.362751][T15621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 667.725019][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 667.798436][T16084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2675'. [ 667.862953][T16089] loop2: detected capacity change from 0 to 1024 [ 668.062434][T16089] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 668.182442][ T5819] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 668.197596][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.197756][ T5819] Tainted: [L]=SOFTLOCKUP [ 668.197773][ T5819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.197793][ T5819] Workqueue: hci0 hci_rx_work [ 668.197889][ T5819] Call Trace: [ 668.197903][ T5819] [ 668.197917][ T5819] dump_stack_lvl+0xe8/0x150 [ 668.197979][ T5819] sysfs_create_dir_ns+0x271/0x2a0 [ 668.198040][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.198094][ T5819] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 668.198150][ T5819] ? do_raw_spin_unlock+0xf5/0x210 [ 668.198202][ T5819] kobject_add_internal+0x62b/0xd00 [ 668.198255][ T5819] kobject_add+0x163/0x240 [ 668.198283][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.198332][ T5819] ? __pfx_kobject_add+0x10/0x10 [ 668.198365][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.198403][ T5819] ? _raw_spin_unlock+0x28/0x50 [ 668.198460][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.198513][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.198554][ T5819] ? get_device_parent+0x366/0x3a0 [ 668.198639][ T5819] device_add+0x408/0xb70 [ 668.198710][ T5819] hci_conn_add_sysfs+0xd5/0x210 [ 668.198775][ T5819] le_conn_complete_evt+0xf1d/0x1430 [ 668.198822][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.198881][ T5819] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 668.198923][ T5819] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 668.198980][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.199020][ T5819] ? __pfx___mutex_lock+0x10/0x10 [ 668.199074][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.199103][ T5819] ? skb_pull_data+0xfb/0x200 [ 668.199150][ T5819] hci_le_enh_conn_complete_evt+0x189/0x490 [ 668.199182][ T5819] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 668.199229][ T5819] hci_event_packet+0x7af/0x12c0 [ 668.199293][ T5819] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 668.199319][ T5819] ? __pfx_hci_event_packet+0x10/0x10 [ 668.199368][ T5819] ? kcov_remote_start+0x49a/0x7a0 [ 668.199419][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.199453][ T5819] ? hci_send_to_monitor+0xe2/0x590 [ 668.199498][ T5819] hci_rx_work+0x3ee/0x1030 [ 668.199545][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.199643][ T5819] ? process_scheduled_works+0xa25/0x1830 [ 668.199698][ T5819] process_scheduled_works+0xb02/0x1830 [ 668.199783][ T5819] ? __pfx_process_scheduled_works+0x10/0x10 [ 668.199834][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.199868][ T5819] ? assign_work+0x3d5/0x5e0 [ 668.199918][ T5819] worker_thread+0xa50/0xfc0 [ 668.199978][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.200017][ T5819] kthread+0x388/0x470 [ 668.200044][ T5819] ? __pfx_worker_thread+0x10/0x10 [ 668.200076][ T5819] ? __pfx_kthread+0x10/0x10 [ 668.200105][ T5819] ret_from_fork+0x51e/0xb90 [ 668.200144][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.200181][ T5819] ? __pfx_ret_from_fork+0x10/0x10 [ 668.200210][ T5819] ? srso_alias_return_thunk+0x5/0xfbef5 [ 668.200237][ T5819] ? __switch_to+0xc7d/0x1450 [ 668.200273][ T5819] ? __pfx_kthread+0x10/0x10 [ 668.200300][ T5819] ret_from_fork_asm+0x1a/0x30 [ 668.200355][ T5819] [ 668.529948][ T5819] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 668.548998][ T5819] Bluetooth: hci0: failed to register connection device [ 668.571422][T16110] Invalid source name [ 668.575691][T16110] UBIFS error (pid: 16110): cannot open "./file0", error -22 [ 669.559454][T10014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 670.798032][T15621] veth0_vlan: entered promiscuous mode [ 670.864675][T15621] veth1_vlan: entered promiscuous mode [ 670.985542][T15621] veth0_macvtap: entered promiscuous mode [ 671.035761][T15621] veth1_macvtap: entered promiscuous mode [ 671.151575][T15621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 671.203703][T15621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 672.738132][ T85] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.848374][ T85] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.091751][ T85] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.130891][ T85] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.807429][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 673.843224][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 674.063832][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 674.117086][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 678.233729][T16112] Bluetooth: hci6: ISO packet for unknown connection handle 816 [ 678.955382][T16286] loop5: detected capacity change from 0 to 256 [ 679.169165][T16286] exfat: Deprecated parameter 'utf8' [ 679.938750][T16286] exfat: Deprecated parameter 'namecase' [ 679.944556][T16286] exfat: Deprecated parameter 'utf8' [ 680.214058][T16286] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 682.386251][T16314] loop2: detected capacity change from 0 to 1024 [ 682.397105][T16314] EXT4-fs: quotafile must be on filesystem root [ 682.765087][T16334] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 682.771667][T16334] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 682.783414][T16334] vhci_hcd vhci_hcd.0: Device attached [ 682.798551][T16334] loop2: detected capacity change from 0 to 512 [ 682.821169][T16334] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.2731: inode has both inline data and extents flags [ 682.835918][T16334] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 682.837944][T16334] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.2731: couldn't read orphan inode 15 (err -117) [ 682.847211][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 682.847236][ C0] EXT4-fs (loop2): initial error at time 1771707820: ext4_orphan_get:1391: inode 15 [ 682.847271][ C0] EXT4-fs (loop2): last error at time 1771707820: ext4_orphan_get:1391: inode 15 [ 682.885933][T16334] loop2: lost filesystem error report for type 5 error -117 [ 682.922528][T16334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 683.248391][ T6008] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 683.531787][T16335] vhci_hcd: connection reset by peer [ 683.689173][T12765] vhci_hcd vhci_hcd.2: stop threads [ 683.946649][T12765] vhci_hcd vhci_hcd.2: release socket [ 683.986678][T12765] vhci_hcd vhci_hcd.2: disconnect device [ 684.213757][T10014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.237735][T16367] lo: entered allmulticast mode [ 685.267164][T16366] lo: left allmulticast mode [ 687.202565][T16404] netlink: 'syz.0.2749': attribute type 2 has an invalid length. [ 688.560698][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.603763][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.858400][ T6008] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 689.171346][T16413] loop5: detected capacity change from 0 to 8192 [ 689.411868][T16427] loop2: detected capacity change from 0 to 32768 [ 689.534081][ T111] ERROR: (device loop2): dbFree: error in block map [ 689.534081][ T111] [ 689.631568][ T111] ERROR: (device loop2): remounting filesystem as read-only [ 696.862566][T16483] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 697.181164][T16493] x_tables: duplicate entry at hook 1 [ 698.682852][T16510] binder: BINDER_SET_CONTEXT_MGR already set [ 698.726058][T16510] binder: 16509:16510 ioctl 4018620d 200000000040 returned -16 [ 699.113679][T12773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 701.232109][ T30] audit: type=1804 audit(1771707838.627:307): pid=16575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2789" name="file0" dev="tmpfs" ino=1979 res=1 errno=0 [ 701.262943][T16575] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 701.938547][T16575] ref_ctr increment failed for inode: 0x7bb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888036aa24c0 [ 702.225042][T16582] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 702.268427][T16582] ref_ctr decrement failed for inode: 0x7bb offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888036aa24c0 [ 702.451812][T16582] uprobe: syz.1.2789:16582 failed to unregister, leaking uprobe [ 702.477241][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2793'. [ 703.847359][T16609] loop2: detected capacity change from 0 to 16 [ 703.885297][T16609] erofs (device loop2): too large lz4 pclusterblks 1792 [ 706.038362][ T6008] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 707.056282][ T6008] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.074534][ T6008] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 707.085547][ T6008] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 707.096466][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 707.105999][ T6008] usb 3-1: SerialNumber: syz [ 708.300691][ T6008] usb 3-1: 0:2 : does not exist [ 708.378464][ T6008] usb 3-1: USB disconnect, device number 14 [ 709.232404][T15897] udevd[15897]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 709.554539][T16686] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2817'. [ 714.839537][T16751] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2834'. [ 722.398912][T16812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2848'. [ 722.799151][T16822] veth1_macvtap: left promiscuous mode [ 723.587446][T16822] macsec0: entered promiscuous mode [ 730.058846][T16894] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 730.773723][ T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 730.918581][T16899] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 731.087717][T16902] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 731.367810][ T5906] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 731.423067][ T5906] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 732.439249][T16919] fido_id[16919]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 739.268539][T17007] netlink: 'syz.0.2890': attribute type 7 has an invalid length. [ 739.453356][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053804c00: rx timeout, send abort [ 739.953515][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053805400: rx timeout, send abort [ 739.983516][T17010] xt_SECMARK: invalid mode: 2 [ 740.461826][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053805400: abort rx timeout. Force session deactivation [ 741.678305][T16112] Bluetooth: hci6: command 0x0406 tx timeout [ 746.556441][T17065] ptrace attach of ""[17066] was attempted by "./syz-executor exec"[17065] [ 749.853207][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.644503][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.230683][T17110] netlink: 'syz.1.2921': attribute type 11 has an invalid length. [ 759.169925][T16112] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 759.185711][T16112] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 759.204294][T16112] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 759.238609][T16112] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 759.251985][T16112] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 761.332034][T16112] Bluetooth: hci5: command tx timeout [ 762.681670][ T985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 763.471274][T16112] Bluetooth: hci5: command tx timeout [ 766.098358][T16112] Bluetooth: hci5: command tx timeout [ 768.178527][T16112] Bluetooth: hci5: command tx timeout [ 768.391734][T12771] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.802691][T17248] 9p: Bad value for 'rfdno' [ 768.817471][T17145] chnl_net:caif_netlink_parms(): no params data found [ 771.924115][T17273] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2958'. [ 771.958113][T12771] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.978553][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 773.120307][T12771] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.423660][T12771] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.684868][T17145] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.710493][T17145] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.729374][T17145] bridge_slave_0: entered allmulticast mode [ 775.788899][T17145] bridge_slave_0: entered promiscuous mode [ 775.803914][T17145] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.832947][T17145] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.841322][T17308] sctp: [Deprecated]: syz.0.2968 (pid 17308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 775.841322][T17308] Use struct sctp_sack_info instead [ 775.919807][T17145] bridge_slave_1: entered allmulticast mode [ 775.928117][T17145] bridge_slave_1: entered promiscuous mode [ 776.114756][T17316] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2965'. [ 777.455823][T17145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 777.524530][T17145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.927239][T17145] team0: Port device team_slave_0 added [ 780.372153][T17145] team0: Port device team_slave_1 added [ 781.351250][T17145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.378685][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.416233][T17145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.552054][T12771] bridge_slave_1: left allmulticast mode [ 782.557890][T12771] bridge_slave_1: left promiscuous mode [ 782.563978][T12771] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.893480][T12771] bridge_slave_0: left allmulticast mode [ 783.428712][T12771] bridge_slave_0: left promiscuous mode [ 783.890236][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.901706][T17380] 9p: Bad value for 'rfdno' [ 785.670113][T12771] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.699888][T12771] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.729714][T12771] bond0 (unregistering): Released all slaves [ 785.819292][T17145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.828341][T17145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.944048][T17145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.064600][T17380] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.570359][T17145] hsr_slave_0: entered promiscuous mode [ 787.577594][T17145] hsr_slave_1: entered promiscuous mode [ 787.587493][T17145] debugfs: 'hsr0' already exists in 'hsr' [ 787.620842][T17145] Cannot create hsr debugfs directory [ 788.659457][T12771] hsr_slave_0: left promiscuous mode [ 788.718474][T12771] hsr_slave_1: left promiscuous mode [ 788.737184][T12771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 788.751115][T12771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 788.952339][T12771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.938390][T12771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.412576][T12771] veth1_macvtap: left promiscuous mode [ 790.418159][T12771] veth0_macvtap: left promiscuous mode [ 790.447492][T12771] veth1_vlan: left promiscuous mode [ 790.464576][T12771] veth0_vlan: left promiscuous mode [ 793.790847][T17498] loop2: detected capacity change from 0 to 2048 [ 793.912447][T17498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 795.244728][T17497] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 795.302498][T12771] team0 (unregistering): Port device team_slave_1 removed [ 795.311112][T17497] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 16 with error 28 [ 795.342617][T17497] EXT4-fs (loop2): This should not happen!! Data will be lost [ 795.342617][T17497] [ 795.353445][T12771] team0 (unregistering): Port device team_slave_0 removed [ 795.398383][T17497] EXT4-fs (loop2): Total free blocks count 0 [ 795.413956][T17497] EXT4-fs (loop2): Free/Dirty block details [ 795.429821][T17497] EXT4-fs (loop2): free_blocks=4096 [ 795.445670][T17497] EXT4-fs (loop2): dirty_blocks=16 [ 795.510420][T17497] EXT4-fs (loop2): Block reservation details [ 795.580921][T17497] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 796.192636][T10014] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 796.321948][T17496] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 796.708290][ T1139] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 797.372850][T17516] vlan2: entered promiscuous mode [ 797.378011][T17516] bridge0: entered promiscuous mode [ 798.638863][T17541] overlay: ./file1 is not a directory [ 799.980968][T17556] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.3024'. [ 811.256968][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 811.266381][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.610904][T17646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3044'. [ 814.250260][T17145] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 814.272309][T17145] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 814.330152][T17145] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 815.534938][T17145] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 819.037898][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 819.731656][T17697] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3058'. [ 819.762088][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 819.881746][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 819.892233][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 819.900600][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 822.418559][ T51] Bluetooth: hci6: command tx timeout [ 824.498422][ T51] Bluetooth: hci6: command tx timeout [ 827.280350][ T51] Bluetooth: hci6: command tx timeout [ 828.236562][T17699] chnl_net:caif_netlink_parms(): no params data found [ 829.312767][T16112] Bluetooth: hci6: command tx timeout [ 829.634591][T12765] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 830.527354][T17805] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3086'. [ 833.047156][T17699] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.068665][T17699] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.076126][T17699] bridge_slave_0: entered allmulticast mode [ 833.138446][T17699] bridge_slave_0: entered promiscuous mode [ 833.156858][T17699] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.195505][T17699] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.228995][T17699] bridge_slave_1: entered allmulticast mode [ 833.237472][T17699] bridge_slave_1: entered promiscuous mode [ 834.044695][ T764] bridge_slave_1: left allmulticast mode [ 834.098361][ T764] bridge_slave_1: left promiscuous mode [ 834.158584][ T764] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.209357][ T764] bridge_slave_0: left allmulticast mode [ 834.215048][ T764] bridge_slave_0: left promiscuous mode [ 834.294385][ T764] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.332522][T17856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3096'. [ 838.979148][ T764] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 839.903674][ T764] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.369779][ T764] bond0 (unregistering): Released all slaves [ 841.371366][T17699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.398190][T17699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.811835][T17955] Invalid source name [ 843.816065][T17955] UBIFS error (pid: 17955): cannot open "ubifs", error -22 [ 844.543351][ T764] hsr_slave_0: left promiscuous mode [ 845.223984][T17961] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3118'. [ 845.297903][ T764] hsr_slave_1: left promiscuous mode [ 845.330858][ T764] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 847.749003][ T764] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.464731][T18001] kAFS: unable to lookup cell '(' [ 852.481814][T18002] kAFS: unable to lookup cell '(,c¾ûL' [ 852.558979][T18005] random: crng reseeded on system resumption [ 853.016922][ T764] team0 (unregistering): Port device team_slave_1 removed [ 853.990213][ T764] team0 (unregistering): Port device team_slave_0 removed [ 859.911114][T17699] team0: Port device team_slave_0 added [ 859.980443][T17699] team0: Port device team_slave_1 added [ 860.413414][T18060] loop2: detected capacity change from 0 to 256 [ 860.554176][T18060] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 860.765183][T17699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.758905][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 862.048493][T17699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 862.930325][T17699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 862.937301][T17699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.069178][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 863.204130][T17699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.246533][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 863.290898][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 863.311211][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 863.383269][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 863.395577][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 863.658989][T17699] hsr_slave_0: entered promiscuous mode [ 863.706634][T17699] hsr_slave_1: entered promiscuous mode [ 863.741146][T17699] debugfs: 'hsr0' already exists in 'hsr' [ 864.658295][T17699] Cannot create hsr debugfs directory [ 864.731394][T18092] Invalid option length (1043233) for dns_resolver key [ 864.878987][T18095] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3147'. [ 864.966640][T18092] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3147'. [ 865.481155][ T51] Bluetooth: hci5: command tx timeout [ 867.636362][ T51] Bluetooth: hci5: command tx timeout [ 868.261590][T18121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 870.288494][ T51] Bluetooth: hci5: command tx timeout [ 872.368445][ T51] Bluetooth: hci5: command tx timeout [ 872.608915][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.615273][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.587959][T18081] chnl_net:caif_netlink_parms(): no params data found [ 876.237630][T18081] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.245588][T18081] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.257951][T18081] bridge_slave_0: entered allmulticast mode [ 876.266646][T18081] bridge_slave_0: entered promiscuous mode [ 877.251316][T18081] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.276733][T18081] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.286926][T18081] bridge_slave_1: entered allmulticast mode [ 877.324686][T18081] bridge_slave_1: entered promiscuous mode [ 877.340102][T18193] loop2: detected capacity change from 0 to 512 [ 877.396515][T18193] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 879.831529][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 879.877412][T16112] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 879.898190][T16112] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 879.925107][T16112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 879.934668][ T1148] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.946805][T16112] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 879.959242][T16112] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 880.420945][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 880.469393][ T1148] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.600235][T18081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.622448][T18081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.022234][ T51] Bluetooth: hci3: command tx timeout [ 882.736033][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.968331][ T1148] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.104136][ T51] Bluetooth: hci3: command tx timeout [ 884.124732][T18081] team0: Port device team_slave_0 added [ 884.960680][T18081] team0: Port device team_slave_1 added [ 886.188610][ T51] Bluetooth: hci3: command tx timeout [ 887.212509][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 887.360185][ T1148] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.653246][T18279] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 888.274186][ T51] Bluetooth: hci3: command tx timeout [ 889.683749][T18081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 889.728597][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.816051][T18081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 891.740228][T18081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 891.747218][T18081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 891.932506][T18081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 892.629383][T18320] overlayfs: failed to resolve './bus': -2 [ 893.895023][T18081] hsr_slave_0: entered promiscuous mode [ 893.952949][T18081] hsr_slave_1: entered promiscuous mode [ 894.532207][T18081] debugfs: 'hsr0' already exists in 'hsr' [ 894.538830][T18081] Cannot create hsr debugfs directory [ 896.047628][ T9603] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 896.188539][ T1148] bridge_slave_0: left allmulticast mode [ 896.194211][ T1148] bridge_slave_0: left promiscuous mode [ 896.240803][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.289336][T13532] IPVS: starting estimator thread 0... [ 897.488754][T18370] IPVS: using max 26 ests per chain, 62400 per kthread [ 898.020872][ T1148] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 899.986830][ T1148] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 900.021336][ T1148] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - c2:1e:dc:50:7b:f9 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 900.137032][ T1148] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 900.198370][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.230736][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 900.246599][ T1148] bond0 (unregistering): Released all slaves [ 900.291025][ T1148] bond1 (unregistering): Released all slaves [ 900.359663][ T1148] bond2 (unregistering): Released all slaves [ 900.675622][ T1148] tipc: Left network mode [ 900.743360][T18214] chnl_net:caif_netlink_parms(): no params data found [ 904.448479][ T6008] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 904.758463][ T6008] usb 1-1: Using ep0 maxpacket: 8 [ 905.458516][ T6008] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 905.467591][ T6008] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.488475][ T6008] usb 1-1: Product: syz [ 905.492680][ T6008] usb 1-1: Manufacturer: syz [ 905.497286][ T6008] usb 1-1: SerialNumber: syz [ 905.554963][ T6008] usb 1-1: config 0 descriptor?? [ 906.841666][ T6008] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 908.048912][ T6008] gspca_sunplus: reg_w_riv err -110 [ 908.071181][ T6008] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 908.078569][T18214] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.086442][T18214] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.210038][T18214] bridge_slave_0: entered allmulticast mode [ 908.247425][T18214] bridge_slave_0: entered promiscuous mode [ 908.343107][T18214] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.114189][T18214] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.128615][T18214] bridge_slave_1: entered allmulticast mode [ 909.211414][T18214] bridge_slave_1: entered promiscuous mode [ 909.240318][ T6008] usb 1-1: USB disconnect, device number 15 [ 909.622102][ T1148] hsr_slave_0: left promiscuous mode [ 910.003994][T18470] sd 0:0:1:0: device reset [ 910.016266][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 910.038911][ T1148] hsr_slave_1: left promiscuous mode [ 910.045363][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.093870][T18477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3220'. [ 910.103629][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.136456][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3219'. [ 910.273533][ T1148] veth1_macvtap: left promiscuous mode [ 910.279177][ T1148] veth0_macvtap: left promiscuous mode [ 910.285203][ T1148] veth1_vlan: left promiscuous mode [ 910.291611][ T1148] veth0_vlan: left promiscuous mode [ 913.642891][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 913.740162][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 914.277506][T18214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.312768][T18522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3226'. [ 914.332583][T18214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.000879][T18214] team0: Port device team_slave_0 added [ 917.451036][T18214] team0: Port device team_slave_1 added [ 917.467418][T18081] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 917.509354][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3232'. [ 918.556609][T18214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 918.598488][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 918.677964][T18214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 918.727364][T18081] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 919.481567][T18577] ptrace attach of ""[18578] was attempted by "./syz-executor exec"[18577] [ 920.094890][T18214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.575698][T18214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.996646][T18214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.923633][T18214] hsr_slave_0: entered promiscuous mode [ 922.769974][T18214] hsr_slave_1: entered promiscuous mode [ 922.805133][T18214] debugfs: 'hsr0' already exists in 'hsr' [ 922.841924][T18214] Cannot create hsr debugfs directory [ 922.929447][T18603] loop2: detected capacity change from 0 to 128 [ 923.104775][T18607] netlink: 'syz.0.3244': attribute type 13 has an invalid length. [ 923.112909][T18607] netlink: 'syz.0.3244': attribute type 17 has an invalid length. [ 923.347745][T16112] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 923.495000][T16112] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 923.504987][T16112] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 923.513297][T16112] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 923.521604][T16112] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 925.705600][T16112] Bluetooth: hci6: command tx timeout [ 927.363172][ T764] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 927.444716][T18607] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 929.191887][T16112] Bluetooth: hci6: command tx timeout [ 931.301065][T16112] Bluetooth: hci6: command tx timeout [ 933.378476][T16112] Bluetooth: hci6: command tx timeout [ 934.032672][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 934.039520][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.116382][T18698] bridge1: entered promiscuous mode [ 936.121681][T18698] bridge1: entered allmulticast mode [ 937.589762][ T1148] bridge_slave_1: left allmulticast mode [ 937.638519][T14660] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 938.445008][ T1148] bridge_slave_1: left promiscuous mode [ 938.605153][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.624262][ T1148] bridge_slave_0: left allmulticast mode [ 938.637833][ T1148] bridge_slave_0: left promiscuous mode [ 938.646529][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.750372][T14660] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 938.767519][T14660] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 938.788772][T14660] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 938.819330][T14660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 938.851254][T14660] usb 3-1: SerialNumber: syz [ 940.015653][T14660] usb 3-1: 0:2 : does not exist [ 940.613746][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 940.951012][T14660] usb 3-1: USB disconnect, device number 15 [ 941.144927][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 941.157609][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 941.175624][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 941.191462][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 941.191761][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.215340][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 941.217841][T18708] udevd[18708]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 941.317878][ T1148] bond0 (unregistering): Released all slaves [ 942.532069][T18604] chnl_net:caif_netlink_parms(): no params data found [ 942.600528][T18763] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 942.706776][ T1148] hsr_slave_0: left promiscuous mode [ 942.739087][ T1148] hsr_slave_1: left promiscuous mode [ 942.747114][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 942.771199][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 943.388788][T16112] Bluetooth: hci5: command tx timeout [ 943.486617][T18777] No such timeout policy "syz0" [ 945.248033][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 945.496213][T16112] Bluetooth: hci5: command tx timeout [ 946.779082][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 947.161295][T18797] loop2: detected capacity change from 0 to 40427 [ 947.222857][T18797] F2FS-fs (loop2): invalid crc value [ 947.297157][T18797] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 947.309730][T18797] F2FS-fs (loop2): Start checkpoint disabled! [ 947.374326][T18797] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 947.388899][T18797] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 947.454096][ T30] audit: type=1800 audit(1771708340.851:308): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3284" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 947.566623][T16112] Bluetooth: hci5: command tx timeout [ 947.598438][T13532] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 949.287284][T18807] syz.2.3284: attempt to access beyond end of device [ 949.287284][T18807] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 949.719411][T16112] Bluetooth: hci5: command tx timeout [ 951.268393][T13532] usb 1-1: device descriptor read/all, error -71 [ 951.330954][ T764] kworker/u8:6: attempt to access beyond end of device [ 951.330954][ T764] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 951.404773][ T764] CPU: 0 UID: 0 PID: 764 Comm: kworker/u8:6 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.404817][ T764] Tainted: [L]=SOFTLOCKUP [ 951.404827][ T764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 951.404845][ T764] Workqueue: writeback wb_workfn (flush-7:2) [ 951.404889][ T764] Call Trace: [ 951.404901][ T764] [ 951.404913][ T764] dump_stack_lvl+0xe8/0x150 [ 951.404958][ T764] f2fs_handle_critical_error+0x37c/0x540 [ 951.405032][ T764] f2fs_write_end_io+0xcdb/0xff0 [ 951.405095][ T764] __submit_merged_bio+0x256/0x700 [ 951.405143][ T764] __submit_merged_write_cond+0x3c9/0x4e0 [ 951.405203][ T764] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 951.405277][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.405325][ T764] f2fs_write_data_pages+0x2975/0x35e0 [ 951.405355][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.405386][ T764] ? lock_release+0x4b/0x3d0 [ 951.405482][ T764] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 951.405534][ T764] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 951.405626][ T764] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 951.405686][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.405750][ T764] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 951.405799][ T764] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 951.405832][ T764] do_writepages+0x32e/0x550 [ 951.405879][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.405909][ T764] ? reacquire_held_locks+0x104/0x190 [ 951.405948][ T764] ? writeback_sb_inodes+0x43d/0x19a0 [ 951.405990][ T764] __writeback_single_inode+0x133/0x11a0 [ 951.406028][ T764] ? do_raw_spin_unlock+0xf5/0x210 [ 951.406062][ T764] writeback_sb_inodes+0x944/0x19a0 [ 951.406104][ T764] ? ret_from_fork_asm+0x1a/0x30 [ 951.406164][ T764] ? __lock_acquire+0x6b5/0x2cf0 [ 951.406206][ T764] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 951.406237][ T764] ? do_raw_spin_lock+0x12b/0x2f0 [ 951.406320][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406351][ T764] ? rcu_is_watching+0x15/0xb0 [ 951.406393][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406435][ T764] wb_writeback+0x456/0xb70 [ 951.406473][ T764] ? queue_io+0x291/0x4a0 [ 951.406518][ T764] ? __pfx_wb_writeback+0x10/0x10 [ 951.406548][ T764] ? do_raw_spin_lock+0x12b/0x2f0 [ 951.406598][ T764] wb_workfn+0x414/0xf50 [ 951.406629][ T764] ? look_up_lock_class+0x57/0x110 [ 951.406692][ T764] ? __pfx_wb_workfn+0x10/0x10 [ 951.406716][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406751][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406786][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406816][ T764] ? do_raw_spin_unlock+0xf5/0x210 [ 951.406846][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406875][ T764] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 951.406918][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406952][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.406984][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.407018][ T764] ? process_scheduled_works+0xa25/0x1830 [ 951.407052][ T764] ? process_scheduled_works+0xa25/0x1830 [ 951.407089][ T764] process_scheduled_works+0xb02/0x1830 [ 951.407170][ T764] ? __pfx_process_scheduled_works+0x10/0x10 [ 951.407215][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.407245][ T764] ? assign_work+0x3d5/0x5e0 [ 951.407287][ T764] worker_thread+0xa50/0xfc0 [ 951.407330][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.407382][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.407426][ T764] kthread+0x388/0x470 [ 951.407453][ T764] ? __pfx_worker_thread+0x10/0x10 [ 951.407486][ T764] ? __pfx_kthread+0x10/0x10 [ 951.407514][ T764] ret_from_fork+0x51e/0xb90 [ 951.407555][ T764] ? __pfx_ret_from_fork+0x10/0x10 [ 951.407587][ T764] ? srso_alias_return_thunk+0x5/0xfbef5 [ 951.407617][ T764] ? __switch_to+0xc7d/0x1450 [ 951.407654][ T764] ? __pfx_kthread+0x10/0x10 [ 951.407682][ T764] ret_from_fork_asm+0x1a/0x30 [ 951.407746][ T764] [ 951.407758][ T764] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 954.962724][T18848] [ 954.965090][T18848] ===================================================== [ 954.972122][T18848] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 954.979607][T18848] syzkaller #0 Tainted: G L [ 954.985678][T18848] ----------------------------------------------------- [ 954.992610][T18848] syz.3.3295/18848 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 955.000425][T18848] ffffffff8e40c058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 955.009079][T18848] [ 955.009079][T18848] and this task is already holding: [ 955.016630][T18848] ffff888022288ba0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 955.025371][T18848] which would create a new lock dependency: [ 955.031350][T18848] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 955.038998][T18848] [ 955.038998][T18848] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 955.048456][T18848] (&dev->event_lock#2){..-.}-{3:3} [ 955.048508][T18848] [ 955.048508][T18848] ... which became SOFTIRQ-irq-safe at: [ 955.061481][T18848] lock_acquire+0xf0/0x2e0 [ 955.066176][T18848] _raw_spin_lock_irqsave+0x40/0x60 [ 955.071563][T18848] input_inject_event+0xa5/0x340 [ 955.076731][T18848] led_trigger_event+0x138/0x210 [ 955.081777][T18848] kbd_bh+0x1f3/0x300 [ 955.085862][T18848] tasklet_action_common+0x2da/0x4b0 [ 955.091248][T18848] handle_softirqs+0x22a/0x870 [ 955.096104][T18848] run_ksoftirqd+0x36/0x60 [ 955.100735][T18848] smpboot_thread_fn+0x541/0xa50 [ 955.105926][T18848] kthread+0x388/0x470 [ 955.110095][T18848] ret_from_fork+0x51e/0xb90 [ 955.114796][T18848] ret_from_fork_asm+0x1a/0x30 [ 955.119683][T18848] [ 955.119683][T18848] to a SOFTIRQ-irq-unsafe lock: [ 955.126707][T18848] (tasklist_lock){.+.+}-{3:3} [ 955.126754][T18848] [ 955.126754][T18848] ... which became SOFTIRQ-irq-unsafe at: [ 955.139385][T18848] ... [ 955.139403][T18848] lock_acquire+0xf0/0x2e0 [ 955.146489][T18848] _raw_read_lock+0x36/0x50 [ 955.151101][T18848] __do_wait+0xde/0x740 [ 955.155369][T18848] do_wait+0x1e7/0x540 [ 955.159535][T18848] kernel_wait+0xd6/0x1c0 [ 955.163961][T18848] call_usermodehelper_exec_work+0xbe/0x230 [ 955.170095][T18848] process_scheduled_works+0xb02/0x1830 [ 955.175901][T18848] worker_thread+0xa50/0xfc0 [ 955.180579][T18848] kthread+0x388/0x470 [ 955.184819][T18848] ret_from_fork+0x51e/0xb90 [ 955.189602][T18848] ret_from_fork_asm+0x1a/0x30 [ 955.194548][T18848] [ 955.194548][T18848] other info that might help us debug this: [ 955.194548][T18848] [ 955.204941][T18848] Chain exists of: [ 955.204941][T18848] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 955.204941][T18848] [ 955.218112][T18848] Possible interrupt unsafe locking scenario: [ 955.218112][T18848] [ 955.226624][T18848] CPU0 CPU1 [ 955.232000][T18848] ---- ---- [ 955.237440][T18848] lock(tasklist_lock); [ 955.241684][T18848] local_irq_disable(); [ 955.248422][T18848] lock(&dev->event_lock#2); [ 955.255632][T18848] lock(&f_owner->lock); [ 955.262572][T18848] [ 955.266015][T18848] lock(&dev->event_lock#2); [ 955.271059][T18848] [ 955.271059][T18848] *** DEADLOCK *** [ 955.271059][T18848] [ 955.279192][T18848] 6 locks held by syz.3.3295/18848: [ 955.284375][T18848] #0: ffff88807b414420 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 955.293540][T18848] #1: ffffffff8e901bb0 (file_rwsem){.+.+}-{0:0}, at: __break_lease+0x4de/0x1e80 [ 955.302805][T18848] #2: ffff888034a0dc78 (&ctx->flc_lock){+.+.}-{3:3}, at: __break_lease+0x4e8/0x1e80 [ 955.312499][T18848] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0 [ 955.321566][T18848] #4: ffff88807b6cc750 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0 [ 955.330718][T18848] #5: ffff888022288ba0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 955.339870][T18848] [ 955.339870][T18848] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 955.350353][T18848] -> (&dev->event_lock#2){..-.}-{3:3} { [ 955.356279][T18848] IN-SOFTIRQ-W at: [ 955.360623][T18848] lock_acquire+0xf0/0x2e0 [ 955.367401][T18848] _raw_spin_lock_irqsave+0x40/0x60 [ 955.374964][T18848] input_inject_event+0xa5/0x340 [ 955.382444][T18848] led_trigger_event+0x138/0x210 [ 955.389739][T18848] kbd_bh+0x1f3/0x300 [ 955.396151][T18848] tasklet_action_common+0x2da/0x4b0 [ 955.403790][T18848] handle_softirqs+0x22a/0x870 [ 955.410906][T18848] run_ksoftirqd+0x36/0x60 [ 955.417675][T18848] smpboot_thread_fn+0x541/0xa50 [ 955.424968][T18848] kthread+0x388/0x470 [ 955.431386][T18848] ret_from_fork+0x51e/0xb90 [ 955.438374][T18848] ret_from_fork_asm+0x1a/0x30 [ 955.445491][T18848] INITIAL USE at: [ 955.449728][T18848] lock_acquire+0xf0/0x2e0 [ 955.456750][T18848] _raw_spin_lock_irqsave+0x40/0x60 [ 955.464212][T18848] input_inject_event+0xa5/0x340 [ 955.471429][T18848] kbd_led_trigger_activate+0xbc/0x100 [ 955.479159][T18848] led_trigger_set+0x535/0x960 [ 955.486236][T18848] led_trigger_set_default+0x260/0x2a0 [ 955.494127][T18848] led_classdev_register_ext+0x787/0x9c0 [ 955.502015][T18848] input_leds_connect+0x517/0x790 [ 955.509301][T18848] input_register_device+0xd00/0x1160 [ 955.516927][T18848] atkbd_connect+0x731/0xa50 [ 955.523776][T18848] serio_driver_probe+0x82/0xd0 [ 955.530913][T18848] really_probe+0x267/0xaf0 [ 955.537674][T18848] __driver_probe_device+0x18c/0x320 [ 955.545214][T18848] driver_probe_device+0x4f/0x240 [ 955.552492][T18848] __driver_attach+0x3e7/0x710 [ 955.559533][T18848] bus_for_each_dev+0x23b/0x2c0 [ 955.566643][T18848] serio_handle_event+0x20a/0xdd0 [ 955.574200][T18848] process_scheduled_works+0xb02/0x1830 [ 955.582097][T18848] worker_thread+0xa50/0xfc0 [ 955.588949][T18848] kthread+0x388/0x470 [ 955.595446][T18848] ret_from_fork+0x51e/0xb90 [ 955.602301][T18848] ret_from_fork_asm+0x1a/0x30 [ 955.609332][T18848] } [ 955.612161][T18848] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 955.621532][T18848] -> (kbd_event_lock){....}-{3:3} { [ 955.627019][T18848] INITIAL USE at: [ 955.631201][T18848] lock_acquire+0xf0/0x2e0 [ 955.637753][T18848] _raw_spin_lock_irqsave+0x40/0x60 [ 955.645313][T18848] vt_reset_unicode+0x2b/0x1a0 [ 955.652177][T18848] reset_vc+0x68/0x1b0 [ 955.660055][T18848] vc_init+0x70/0x4a0 [ 955.666209][T18848] con_init+0x377/0x6a0 [ 955.672447][T18848] console_init+0x10b/0x4d0 [ 955.679550][T18848] start_kernel+0x22b/0x3d0 [ 955.686151][T18848] x86_64_start_reservations+0x24/0x30 [ 955.694039][T18848] x86_64_start_kernel+0x143/0x1c0 [ 955.701238][T18848] common_startup_64+0x13e/0x147 [ 955.708520][T18848] } [ 955.711265][T18848] ... key at: [] kbd_event_lock+0x18/0xa0 [ 955.719336][T18848] ... acquired at: [ 955.723558][T18848] _raw_spin_lock+0x2e/0x40 [ 955.728235][T18848] kbd_event+0xd6/0x40d0 [ 955.732658][T18848] input_handle_events_default+0xd4/0x1a0 [ 955.738563][T18848] input_pass_values+0x288/0x890 [ 955.743681][T18848] input_event_dispose+0x330/0x6b0 [ 955.749089][T18848] input_inject_event+0x1dd/0x340 [ 955.754298][T18848] evdev_write+0x325/0x4c0 [ 955.758892][T18848] vfs_write+0x29a/0xb90 [ 955.763299][T18848] ksys_write+0x150/0x270 [ 955.767788][T18848] do_syscall_64+0x14d/0xf80 [ 955.772571][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.778731][T18848] [ 955.781044][T18848] -> (&tty->flow.lock){....}-{3:3} { [ 955.786522][T18848] INITIAL USE at: [ 955.790576][T18848] lock_acquire+0xf0/0x2e0 [ 955.796909][T18848] _raw_spin_lock_irqsave+0x40/0x60 [ 955.804079][T18848] start_tty+0x20/0x70 [ 955.810081][T18848] n_tty_set_termios+0xa7c/0x10c0 [ 955.817028][T18848] tty_set_termios+0xdb3/0x1800 [ 955.823794][T18848] set_termios+0x566/0x710 [ 955.830130][T18848] tty_mode_ioctl+0x4a6/0x7d0 [ 955.836810][T18848] tty_ioctl+0x9c5/0xde0 [ 955.842981][T18848] __se_sys_ioctl+0xfc/0x170 [ 955.849490][T18848] do_syscall_64+0x14d/0xf80 [ 955.856099][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.863904][T18848] } [ 955.866652][T18848] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 955.875553][T18848] ... acquired at: [ 955.879526][T18848] _raw_spin_lock_irqsave+0x40/0x60 [ 955.884991][T18848] stop_tty+0x2f/0x150 [ 955.889233][T18848] kbd_event+0x2ec1/0x40d0 [ 955.893834][T18848] input_handle_events_default+0xd4/0x1a0 [ 955.899815][T18848] input_pass_values+0x288/0x890 [ 955.905009][T18848] input_event_dispose+0x330/0x6b0 [ 955.910307][T18848] input_inject_event+0x1dd/0x340 [ 955.915511][T18848] evdev_write+0x325/0x4c0 [ 955.920102][T18848] vfs_write+0x29a/0xb90 [ 955.924950][T18848] ksys_write+0x150/0x270 [ 955.929530][T18848] do_syscall_64+0x14d/0xf80 [ 955.934302][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 955.940366][T18848] [ 955.942676][T18848] -> (&new->fa_lock){....}-{3:3} { [ 955.947898][T18848] INITIAL USE at: [ 955.952044][T18848] lock_acquire+0xf0/0x2e0 [ 955.958208][T18848] _raw_write_lock_irq+0x3d/0x50 [ 955.965143][T18848] fasync_remove_entry+0xf1/0x1c0 [ 955.972011][T18848] __fput+0x8a5/0xa70 [ 955.977763][T18848] task_work_run+0x1d9/0x270 [ 955.984436][T18848] exit_to_user_mode_loop+0xed/0x480 [ 955.991494][T18848] do_syscall_64+0x32d/0xf80 [ 955.997910][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.005771][T18848] INITIAL READ USE at: [ 956.010286][T18848] lock_acquire+0xf0/0x2e0 [ 956.017323][T18848] _raw_read_lock_irqsave+0x48/0x60 [ 956.024706][T18848] kill_fasync+0x199/0x4d0 [ 956.031398][T18848] mousedev_write+0x8f9/0x950 [ 956.038573][T18848] vfs_writev+0x4bd/0x990 [ 956.045091][T18848] do_writev+0x154/0x2e0 [ 956.051507][T18848] do_syscall_64+0x14d/0xf80 [ 956.058282][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.066348][T18848] } [ 956.068916][T18848] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 956.077816][T18848] ... acquired at: [ 956.081708][T18848] _raw_read_lock_irqsave+0x48/0x60 [ 956.087121][T18848] kill_fasync+0x199/0x4d0 [ 956.091711][T18848] __start_tty+0x18c/0x220 [ 956.096301][T18848] tty_send_xchar+0x1d2/0x4d0 [ 956.101161][T18848] tty_ioctl+0x9c5/0xde0 [ 956.105603][T18848] __se_sys_ioctl+0xfc/0x170 [ 956.110522][T18848] do_syscall_64+0x14d/0xf80 [ 956.115626][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.121725][T18848] [ 956.124038][T18848] -> (&f_owner->lock){....}-{3:3} { [ 956.129252][T18848] INITIAL USE at: [ 956.133228][T18848] lock_acquire+0xf0/0x2e0 [ 956.139302][T18848] _raw_write_lock_irq+0x3d/0x50 [ 956.145832][T18848] __f_setown+0x67/0x370 [ 956.151664][T18848] generic_setlease+0xacf/0xff0 [ 956.158123][T18848] do_fcntl_add_lease+0x35e/0x470 [ 956.164725][T18848] fcntl_setdeleg+0x14c/0x1e0 [ 956.171067][T18848] do_fcntl+0xe6d/0x1a20 [ 956.176883][T18848] __se_sys_fcntl+0xc8/0x150 [ 956.183065][T18848] do_syscall_64+0x14d/0xf80 [ 956.189242][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.196707][T18848] INITIAL READ USE at: [ 956.201061][T18848] lock_acquire+0xf0/0x2e0 [ 956.207534][T18848] _raw_read_lock_irqsave+0x48/0x60 [ 956.215010][T18848] send_sigio+0x38/0x370 [ 956.221288][T18848] kill_fasync+0x24d/0x4d0 [ 956.227734][T18848] lease_break_callback+0x26/0x30 [ 956.234848][T18848] __break_lease+0x81c/0x1e80 [ 956.241584][T18848] path_openat+0x1eaa/0x3860 [ 956.248176][T18848] do_file_open+0x23e/0x4a0 [ 956.254676][T18848] do_sys_openat2+0x113/0x200 [ 956.261361][T18848] __x64_sys_openat+0x138/0x170 [ 956.268218][T18848] do_syscall_64+0x14d/0xf80 [ 956.275086][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.283081][T18848] } [ 956.285685][T18848] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 956.294543][T18848] ... acquired at: [ 956.298343][T18848] _raw_read_lock_irqsave+0x48/0x60 [ 956.303727][T18848] send_sigio+0x38/0x370 [ 956.308228][T18848] kill_fasync+0x24d/0x4d0 [ 956.312854][T18848] lease_break_callback+0x26/0x30 [ 956.318260][T18848] __break_lease+0x81c/0x1e80 [ 956.323200][T18848] path_openat+0x1eaa/0x3860 [ 956.327953][T18848] do_file_open+0x23e/0x4a0 [ 956.332711][T18848] do_sys_openat2+0x113/0x200 [ 956.337600][T18848] __x64_sys_openat+0x138/0x170 [ 956.342632][T18848] do_syscall_64+0x14d/0xf80 [ 956.347411][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.353482][T18848] [ 956.355795][T18848] [ 956.355795][T18848] the dependencies between the lock to be acquired [ 956.355808][T18848] and SOFTIRQ-irq-unsafe lock: [ 956.369304][T18848] -> (tasklist_lock){.+.+}-{3:3} { [ 956.374534][T18848] HARDIRQ-ON-R at: [ 956.378504][T18848] lock_acquire+0xf0/0x2e0 [ 956.384577][T18848] _raw_read_lock+0x36/0x50 [ 956.390737][T18848] __do_wait+0xde/0x740 [ 956.396542][T18848] do_wait+0x1e7/0x540 [ 956.402257][T18848] kernel_wait+0xd6/0x1c0 [ 956.408243][T18848] call_usermodehelper_exec_work+0xbe/0x230 [ 956.415794][T18848] process_scheduled_works+0xb02/0x1830 [ 956.423081][T18848] worker_thread+0xa50/0xfc0 [ 956.429416][T18848] kthread+0x388/0x470 [ 956.435147][T18848] ret_from_fork+0x51e/0xb90 [ 956.441489][T18848] ret_from_fork_asm+0x1a/0x30 [ 956.447914][T18848] SOFTIRQ-ON-R at: [ 956.451926][T18848] lock_acquire+0xf0/0x2e0 [ 956.458004][T18848] _raw_read_lock+0x36/0x50 [ 956.464171][T18848] __do_wait+0xde/0x740 [ 956.469981][T18848] do_wait+0x1e7/0x540 [ 956.475700][T18848] kernel_wait+0xd6/0x1c0 [ 956.481681][T18848] call_usermodehelper_exec_work+0xbe/0x230 [ 956.489228][T18848] process_scheduled_works+0xb02/0x1830 [ 956.496519][T18848] worker_thread+0xa50/0xfc0 [ 956.502759][T18848] kthread+0x388/0x470 [ 956.509074][T18848] ret_from_fork+0x51e/0xb90 [ 956.515322][T18848] ret_from_fork_asm+0x1a/0x30 [ 956.521920][T18848] INITIAL USE at: [ 956.525840][T18848] lock_acquire+0xf0/0x2e0 [ 956.531818][T18848] _raw_write_lock_irq+0x3d/0x50 [ 956.538327][T18848] copy_process+0x247a/0x3cf0 [ 956.544577][T18848] kernel_clone+0x248/0x8e0 [ 956.550740][T18848] user_mode_thread+0x110/0x180 [ 956.557286][T18848] rest_init+0x23/0x300 [ 956.563032][T18848] start_kernel+0x385/0x3d0 [ 956.569106][T18848] x86_64_start_reservations+0x24/0x30 [ 956.576136][T18848] x86_64_start_kernel+0x143/0x1c0 [ 956.582899][T18848] common_startup_64+0x13e/0x147 [ 956.589694][T18848] INITIAL READ USE at: [ 956.594116][T18848] lock_acquire+0xf0/0x2e0 [ 956.600760][T18848] _raw_read_lock+0x36/0x50 [ 956.607444][T18848] __do_wait+0xde/0x740 [ 956.613681][T18848] do_wait+0x1e7/0x540 [ 956.620186][T18848] kernel_wait+0xd6/0x1c0 [ 956.626510][T18848] call_usermodehelper_exec_work+0xbe/0x230 [ 956.634402][T18848] process_scheduled_works+0xb02/0x1830 [ 956.641947][T18848] worker_thread+0xa50/0xfc0 [ 956.648709][T18848] kthread+0x388/0x470 [ 956.654776][T18848] ret_from_fork+0x51e/0xb90 [ 956.661421][T18848] ret_from_fork_asm+0x1a/0x30 [ 956.668189][T18848] } [ 956.670669][T18848] ... key at: [] tasklist_lock+0x18/0x40 [ 956.678447][T18848] ... acquired at: [ 956.682233][T18848] _raw_read_lock+0x36/0x50 [ 956.686994][T18848] send_sigio+0x101/0x370 [ 956.691489][T18848] kill_fasync+0x24d/0x4d0 [ 956.696071][T18848] lease_break_callback+0x26/0x30 [ 956.701267][T18848] __break_lease+0x81c/0x1e80 [ 956.706259][T18848] vfs_truncate+0x449/0x540 [ 956.711050][T18848] do_sys_truncate+0xf3/0x1c0 [ 956.715900][T18848] __x64_sys_truncate+0x5b/0x70 [ 956.720920][T18848] do_syscall_64+0x14d/0xf80 [ 956.725866][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.731932][T18848] [ 956.734239][T18848] [ 956.734239][T18848] stack backtrace: [ 956.740150][T18848] CPU: 0 UID: 0 PID: 18848 Comm: syz.3.3295 Tainted: G L syzkaller #0 PREEMPT(full) [ 956.740181][T18848] Tainted: [L]=SOFTLOCKUP [ 956.740188][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 956.740203][T18848] Call Trace: [ 956.740212][T18848] [ 956.740221][T18848] dump_stack_lvl+0xe8/0x150 [ 956.740255][T18848] __lock_acquire+0x2a94/0x2cf0 [ 956.740299][T18848] lock_acquire+0xf0/0x2e0 [ 956.740324][T18848] ? send_sigio+0x101/0x370 [ 956.740347][T18848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.740372][T18848] ? lock_acquire+0xf0/0x2e0 [ 956.740401][T18848] _raw_read_lock+0x36/0x50 [ 956.740430][T18848] ? send_sigio+0x101/0x370 [ 956.740449][T18848] send_sigio+0x101/0x370 [ 956.740470][T18848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.740497][T18848] kill_fasync+0x24d/0x4d0 [ 956.740517][T18848] ? kill_fasync+0x53/0x4d0 [ 956.740539][T18848] lease_break_callback+0x26/0x30 [ 956.740561][T18848] __break_lease+0x81c/0x1e80 [ 956.740614][T18848] ? __pfx___break_lease+0x10/0x10 [ 956.740644][T18848] ? mnt_get_write_access+0x66/0x280 [ 956.740668][T18848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.740693][T18848] ? mnt_get_write_access+0x213/0x280 [ 956.740715][T18848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.740740][T18848] ? break_lease+0xfd/0x150 [ 956.740763][T18848] vfs_truncate+0x449/0x540 [ 956.740788][T18848] ? __pfx_vfs_truncate+0x10/0x10 [ 956.740812][T18848] ? srso_alias_return_thunk+0x5/0xfbef5 [ 956.740836][T18848] ? do_getname+0x151/0x250 [ 956.740865][T18848] do_sys_truncate+0xf3/0x1c0 [ 956.740887][T18848] ? __pfx_do_sys_truncate+0x10/0x10 [ 956.740916][T18848] __x64_sys_truncate+0x5b/0x70 [ 956.740939][T18848] do_syscall_64+0x14d/0xf80 [ 956.740971][T18848] ? trace_irq_disable+0x3b/0x150 [ 956.741003][T18848] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.741027][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.741049][T18848] RIP: 0033:0x7fa25c79c629 [ 956.741070][T18848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.741089][T18848] RSP: 002b:00007fa25d6d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 956.741123][T18848] RAX: ffffffffffffffda RBX: 00007fa25ca16090 RCX: 00007fa25c79c629 [ 956.741139][T18848] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000080 [ 956.741152][T18848] RBP: 00007fa25c832b39 R08: 0000000000000000 R09: 0000000000000000 [ 956.741166][T18848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 956.741179][T18848] R13: 00007fa25ca16128 R14: 00007fa25ca16090 R15: 00007ffe0ea011b8 [ 956.741204][T18848] [ 957.051713][T18604] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.059422][T18604] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.066640][T18604] bridge_slave_0: entered allmulticast mode [ 957.073719][T18604] bridge_slave_0: entered promiscuous mode [ 957.081327][T18604] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.249871][T18604] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.575872][T18604] bridge_slave_1: entered allmulticast mode [ 958.225229][T18604] bridge_slave_1: entered promiscuous mode [ 958.822813][T18604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.890413][T18604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 958.991773][T18604] team0: Port device team_slave_0 added [ 959.001474][T18604] team0: Port device team_slave_1 added [ 959.102798][T18604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.117168][T18604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.149786][T18604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.186469][T18604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.200203][T18604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.258734][T18604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.285956][T18748] chnl_net:caif_netlink_parms(): no params data found [ 959.425585][T18604] hsr_slave_0: entered promiscuous mode [ 959.433285][T18604] hsr_slave_1: entered promiscuous mode [ 959.441017][T18604] debugfs: 'hsr0' already exists in 'hsr' [ 959.446770][T18604] Cannot create hsr debugfs directory [ 959.476188][T18748] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.485182][T18748] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.493071][T18748] bridge_slave_0: entered allmulticast mode [ 959.501939][T18748] bridge_slave_0: entered promiscuous mode [ 959.527218][T18748] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.534636][T18748] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.542126][T18748] bridge_slave_1: entered allmulticast mode [ 959.549291][T18748] bridge_slave_1: entered promiscuous mode [ 959.590508][T18748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.602704][T18748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.651698][T18748] team0: Port device team_slave_0 added [ 959.676389][T18748] team0: Port device team_slave_1 added [ 959.724320][ T1148] bridge_slave_1: left allmulticast mode [ 959.730243][ T1148] bridge_slave_1: left promiscuous mode [ 959.735995][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.744837][ T1148] bridge_slave_0: left allmulticast mode [ 959.751219][ T1148] bridge_slave_0: left promiscuous mode [ 959.756908][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.766694][ T1148] bridge_slave_1: left allmulticast mode [ 959.772364][ T1148] bridge_slave_1: left promiscuous mode [ 959.778021][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.787041][ T1148] bridge_slave_0: left allmulticast mode [ 959.792725][ T1148] bridge_slave_0: left promiscuous mode [ 959.799023][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.867555][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.877859][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.887714][ T1148] bond0 (unregistering): Released all slaves [ 959.972733][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 959.983030][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 959.993461][ T1148] bond0 (unregistering): Released all slaves [ 960.002483][T18748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.009974][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.038164][T18748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.069558][T18748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.076552][T18748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.102959][T18748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.155448][ T1148] hsr_slave_0: left promiscuous mode [ 960.162824][ T1148] hsr_slave_1: left promiscuous mode [ 960.168656][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.176553][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.187927][ T1148] hsr_slave_0: left promiscuous mode [ 960.196658][ T1148] hsr_slave_1: left promiscuous mode [ 960.202880][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.211594][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.282021][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 960.295559][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 960.414693][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 960.429229][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 960.497090][T18748] hsr_slave_0: entered promiscuous mode [ 960.503644][T18748] hsr_slave_1: entered promiscuous mode [ 960.512443][T18748] debugfs: 'hsr0' already exists in 'hsr' [ 960.518201][T18748] Cannot create hsr debugfs directory [ 960.844311][T18748] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 960.852757][ T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 960.866986][T18748] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 960.877980][T18748] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 960.889157][T18748] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 960.952949][T18604] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 960.964780][T18604] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 960.979574][T18604] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 960.992507][T18604] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 961.061544][T18748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.096251][T18748] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.113454][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.120712][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.142974][T18604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.157304][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.164506][T12781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.200281][T18604] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.217987][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.225347][T12781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 961.248441][T12767] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.255686][T12767] bridge0: port 2(bridge_slave_1) entered forwarding state [ 961.537145][T18748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.596337][T18604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 961.895327][T18748] veth0_vlan: entered promiscuous mode [ 961.925045][T18748] veth1_vlan: entered promiscuous mode [ 961.965211][T18604] veth0_vlan: entered promiscuous mode [ 961.977476][T18748] veth0_macvtap: entered promiscuous mode [ 961.997591][T18748] veth1_macvtap: entered promiscuous mode [ 962.008489][T18604] veth1_vlan: entered promiscuous mode [ 962.042606][T18748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.055892][T18748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.078941][ T1148] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.087689][ T1148] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.111705][T18604] veth0_macvtap: entered promiscuous mode [ 962.128020][ T1148] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.140049][ T1148] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.152306][T18604] veth1_macvtap: entered promiscuous mode [ 962.171878][T18748] ieee80211 phy50: Selected rate control algorithm 'minstrel_ht' [ 962.211706][T18604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 962.222567][T18604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 962.238746][T12775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.242866][T18748] ieee80211 phy51: Selected rate control algorithm 'minstrel_ht' [ 962.252914][T12775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.271369][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.283669][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.304029][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.330142][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.344929][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.355389][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.372168][T18604] ieee80211 phy52: Selected rate control algorithm 'minstrel_ht' [ 962.418082][T18604] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht' [ 962.431781][T12775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.466024][T12775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.507128][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.523933][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50