last executing test programs: 24m8.645556386s ago: executing program 32 (id=1): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 23m36.604312175s ago: executing program 33 (id=57): ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x12801, 0x0) close(0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x2010, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setitimer(0x2, &(0x7f0000000080)={{0x6, 0xfffffffffffffffb}, {0x7, 0x100000001}}, 0x0) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) 17m32.321807508s ago: executing program 34 (id=678): unshare(0x42000000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/39}, 0x20) unshare(0x60000200) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x20) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1c0000005e007f62516a071c02f8abc36f1d73dbe1ce84ebc7c4c1c9", 0x1c}], 0x1}, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f00000001c0)={0xfffffffffffffebf, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x3, &(0x7f0000000000)=[{0x3, 0x400000000000000}, {0x0, 0x80000000}, {0xb92, 0x0, 0x26}], 0x2, 0x0, 0x0, 0x0, 0x0, 0x5c}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) unshare(0x24060400) 14m6.904737313s ago: executing program 35 (id=1188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b0000000500000000040000090000000100"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair(0xf, 0x3, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) 13m5.184083616s ago: executing program 36 (id=1387): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000080)=@sg0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0x0, 0x0) epoll_create1(0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x32f941) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000080)='./bus\x00', 0xa, &(0x7f0000000040)={[{@errors_remount}, {@nombcache}]}, 0x2, 0x525, &(0x7f0000000200)="$eJzs3e9rJGcdAPDvTLJnrpea1PqiFlqLrdwVvd1Lo23wRVtBfFdQ6vszJHsxZJMN2U17iUVS/AMEFS34yle+EfwDBKn/QSkc6HtRUUSv+kJEOzK7s71k2bkkNLsbdj8fmMwzz8483+8zuczOr5sJYGo9ExGvRsRMRDwfEQtFfVoMcdQd8vk+uP/WWj7Ee0m8/vckkqIuOqUHrhWLzXVHA7UODrdWG436XjFda2/v1loHhzc3t1c36hv1neXlpRdXXlqJuVtlTXznPP3M+/Xy1/78kx/84usv/+aLb/7h9l9vfC/Per74vNuPh0tPTM2cKW53zVTydZG795+ifu88yV9iSbFuK+NOBACAM3k8Ij4VEZ/r7P8vxEzM9j6ySwcAAAATIntlPv6bRGQAAADAxHqlcw9sklaL+1vnI02r1e49vJ+OR9JGs9X+wp3m/s56917ZxaikdzYb9VvFfZ+LUUny6aVO+cH0C33TyxHxWET8eOFqZ7q61mysj/vkBwAAAEyJa33H//9a6B7/AwAAABNmcdwJAAAAAENXdvyfjDgPAAAAYHhc/wcAAICJ9o3XXsuHrPf+6/U3Dva3mm/cXK+3tqrb+2vVtebebnWj2dzoPLNv+7T2Gs3m7pdiZ/9urV1vtWutg8Pb2839nfbtzd4rsAEAAIBRe+yz7/4+iYijr1ztDLkr+Y+ZkgXcKwATIz3PzH8aXh7A6JV9zQOTb3bcCQDjc1Qc7wNT68SjPgbsFBy/eefEOYP3hpcTAABwsa5/ZvD1//wQoDLu5IChOtf1f2CiuP4P02vQ9f/fls/+/jBzAUarYg8Apt5pr/oofXhHcf3/w1MjZNmpbQEAAEM1n+/7H0VUi2uB85Gm1WrEo53/6l9J7mw26rci4pMR8buFyify6aXOkonXAwIAAAAAAAAAAAAAAAAAAAAAAADAGWVZEhkAAAAw0SLSvyTF+7+uLzw3339+4Ery74XOOCLe/NnrP7272m7vLeX1//iovv1OUf/COM5gAAAAwNSb7a/oHaf3juMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CJ9cP+ttd4wyrh/+2pELA6KPxtznfFcVCLikX8mMXtsuSQiZi4g/tHbEfHEoPhJnlYsFln0x08j4upo4j+VZVkaA+Jfu4D4MM3ezbc/rw76+0vjmc548N//bDF8XOXbv/Sj7d9Myfbv0TPGePLer2ql8d+OeHJ28PanFz8pif9sf2PJ4JXy7W8dHpbFz34ecX3g909yotlae3u31jo4vLm5vbpR36jvLC8vvbjy0sqXV27V7mw26sXPgTF++NSvP+yr+l/W1el/lMRfPKX/z+WFyvHO9Icpgt27e//xbrHS10Qn/o1nB//+n3hI/PzfxOeL74H88+u98lG3fNzTv3z/6YGJFfHXS/p/2u//RlmjfZ7/5vf/eMZZAYARaB0cbq02GvW9oRfeybJsVLEuTSG7HGlcisLc5UhjYgs/iojSea6eo8FILuLMFgAAcNk82Ps/x0LfHWJCAAAAAAAAAAAAAAAAAAAAMIVaB5GWPg/sysU8n6w/5tF4ugoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8FD/DwAA///uXuM2") ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r5, &(0x7f00000001c0)='mountinfo\x00') socket$inet_dccp(0x2, 0x6, 0x0) 7m27.356714128s ago: executing program 37 (id=2899): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000e12020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000080)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000850000000800000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x4, &(0x7f0000000340)=ANY=[]) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x3, &(0x7f0000000240)=[{0xf001, 0xf4, 0x2, 0xf5}, {0x6, 0xc, 0x0, 0x2}, {0x2, 0x9, 0x1, 0x8}]}) rt_sigaction(0x9, &(0x7f0000000080)={0x0, 0x10000001, 0x0, {[0x4d60]}}, 0x0, 0x8, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r4, &(0x7f0000000280)={0x2000000}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000380)='btrfs_reserve_ticket\x00', r3, 0x0, 0x1}, 0x18) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x3f, 0x1101}}) 4m22.31564895s ago: executing program 2 (id=4022): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000240)={[{@nobarrier}, {@part={'part', 0x3d, 0x9}}, {@nodecompose}, {@nls={'nls', 0x3d, 'default'}}, {@type={'type', 0x3d, "f268d651"}}, {@umask={'umask', 0x3d, 0xde3}}]}, 0x3, 0x6b6, &(0x7f0000004100)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) 4m21.995595801s ago: executing program 2 (id=4026): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x3}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0xe000}, 0x5}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"], 0x18, 0x500}}], 0x2, 0x0) 4m21.199625662s ago: executing program 2 (id=4030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x92c000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000740)="7c0ada37", &(0x7f0000000800)=""/192}, 0x20) 4m20.824621853s ago: executing program 38 (id=4030): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b00), &(0x7f0000000580), 0x7, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200), 0x0, 0x92c000, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, &(0x7f0000000740)="7c0ada37", &(0x7f0000000800)=""/192}, 0x20) 4m14.19381434s ago: executing program 39 (id=4064): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0xa, &(0x7f0000000240)=@raw=[@btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9606}, @map_val={0x18, 0x9, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x9, 0x39, &(0x7f0000000300)=""/57, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x2, 0x10, 0x1}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{0x2, 0x4, 0x6, 0xb}], 0x10, 0xa31, @void, @value}, 0x94) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) io_uring_setup(0x0, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) write$cgroup_devices(r4, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) r5 = openat$cgroup_devices(r3, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)={'c', ' *:* ', 'rwm\x00'}, 0xa) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r6, 0x0, 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000058c0)=ANY=[@ANYBLOB='a'], 0x9) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, &(0x7f0000000080)='[\x00', 0x2) 3m25.544829835s ago: executing program 1 (id=4262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 3m22.47167776s ago: executing program 1 (id=4282): socket$nl_route(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x62040200) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 3m19.232167886s ago: executing program 40 (id=4292): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000500)={[{@barrier}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@stripe={'stripe', 0x3d, 0x6}}]}, 0x0, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) open(0x0, 0x541241, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000007c0)=@base={0x1c, 0x16, 0xb4, 0x7f, 0x40000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x3, 0xfffffffd, 0x40, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x28, 0xe, 0x7}}) 3m19.095181963s ago: executing program 41 (id=4296): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m18.055692754s ago: executing program 1 (id=4308): syz_read_part_table(0x60d, &(0x7f0000002240)="$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") syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) inotify_init1(0x80000) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3m14.003119446s ago: executing program 1 (id=4324): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81d05a, 0x0) mount$bind(0x0, 0x0, 0x0, 0x887008, 0x0) umount2(&(0x7f0000000300)='./file0\x00', 0x9) 3m13.599619645s ago: executing program 1 (id=4327): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 3m9.862956314s ago: executing program 1 (id=4338): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x84001, 0x0) 3m9.451064997s ago: executing program 42 (id=4338): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000140), 0x12) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x84001, 0x0) 2m54.599661897s ago: executing program 3 (id=4407): r0 = syz_open_dev$usbmon(&(0x7f0000000a40), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x12, r0, 0x1000) syz_clone3(&(0x7f00000008c0)={0x8000000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m53.555418026s ago: executing program 3 (id=4411): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xda, 0xa1, 0x8c, 0x40, 0x6189, 0x182d, 0x173, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xef, 0x0, 0x0, 0xca, 0xea, 0x76}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m50.766436281s ago: executing program 2 (id=4339): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./file0\x00', 0x18008, &(0x7f0000000480)=ANY=[@ANYRES8=0x0, @ANYRESDEC], 0xfe, 0x4b1, &(0x7f0000001d00)="$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") mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x2837481, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000340)='./file1\x00', 0x0, 0x2804, 0x0) 2m50.669790427s ago: executing program 3 (id=4421): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r1 = dup(r0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000001880)=ANY=[], 0xfdef) 2m50.207030784s ago: executing program 2 (id=4424): syz_open_pts(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fe00000000000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 2m49.650822763s ago: executing program 2 (id=4428): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000180)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x148a}}]}, 0x3, 0x45c, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x8010, 0x25, 0x1, 0xff, 0x3}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2m49.503285492s ago: executing program 3 (id=4429): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2ae, &(0x7f0000000a40)="$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") getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000005c0)={{{@in6=@mcast1, @in=@local}}, {{@in6=@remote}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) writev(r4, &(0x7f0000000340), 0x2) connect$inet6(r3, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') accept4$inet(r5, 0x0, 0x0, 0x180000) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) 2m47.802330669s ago: executing program 43 (id=4428): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800080, &(0x7f0000000180)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x148a}}]}, 0x3, 0x45c, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000200)={0x8010, 0x25, 0x1, 0xff, 0x3}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 2m47.542739232s ago: executing program 3 (id=4434): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x4004110) dup2(r0, r1) 2m46.960938977s ago: executing program 3 (id=4437): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60480) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1000, 0x0) 2m46.345755659s ago: executing program 44 (id=4437): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) unshare(0x60480) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') setns(r0, 0x0) syz_clone(0xf41a0400, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1000, 0x0) 2m46.303256686s ago: executing program 5 (id=4440): syz_open_pts(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) inotify_init() r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030500000000fe00000000000000", @ANYRES32=0x0, @ANYBLOB="15460100ef000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}}, 0x0) 2m43.762752945s ago: executing program 5 (id=4453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x44, r5, 0x1, 0xfffffffe, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) 2m40.653025366s ago: executing program 5 (id=4471): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x20cf}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x2000, r2}, 0x0) landlock_restrict_self(r1, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r3}, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f00000002c0)={0x20, r5}, 0x0) landlock_restrict_self(r4, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file1\x00', 0x0) 2m40.383715095s ago: executing program 5 (id=4473): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m39.971619726s ago: executing program 5 (id=4476): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2m38.493759893s ago: executing program 5 (id=4482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c000280080001407f000001ff91e67ccffb81bd86ba167fa5dfdfd5046b29fa22a5b39cc93b813611a9ec44a79f2ac07fb90a886671248e89dcffc77a6267a28b96f13d1aa9814e45a45483e02333ebee14b68fbbec4f7ef58406068c3ddd018a6b546bbebe1387a056e4407560d09cdf9657b9d0fb993465aea701da40ba5c0c943e4faa0c300ac96329cea92436594bb0b519381a"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 2m37.947737801s ago: executing program 45 (id=4482): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f72"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c000280080001407f000001ff91e67ccffb81bd86ba167fa5dfdfd5046b29fa22a5b39cc93b813611a9ec44a79f2ac07fb90a886671248e89dcffc77a6267a28b96f13d1aa9814e45a45483e02333ebee14b68fbbec4f7ef58406068c3ddd018a6b546bbebe1387a056e4407560d09cdf9657b9d0fb993465aea701da40ba5c0c943e4faa0c300ac96329cea92436594bb0b519381a"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 58.583436777s ago: executing program 4 (id=4984): r0 = io_uring_setup(0x4f01, &(0x7f0000000180)={0x0, 0x0, 0x10000, 0x1, 0x237}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) close_range(r0, 0xffffffffffffffff, 0x0) 57.855822021s ago: executing program 4 (id=4989): unshare(0x22020600) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x840, 0x0) poll(&(0x7f0000000a00)=[{r0, 0x10001}], 0x1, 0x5) socket$inet6_udp(0xa, 0x2, 0x0) 57.123588108s ago: executing program 4 (id=4993): syz_mount_image$ext4(&(0x7f0000002180)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x1008802, &(0x7f0000000240)={[{@resgid}, {@data_writeback}, {@barrier}, {@noblock_validity}, {@nomblk_io_submit}, {@journal_async_commit}, {@test_dummy_encryption}, {@norecovery}, {@journal_async_commit}, {}, {@inlinecrypt}]}, 0x9, 0x606, &(0x7f0000000600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x8000, 0x15a) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="0200000001000100000000000400020000000000100002000000000020"], 0x24, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_open_procfs(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 56.574686946s ago: executing program 4 (id=4994): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, 0x0) 56.043988081s ago: executing program 4 (id=4998): rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) 54.549213113s ago: executing program 4 (id=5007): prlimit64(0x0, 0xe, 0x0, 0x0) pipe2(0x0, 0x0) gettid() tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000001ac0), &(0x7f00000000c0)='./file0\x00', 0x300c084, &(0x7f0000001a80)=ANY=[@ANYRES16=0x0], 0x86, 0x698, &(0x7f00000002c0)="$eJzs3ctvXFcdB/DvnYwfE0rqpmmbokq1GgkQEYkdKwWzaUAIZVGhqixYW4mTWJmkwXGRWyFq3ttK5A8oC+9YICR2LCLKhg3suvWyEoJNN5jVoHvnzmTix9hJiMdJP5/q+px7zz3n/s7P9zGPRg7wuXXxdJp3U+Ti6TdXy/WN9bn2xvrcjV49yUSSRtLsFin+0+l0Pk4upLvk5XJjPVyx23HuLM2//clnG59215r1Uu3fGNZvf9bqJdNJjtTlw/nttvEu7TXe5F5jFv0Zlgk71UscjNpYkk7lX3e6W370t2f6LQNaO/Xe88wHngBF97m5zVRytL7Qy9cB3adi95l96A27O60dYBwAAAAwKs9uZjOrOTbqOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJUv/9/6JeGr36dIre3/8fr7elrh8urz7Y7ncfVxwAAAAAAAAAcIBe3cxmVnMsyVqSsXrza9XPE9XPL+Td3M5ilnMmq1nISlaynNkkUwMDja8urKwsz/Z79v7PgO09z+3Y89wegU7UZev/Mm0AAAAAAAAAeNr8PBer7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODQKJIj3aJaTvTqU2k0k0wmGS/3W0v+0as/ye6OOgAAAAB4BJ197vfsZjazmmP9fkX1nv/F6n3/ZN7NzaxkKStpZzGXq88Cuu/6Gxvrc+2N9bkb5bJ93G//+4HCrUZM97OHnY98stqjlStZqracyaW8k6K4nEbVs3SyF8/Ocf2sjKl4Y+KN0tiwcAayd7kuy5l/WJfbfPBAk93NA36YMlVlZKyfkZk6tjIbzw3PxAP+drYeaTaNfrAnthxpyyTqnNf2ebyjdVnO59e75Xwktmbi3MDZ9+LwnCdf+dPvf3itffP6tSu3Tx+eKe1P70PB7pXR2p6JuYFMvPQ0Z2KbmSoTL/TXL+Z7+UFOZzpvZTlL+XEWspLFTOe7VW2hPp+LgUt+l0xduG/trb0iGa/P0O5d9P6YskdMr1V9j2Up3887uZzFvF79dy6z+UbO53zm+7/h6T8ne99pG7tc9Z0v7hj8qa/WlVaS39Rl5Wpzr4k/ZmVenxvI6+A9d6pqG9xy7zo4vq/n0f1Z+sPwUJpfqivlMX5Rl4fD1kzMDmTi+eGZ+F11W7ndvnl9+drCrf0d7viHdaW8jn51qJ4S5flyvPxlVWv3nx1l2/N121i13MvXeP2NS7dfY1vbC/227pW6tuuVOl6/hts+0rmq7aUd2+aqtpMDbVtfb7X7r4eehi9/AJ5aR792dLz1z9bfWx+1ftm61npz8jsT35x4ZTxjfx37VnPmyJcbrxR/zEf56b33/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMO7/d771xfa7cXlgUrj+kK70+l8sEPT7pXWkAEPT+VIHeUBHvTlZ5JRTXk8yS5NkznQeP7b6XTqLcWhOBOGVjqliXQesvtfkuxv52aS7U2bnU5n5EkY4U0JOBBnV27cOnv7vfe/vnRj4eri1cWb8+fPz8/Mn3997uyVpfbiTPfnqKMEHod7D/1RRwIAAAAAAAAAAADs10H8c4Ldjz55kFMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnlAXT6d5N0VmZ87MlOsb67eysT7X7ta7ZVczSSNJ8ZOk+Di5kO6SqYHhit2Oc2dp/u1PPtv49N5Yzd7+jWH9dtTYumGtXjKd5EhdPoL7xrv0yOMV/RmWCTvVSxyM2v8CAAD//9x7BG8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x178) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000880, 0x0, 0x0) r1 = getpid() mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x2205080, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./bus\x00', 0x0) 39.19868216s ago: executing program 46 (id=5007): prlimit64(0x0, 0xe, 0x0, 0x0) pipe2(0x0, 0x0) gettid() tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000001ac0), &(0x7f00000000c0)='./file0\x00', 0x300c084, &(0x7f0000001a80)=ANY=[@ANYRES16=0x0], 0x86, 0x698, &(0x7f00000002c0)="$eJzs3ctvXFcdB/DvnYwfE0rqpmmbokq1GgkQEYkdKwWzaUAIZVGhqixYW4mTWJmkwXGRWyFq3ttK5A8oC+9YICR2LCLKhg3suvWyEoJNN5jVoHvnzmTix9hJiMdJP5/q+px7zz3n/s7P9zGPRg7wuXXxdJp3U+Ti6TdXy/WN9bn2xvrcjV49yUSSRtLsFin+0+l0Pk4upLvk5XJjPVyx23HuLM2//clnG59215r1Uu3fGNZvf9bqJdNJjtTlw/nttvEu7TXe5F5jFv0Zlgk71UscjNpYkk7lX3e6W370t2f6LQNaO/Xe88wHngBF97m5zVRytL7Qy9cB3adi95l96A27O60dYBwAAAAwKs9uZjOrOTbqOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBJUv/9/6JeGr36dIre3/8fr7elrh8urz7Y7ncfVxwAAAAAAAAAcIBe3cxmVnMsyVqSsXrza9XPE9XPL+Td3M5ilnMmq1nISlaynNkkUwMDja8urKwsz/Z79v7PgO09z+3Y89wegU7UZev/Mm0AAAAAAAAAeNr8PBer7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODQKJIj3aJaTvTqU2k0k0wmGS/3W0v+0as/ye6OOgAAAAB4BJ197vfsZjazmmP9fkX1nv/F6n3/ZN7NzaxkKStpZzGXq88Cuu/6Gxvrc+2N9bkb5bJ93G//+4HCrUZM97OHnY98stqjlStZqracyaW8k6K4nEbVs3SyF8/Ocf2sjKl4Y+KN0tiwcAayd7kuy5l/WJfbfPBAk93NA36YMlVlZKyfkZk6tjIbzw3PxAP+drYeaTaNfrAnthxpyyTqnNf2ebyjdVnO59e75Xwktmbi3MDZ9+LwnCdf+dPvf3itffP6tSu3Tx+eKe1P70PB7pXR2p6JuYFMvPQ0Z2KbmSoTL/TXL+Z7+UFOZzpvZTlL+XEWspLFTOe7VW2hPp+LgUt+l0xduG/trb0iGa/P0O5d9P6YskdMr1V9j2Up3887uZzFvF79dy6z+UbO53zm+7/h6T8ne99pG7tc9Z0v7hj8qa/WlVaS39Rl5Wpzr4k/ZmVenxvI6+A9d6pqG9xy7zo4vq/n0f1Z+sPwUJpfqivlMX5Rl4fD1kzMDmTi+eGZ+F11W7ndvnl9+drCrf0d7viHdaW8jn51qJ4S5flyvPxlVWv3nx1l2/N121i13MvXeP2NS7dfY1vbC/227pW6tuuVOl6/hts+0rmq7aUd2+aqtpMDbVtfb7X7r4eehi9/AJ5aR792dLz1z9bfWx+1ftm61npz8jsT35x4ZTxjfx37VnPmyJcbrxR/zEf56b33/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMO7/d771xfa7cXlgUrj+kK70+l8sEPT7pXWkAEPT+VIHeUBHvTlZ5JRTXk8yS5NkznQeP7b6XTqLcWhOBOGVjqliXQesvtfkuxv52aS7U2bnU5n5EkY4U0JOBBnV27cOnv7vfe/vnRj4eri1cWb8+fPz8/Mn3997uyVpfbiTPfnqKMEHod7D/1RRwIAAAAAAAAAAADs10H8c4Ldjz55kFMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnlAXT6d5N0VmZ87MlOsb67eysT7X7ta7ZVczSSNJ8ZOk+Di5kO6SqYHhit2Oc2dp/u1PPtv49N5Yzd7+jWH9dtTYumGtXjKd5EhdPoL7xrv0yOMV/RmWCTvVSxyM2v8CAAD//9x7BG8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x178) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000880, 0x0, 0x0) r1 = getpid() mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180), 0x2205080, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x1041, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000100)='./bus\x00', 0x0) 15.547582129s ago: executing program 7 (id=5144): socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 14.086505673s ago: executing program 7 (id=5148): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) unshare(0x4000400) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=@newqdisc={0x484, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}, @qdisc_kind_options=@q_tbf={{0x8}, {0x450, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x2, 0x5, 0x5, 0xd05, 0x6}, {0x7, 0x6be5d464c58bd4c6, 0x3, 0x5, 0xfff9, 0xa980}, 0xa, 0xf, 0x629}}, @TCA_TBF_RATE64={0xc, 0x4, 0x368407df017fbe89}, @TCA_TBF_PRATE64={0xc, 0x5, 0xfa001da1cf221712}, @TCA_TBF_RTAB={0x404, 0x2, [0xfffffff9, 0x2, 0x7, 0xffffffff, 0x81, 0x5, 0x8001, 0xffff, 0xa, 0x7, 0x7fffffff, 0xfffffffa, 0x4, 0x80000001, 0x0, 0x5, 0x2, 0x9, 0x27c0, 0x3, 0x30000, 0x4, 0xfffffffa, 0x0, 0x0, 0x400, 0x29f9, 0x0, 0x2, 0xfffffa72, 0x6, 0xffff, 0x3e73, 0x7fffffff, 0x7, 0x200000, 0x340, 0x3, 0x7, 0x8, 0xfffffff1, 0xac, 0x2, 0xbcbe, 0x8cf0, 0x7, 0x6, 0x4, 0xa3, 0xffffffe3, 0x4, 0x8, 0x6, 0xd8, 0x6, 0xb, 0x1, 0xe0, 0x0, 0x0, 0x10001, 0x5, 0x8001, 0x6d, 0x0, 0x3, 0x4, 0x9a2f, 0x2, 0x5, 0x2, 0xa3d2, 0x5, 0x6, 0xfffffff9, 0xb, 0x2, 0xd, 0xe68, 0x80000000, 0x10001, 0x7, 0xa2ba, 0x6, 0x0, 0x1000, 0x66b97ddb, 0x7, 0x3, 0x401, 0x2, 0x9, 0x8, 0x202, 0xfffffffa, 0x9, 0x0, 0x4, 0x7, 0x7, 0x8000, 0x1, 0x1, 0x8, 0x8, 0x2, 0x400, 0x7, 0x7, 0x10, 0x2, 0x80, 0x9, 0x5, 0x400000, 0x0, 0x1, 0xfffffff8, 0x2e1c, 0x80000000, 0x7, 0x8, 0x3, 0x400, 0x1ff, 0x8, 0x84, 0x0, 0x3, 0x6, 0x5, 0x8000, 0xffff2b46, 0x4, 0x3, 0x3, 0x2, 0x3, 0x77a, 0x7, 0x3e23, 0x9, 0x5, 0x100, 0x6, 0x3, 0x800, 0x3ff, 0x3, 0x3ff, 0xa, 0x4, 0x3, 0x7, 0x8000, 0xb0ed, 0x44d, 0x3, 0xfffffff8, 0xfffffffc, 0xffffffff, 0x5e, 0x2, 0x8001, 0x1, 0x5, 0xffff, 0x0, 0x6, 0x1000, 0x7, 0x7, 0x5, 0x6, 0x0, 0x1000, 0x69, 0x6, 0x8, 0xfff, 0x4, 0x2, 0x9, 0x0, 0x8, 0x8, 0x17c5, 0xfffffff9, 0x8, 0x6, 0x0, 0xd, 0x102, 0x9a76, 0x3, 0x6, 0x6, 0x5, 0xfe, 0x6, 0xfffffffe, 0x4, 0x0, 0x6, 0x120, 0x5, 0x1, 0x1, 0xf87, 0x9, 0xd, 0x324, 0x5, 0x81, 0x40, 0x7f, 0xffffff65, 0x5, 0x800, 0x4ea8, 0x9, 0x80, 0x3ff, 0x100, 0x40, 0x0, 0x4, 0x6, 0xde7, 0x5, 0x5, 0x5ddc, 0x0, 0x5, 0x401, 0x45b, 0x5, 0x4, 0x4, 0x9, 0x0, 0xa09, 0x2, 0x7, 0x7fff, 0x2, 0x9, 0x6, 0x3, 0x8d, 0x3, 0xfffffffd, 0x200, 0xb, 0x7, 0xe]}, @TCA_TBF_PBURST={0x8, 0x7, 0xb80}]}}]}, 0x484}}, 0x0) 12.340948694s ago: executing program 8 (id=5156): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x22, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10.113290626s ago: executing program 9 (id=5158): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x50002007}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x50) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0xbd, ""/189}, &(0x7f0000000040)=0xdd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 10.010533925s ago: executing program 7 (id=5160): socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x0) close(r1) r2 = inotify_init1(0x800) fcntl$setstatus(r1, 0x4, 0x2c00) r3 = gettid() fcntl$setown(r1, 0x8, r3) inotify_add_watch(r2, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') 8.994006158s ago: executing program 8 (id=5163): r0 = semget$private(0x0, 0x3, 0x108) semctl$SETVAL(r0, 0x4, 0x10, 0x0) 8.187917961s ago: executing program 7 (id=5164): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x524, &(0x7f00000009c0)="$eJzs3U9sI1cZAPBvJn/sTdNmCz0AKnQphQWt1k687arqhXKqEKqE6JHDNiTeKFp7vYqd0oQ9ZI/ckajECU6cOSBxQOqJOxIHuHEpB6QCq6IGCQmjGY+3ziZOrE1it/HvJ43mzbyxv/c8mnnW52ReAFPrSkTsRcR8RLwdEUvF/qRY4vXekh338cP7a/sP768l0e2+9c8kr8/2xcBrMk8V71mOiB+8EfGj5LGgf4po7+zeWW006lvFrmqnea/a3tm9vtlc3ahv1O/WajdXbi6/euOV2pn19YXmbz68FBG//92XP/jj3rd+kjVrsagb7MdZ6nV97lGczGxEfO88gk3ATNGf+Sd58RO9iLOURsTnIuLF/Ppfipn8bB508DR9e4ytAwDOQ7e7FN2lwW0A4KJL8xxYklaKXMBipGml0svhPRcLaaPV7ly73dq+u97LlV2OufT2ZqO+XOQKL8dccntztr6Sl/vbjXrtse0bEfFsRPysdCnfrqy1GuuT/OIDAFPsqcfG/3+XeuM/AHDBlT8plibZDgBgfMqTbgAAMHbGfwCYPsZ/AJg+xn8AmD7GfwCYPsZ/AJgq33/zzWzp7hfPv15/Z2f7Tuud6+v19p1Kc3utstbaulfZaLU28mf2NE96v0ardW/l5dh+t9qptzvV9s7urWZr+27nVv5c71v1ubH0CgA4zrMvvP+XJCL2XruULzHwvP8Tx+rnz7t1wHlKJ90AYGJmJt0AYGIOz/YFTAv5eJhe/+t2uzEwd29EPHhUGngY6NA/EXpvpDCpeUPh0+fqF0+R/wc+0+T/YXo9Wf7fd3m4COT/YXp1u4k5/wFgysjxA8kJ9YO//y93BzZG+/0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALqTFfEnSSjEX+GKkaaUS8XREXI655PZmo74cEc9ExJ9Lc6VseyUizBsEAJ9l6d+TYv6vq0svLT5eO1/6TylfR8SPf/HWz99d7XS2ViLmk3892t95r9hfm0T7AYCT9Mfp/jje9/HD+2v9ZZzt+fA7vclFs7j7xdKrmY3ZfF3Ocw0LH5WK7Z7s+8rMGcTfexARXziq/0meG7lczHy68FFyIH4W++mxxk8PxE/zut46+yw+fwZtgWnzfnb/ef2o6y+NK/n66Ou/nN+hTq9//9s/dP9LH93/Zo6In13zV0aN8fIfvntoZ3epV/cg4kuzEfv9Nx+4//TjJ0PivzRi/L8+/5UXh9V1fxlxNY7qf3IgVrXTvFdt7+xe32yubtQ36ndrtZsrN5dfvfFKrZrnqKv9TPVh/3jt2jPD4mf9XxgSv3xC/78+Yv9/9d+3f/jVY+J/82tHn//njomfjYnfGDH+6sJvy8PqsvjrQ/p/0vm/NmL8D/62uz7ioQDAGLR3du+sNhr1rdMXyscek55FiBEKScReo741X/TvfIOWfv3TN04+uHTOXT51IY6umh3LZzhdhdKnoxkjFCZ4UwLG4pOLftItAQAAAAAAAAAAAAAAhhnHvxNNuo8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcXP8PAAD//+wx0IE=") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000580)='./file0\x00', 0x10000, &(0x7f0000001900)=ANY=[], 0xfd, 0x222, &(0x7f00000016c0)="$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") r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2) pwritev2(r0, &(0x7f0000000040)=[{&(0x7f0000000980)="ca", 0x1}], 0x1, 0x10fffff, 0xffffffff, 0x0) r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0) dup3(r1, r0, 0x0) finit_module(r1, 0x0, 0x200000000000000) 8.162809105s ago: executing program 9 (id=5166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) 6.833681017s ago: executing program 8 (id=5169): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4008804) mkdir(0x0, 0x2) setrlimit(0x9, &(0x7f0000000000)) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) io_setup(0x20, &(0x7f0000001140)) 6.819768534s ago: executing program 9 (id=5170): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x180, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000100)) 6.40349857s ago: executing program 8 (id=5173): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) close(0xffffffffffffffff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000017c0)=r1, 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000140)=r2, 0x4) 6.263661374s ago: executing program 9 (id=5174): r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) close(0x3) 6.073510494s ago: executing program 6 (id=5176): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x100000e, 0x0) tkill(r0, 0x13) 5.727594442s ago: executing program 9 (id=5178): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)={0x50002007}) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) select(0x40, &(0x7f0000000340)={0xd, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3, 0x0, 0x1}, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0a000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[], 0x50) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000280)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) lsm_get_self_attr(0x69, &(0x7f0000000340)={0x0, 0x0, 0xdd, 0xbd, ""/189}, &(0x7f0000000040)=0xdd, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 5.53941444s ago: executing program 6 (id=5180): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x3e, 0x51b, &(0x7f0000000100)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 5.083660086s ago: executing program 6 (id=5181): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) 4.906372374s ago: executing program 7 (id=5183): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10) landlock_restrict_self(0xffffffffffffffff, 0x0) 4.699402659s ago: executing program 6 (id=5184): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x31}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x78}, @exit={0x95, 0x0, 0x1008}], {0x95, 0x0, 0x5a5}}, 0x0, 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xcf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xd0}, [@ldst={0x6, 0x0, 0x2, 0x0, 0x0, 0x1}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x20000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "d73b76a74f00a2688ce4a6f09b78a214c6f661c8795e37eb344cb4bf41c7665c", "b704850050677ccd4838ac136942d529ed130f76ace2dc596a2104f8ec3cfeeb", "b94afccb78bdc023ea2832349e39f99e2e00ff514ae744d29baf134b153c857a", "8c72399e1f41f1e705d983051810ee86f52b377bc6965130b6f2182abbb5d0ee", "36a6723c1c53a36440ac39acd796d8347c1f272b22a6db32d9b4df8f05173f37", "78913da9b27fdbf7aa33f091", 0x2, 0x1, 0x1, 0x40, 0x4}}) 4.699183619s ago: executing program 0 (id=5185): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x8, 0x0, 0x72}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0) 3.583596944s ago: executing program 0 (id=5186): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f0000000540)={[{@fat=@tz_utc}, {@shortname_winnt}, {@shortname_winnt}, {@shortname_winnt}, {@uni_xlate}, {@fat=@discard}, {@shortname_mixed}, {@shortname_lower}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x6}}]}, 0x0, 0x274, &(0x7f0000000280)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') mount$bind(0x0, 0x0, 0x0, 0x1333404, 0x0) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100) chdir(0x0) 3.435589763s ago: executing program 0 (id=5187): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) recvmmsg(r0, &(0x7f000000d980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)=""/141, 0x8d}, 0x9}], 0x1, 0x2031, 0x0) 3.343682707s ago: executing program 7 (id=5188): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xfffffffe, 0x55}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x38}}, 0x0) 3.084456137s ago: executing program 0 (id=5189): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x2c, r0, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x2c}}, 0x0) 687.349019ms ago: executing program 6 (id=5190): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f0000000040)="dfa2", 0x0}, 0x20) 584.282144ms ago: executing program 0 (id=5191): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) 583.422898ms ago: executing program 9 (id=5192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003680)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000001040104e4ff000000000000070000020a00020000007ffd06"], 0x27}}, 0x40050) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3000490, &(0x7f0000000380), 0x45, 0x7f7, &(0x7f00000007c0)="$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") 439.574142ms ago: executing program 8 (id=5193): r0 = semget$private(0x0, 0x4000000009, 0x408) semop(r0, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) semtimedop(r0, &(0x7f0000000440)=[{0x4, 0x4, 0x1000}, {0x2, 0x4, 0x800}, {0x4, 0x8, 0x800}], 0x3, 0x0) 439.410231ms ago: executing program 6 (id=5194): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d00090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 29.926489ms ago: executing program 8 (id=5195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1, 0x0, 0x1200}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x0) 0s ago: executing program 0 (id=5196): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup3(r1, r0, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): it(1741233910.355:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.087139][ T29] audit: type=1326 audit(1741233910.355:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.112524][ T29] audit: type=1326 audit(1741233910.355:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.143453][ T29] audit: type=1326 audit(1741233910.355:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.159434][T21604] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4373'. [ 1385.174483][ T29] audit: type=1326 audit(1741233910.355:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.198401][ T29] audit: type=1326 audit(1741233910.355:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.203938][T17274] hsr_slave_0: left promiscuous mode [ 1385.221175][ T29] audit: type=1326 audit(1741233910.355:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21590 comm="syz.5.4367" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2823b8d169 code=0x7fc00000 [ 1385.488994][T17274] veth1_macvtap: left promiscuous mode [ 1385.494795][ T5844] Bluetooth: hci0: command tx timeout [ 1385.501274][T17274] veth0_macvtap: left promiscuous mode [ 1385.506868][T17274] veth1_vlan: left promiscuous mode [ 1385.512262][T17274] veth0_vlan: left promiscuous mode [ 1387.192429][T21510] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.205804][T21510] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1387.453136][T21384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1387.499014][T21384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1387.569827][ T5844] Bluetooth: hci0: command tx timeout [ 1387.641895][T21384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1387.654807][T21620] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4380'. [ 1387.720997][T21510] team0: Port device team_slave_0 added [ 1387.731470][T21510] team0: Port device team_slave_1 added [ 1387.769199][T21384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1387.910318][T21510] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.921518][T21510] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1387.948936][T21510] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1387.968973][T21510] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1387.977762][T21510] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.004484][T21510] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.148448][T17274] IPVS: stop unused estimator thread 0... [ 1388.218563][T21510] hsr_slave_0: entered promiscuous mode [ 1388.235824][T21510] hsr_slave_1: entered promiscuous mode [ 1388.250748][T21510] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1388.269444][T21510] Cannot create hsr debugfs directory [ 1388.544311][T11818] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1388.728566][T11818] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1388.757429][T11818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1388.928953][T11818] usb 6-1: config 0 descriptor?? [ 1389.182681][T11818] cp210x 6-1:0.0: cp210x converter detected [ 1389.214303][T21643] netlink: 'syz.4.4388': attribute type 4 has an invalid length. [ 1389.265550][T21639] netlink: 'syz.4.4388': attribute type 4 has an invalid length. [ 1389.344931][ T47] lo speed is unknown, defaulting to 1000 [ 1389.413558][T11817] lo speed is unknown, defaulting to 1000 [ 1389.461520][T21384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.504500][T21384] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.526031][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.533190][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.553220][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.559970][T21646] loop3: detected capacity change from 0 to 512 [ 1389.560439][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.661681][T21646] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1389.681779][T21646] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1389.686716][T11818] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 1389.706229][T21384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1389.710467][T11818] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 1389.725630][T11818] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1389.746423][T11818] usb 6-1: USB disconnect, device number 2 [ 1389.755614][T11818] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1389.764394][T11818] cp210x 6-1:0.0: device disconnected [ 1389.869560][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1389.869586][ T29] audit: type=1326 audit(1741233915.355:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1389.920615][ T29] audit: type=1326 audit(1741233915.355:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1389.923818][T21510] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1389.954627][ T29] audit: type=1326 audit(1741233915.355:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.009924][ T29] audit: type=1326 audit(1741233915.355:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.045535][T21510] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1390.073383][T20544] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1390.097107][ T29] audit: type=1326 audit(1741233915.355:1817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.130314][T21510] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1390.170281][ T29] audit: type=1326 audit(1741233915.365:1818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.196392][T21510] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1390.200372][ T29] audit: type=1326 audit(1741233915.365:1819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.295759][ T29] audit: type=1326 audit(1741233915.365:1820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.326322][T21662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4392'. [ 1390.381737][ T29] audit: type=1326 audit(1741233915.365:1821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.421065][T21380] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1390.444975][T21380] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1390.459696][ T29] audit: type=1326 audit(1741233915.365:1822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21645 comm="syz.3.4389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbea5d8d169 code=0x7ffc0000 [ 1390.503688][T21380] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1390.520946][T21666] loop5: detected capacity change from 0 to 256 [ 1390.532231][T21380] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1390.593646][T21384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1390.619225][T21666] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1390.757257][T21384] veth0_vlan: entered promiscuous mode [ 1390.793367][T21384] veth1_vlan: entered promiscuous mode [ 1390.846540][T21510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.904974][T21384] veth0_macvtap: entered promiscuous mode [ 1390.928108][T21384] veth1_macvtap: entered promiscuous mode [ 1390.947629][T21380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1390.968252][T21510] 8021q: adding VLAN 0 to HW filter on device team0 [ 1390.979837][T11817] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1390.996473][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.003650][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.042650][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.049847][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.093751][T21384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.115147][T21384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.135388][T21384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1391.156871][T11817] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1391.159417][T21384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.175995][T11817] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1391.198644][T11817] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1391.206870][T21384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1391.224456][T11817] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1391.235686][T21384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.239847][T11817] usb 6-1: SerialNumber: syz [ 1391.267063][T21384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.286289][T21384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1391.297427][T21384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1391.317182][T21384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1391.352507][T21380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.388635][T21384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.406655][T21384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.418890][T21384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.435572][T21384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1391.498376][T11817] usb 6-1: 0:2 : does not exist [ 1391.506814][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.514002][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.587767][T11817] usb 6-1: USB disconnect, device number 3 [ 1391.600159][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.607372][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1391.764920][T21510] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1391.896184][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1391.913774][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.015222][T21380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1392.020708][T17274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1392.037440][T17274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1392.066852][T21380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1392.382925][T21510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1392.806362][T21510] veth0_vlan: entered promiscuous mode [ 1393.583043][T21715] bridge0: entered promiscuous mode [ 1393.590707][T21715] bridge0: port 3(macsec1) entered blocking state [ 1393.597241][T21715] bridge0: port 3(macsec1) entered disabled state [ 1393.603974][T21715] macsec1: entered allmulticast mode [ 1393.609285][T21715] bridge0: entered allmulticast mode [ 1393.641683][T21715] macsec1: left allmulticast mode [ 1393.646782][T21715] bridge0: left allmulticast mode [ 1393.654542][T21715] bridge0: left promiscuous mode [ 1393.724867][T21510] veth1_vlan: entered promiscuous mode [ 1393.752716][T21380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1393.933470][T21510] veth0_macvtap: entered promiscuous mode [ 1393.968485][T21510] veth1_macvtap: entered promiscuous mode [ 1393.992714][T11760] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1394.047967][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.077570][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.102631][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.132848][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.157828][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1394.172825][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.186060][T21510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1394.190828][T11760] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 1394.207438][T21723] lo speed is unknown, defaulting to 1000 [ 1394.223919][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.249415][T11760] usb 4-1: config 0 has no interface number 0 [ 1394.262880][T11760] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1394.279061][T21735] loop0: detected capacity change from 0 to 256 [ 1394.289692][T11760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1394.297754][T11760] usb 4-1: Product: syz [ 1394.298499][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.307022][T11760] usb 4-1: Manufacturer: syz [ 1394.316620][T21735] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1394.327450][T11760] usb 4-1: SerialNumber: syz [ 1394.336208][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.342783][T11760] usb 4-1: config 0 descriptor?? [ 1394.359591][T21735] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1394.367457][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.389972][T21735] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1394.407738][T21510] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1394.436218][T21510] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1394.587212][T21510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1394.752113][T21510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.799446][T21510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.891730][T21510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1394.955759][T21510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.103144][T21723] lo speed is unknown, defaulting to 1000 [ 1395.355863][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.370555][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.419541][ T5842] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1395.457351][T21380] veth0_vlan: entered promiscuous mode [ 1395.480452][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1395.495130][T11760] asix 4-1:0.239 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1395.508781][T21380] veth1_vlan: entered promiscuous mode [ 1395.509399][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1395.525237][T11760] asix 4-1:0.239: probe with driver asix failed with error -71 [ 1395.600471][T11760] usb 4-1: USB disconnect, device number 5 [ 1395.635304][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1395.691760][ T5842] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1395.716731][T21380] veth0_macvtap: entered promiscuous mode [ 1395.776046][ T5842] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1395.815134][T21380] veth1_macvtap: entered promiscuous mode [ 1395.835749][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.930343][ T5842] usb 5-1: config 0 descriptor?? [ 1395.960904][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1395.980546][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1395.991249][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.005982][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.016506][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.032708][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.085661][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1396.141672][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.215606][T21380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1396.320137][T21751] "syz.0.4420" (21751) uses obsolete ecb(arc4) skcipher [ 1396.351901][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.389466][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.425431][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.451576][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.472298][ T5842] logitech 0003:046D:C29C.0004: hidraw0: USB HID v0.00 Device [HID 046d:c29c] on usb-dummy_hcd.4-1/input0 [ 1396.483973][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.499134][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.512696][T21756] loop2: detected capacity change from 0 to 128 [ 1396.519660][T21380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1396.536293][T21380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1396.554352][T21380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1396.564523][T21756] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1396.583191][T21380] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.595832][T21380] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.605397][T21380] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.614669][T21380] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1396.828433][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.851363][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1396.873627][ T5842] logitech 0003:046D:C29C.0004: no inputs found [ 1396.896366][ T5842] usb 5-1: USB disconnect, device number 16 [ 1396.911147][T21510] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 1396.918584][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1396.946050][T21510] UDF-fs: error (device loop2): udf_read_inode: (ino 114) failed !bh [ 1396.947035][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1397.361716][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 1397.361743][ T29] audit: type=1326 audit(1741233922.855:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.507264][ T29] audit: type=1326 audit(1741233922.885:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.651897][ T29] audit: type=1326 audit(1741233922.885:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.756817][ T29] audit: type=1326 audit(1741233922.905:1876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.817741][T21781] loop3: detected capacity change from 0 to 256 [ 1397.827249][ T29] audit: type=1326 audit(1741233922.905:1877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.858079][ T29] audit: type=1326 audit(1741233922.905:1878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.902817][ T29] audit: type=1326 audit(1741233922.905:1879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1397.936340][T21781] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1398.061445][ T29] audit: type=1326 audit(1741233922.905:1880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1398.174280][ T29] audit: type=1326 audit(1741233922.905:1881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1398.359646][ T29] audit: type=1326 audit(1741233922.905:1882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21774 comm="syz.0.4427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1398.364479][T17274] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.551867][T20544] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 1399.622495][T20544] FAT-fs (loop3): Filesystem has been set read-only [ 1399.640886][T20544] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ff00) [ 1399.719539][ T9506] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 1399.849937][T17274] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1399.901268][ T9506] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 1399.919925][ T9506] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1399.947736][ T9506] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1399.967503][ T9506] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1399.977624][ T9506] usb 1-1: SerialNumber: syz [ 1399.996580][ T9506] usb 1-1: 0:2 : does not exist [ 1400.009002][ T9506] usb 1-1: unit 97 not found! [ 1400.071648][T17274] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.139566][T11813] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1400.190767][T19741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1400.208283][T19741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1400.217667][T19741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1400.228278][T19741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1400.237253][T19741] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1400.244714][T19741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1400.324425][T17274] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1400.332248][ T5946] usb 1-1: USB disconnect, device number 2 [ 1400.341407][T11813] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1400.362186][T11813] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1400.381781][T11813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.397204][T11813] usb 5-1: Product: syz [ 1400.404214][T11813] usb 5-1: Manufacturer: syz [ 1400.408963][T11813] usb 5-1: SerialNumber: syz [ 1400.468004][T21799] lo speed is unknown, defaulting to 1000 [ 1400.717446][T17274] bridge_slave_1: left allmulticast mode [ 1400.729399][T17274] bridge_slave_1: left promiscuous mode [ 1400.737665][T17274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.843287][T17274] bridge_slave_0: left allmulticast mode [ 1400.851013][T17274] bridge_slave_0: left promiscuous mode [ 1400.867825][T17274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.017963][T11813] cdc_ncm 5-1:1.0: failed to get mac address [ 1402.114142][T11813] cdc_ncm 5-1:1.0: bind() failure [ 1402.135830][T11813] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1402.157173][T11813] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1402.177429][T11813] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1402.226922][T11813] usb 5-1: USB disconnect, device number 17 [ 1402.227829][T19741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1402.244510][T19741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1402.259480][T19741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1402.268740][T19741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1402.278417][T19741] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1402.287916][T19741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1402.295056][T17334] Bluetooth: hci0: command tx timeout [ 1402.656146][T17274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1402.668045][T17274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1402.678562][T17274] bond0 (unregistering): Released all slaves [ 1402.696439][T21809] bridge0: entered promiscuous mode [ 1402.704978][T21809] bridge0: port 3(macsec1) entered blocking state [ 1402.711604][T21809] bridge0: port 3(macsec1) entered disabled state [ 1402.718266][T21809] macsec1: entered allmulticast mode [ 1402.723814][T21809] bridge0: entered allmulticast mode [ 1402.731063][T21809] macsec1: left allmulticast mode [ 1402.736122][T21809] bridge0: left allmulticast mode [ 1402.743463][T21809] bridge0: left promiscuous mode [ 1402.871239][T21825] bridge_slave_0: left allmulticast mode [ 1402.896401][T21825] bridge_slave_0: left promiscuous mode [ 1402.908235][T21825] bridge0: port 1(bridge_slave_0) entered disabled state [ 1402.975937][T21825] bridge_slave_1: left allmulticast mode [ 1402.987471][T21825] bridge_slave_1: left promiscuous mode [ 1403.008031][T21825] bridge0: port 2(bridge_slave_1) entered disabled state [ 1403.078554][T21825] bond0: (slave bond_slave_0): Releasing backup interface [ 1403.093844][T21825] bond0: (slave bond_slave_1): Releasing backup interface [ 1403.119034][T21825] team0: Port device team_slave_0 removed [ 1403.131039][T21825] team0: Port device team_slave_1 removed [ 1403.138163][T21825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1403.145992][T21825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.156189][T21825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1403.164371][T21825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1403.190901][T21799] lo speed is unknown, defaulting to 1000 [ 1403.373212][T21815] lo speed is unknown, defaulting to 1000 [ 1403.906449][T21815] lo speed is unknown, defaulting to 1000 [ 1403.989555][T21853] 9pnet: p9_errstr2errno: server reported unknown error @þLì²¼ O00000000000000000006 [ 1404.370001][T19741] Bluetooth: hci0: command tx timeout [ 1404.370009][ T5844] Bluetooth: hci4: command tx timeout [ 1404.385165][T17274] hsr_slave_0: left promiscuous mode [ 1404.410165][T17274] hsr_slave_1: left promiscuous mode [ 1404.432828][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.473380][T17274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1404.505626][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1404.529697][T17274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1404.619952][T17274] veth1_macvtap: left promiscuous mode [ 1404.626026][T17274] veth0_macvtap: left promiscuous mode [ 1404.649712][T17274] veth1_vlan: left promiscuous mode [ 1404.655132][T17274] veth0_vlan: left promiscuous mode [ 1406.450193][ T5844] Bluetooth: hci0: command tx timeout [ 1406.450494][T19741] Bluetooth: hci4: command tx timeout [ 1406.763649][T21891] loop5: detected capacity change from 0 to 512 [ 1406.775955][T21891] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1406.825727][T21891] EXT4-fs (loop5): 1 truncate cleaned up [ 1406.833916][T21891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1406.959462][T17274] team0 (unregistering): Port device team_slave_1 removed [ 1407.032104][T17274] team0 (unregistering): Port device team_slave_0 removed [ 1408.304480][T21875] bridge0: entered promiscuous mode [ 1408.311047][T21875] bridge0: port 1(macsec1) entered blocking state [ 1408.317547][T21875] bridge0: port 1(macsec1) entered disabled state [ 1408.325220][T21875] macsec1: entered allmulticast mode [ 1408.330583][T21875] bridge0: entered allmulticast mode [ 1408.337209][T21875] macsec1: left allmulticast mode [ 1408.342361][T21875] bridge0: left allmulticast mode [ 1408.351224][T21875] bridge0: left promiscuous mode [ 1408.376040][T21881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4469'. [ 1408.464615][T21799] chnl_net:caif_netlink_parms(): no params data found [ 1408.502677][T21897] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1408.539476][T19741] Bluetooth: hci0: command tx timeout [ 1408.544985][T19741] Bluetooth: hci4: command tx timeout [ 1409.049816][T21918] bridge_slave_0: left allmulticast mode [ 1409.070838][T21918] bridge_slave_0: left promiscuous mode [ 1409.099760][T21918] bridge0: port 1(bridge_slave_0) entered disabled state [ 1409.128045][T21918] bridge_slave_1: left allmulticast mode [ 1409.139615][T21918] bridge_slave_1: left promiscuous mode [ 1409.149745][T21918] bridge0: port 2(bridge_slave_1) entered disabled state [ 1409.611740][T21918] bond0: (slave bond_slave_0): Releasing backup interface [ 1409.705989][T21918] bond0: (slave bond_slave_1): Releasing backup interface [ 1409.860018][T21918] team0: Port device team_slave_0 removed [ 1409.920588][T21918] team0: Port device team_slave_1 removed [ 1409.927409][T21918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1409.952207][T21918] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1410.021334][T21918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1410.042780][T21918] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1410.148832][T19741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1410.159988][T19741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1410.170188][T19741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1410.181328][T19741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1410.189076][T19741] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1410.219760][T19741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1410.351884][T21799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.374637][T21799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.382140][T21799] bridge_slave_0: entered allmulticast mode [ 1410.389733][T21799] bridge_slave_0: entered promiscuous mode [ 1410.397723][T21815] chnl_net:caif_netlink_parms(): no params data found [ 1410.418499][T21799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.427433][T21799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.435550][T21799] bridge_slave_1: entered allmulticast mode [ 1410.455143][T21799] bridge_slave_1: entered promiscuous mode [ 1410.493165][T21929] lo speed is unknown, defaulting to 1000 [ 1410.557554][T21799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1410.609859][T19741] Bluetooth: hci4: command tx timeout [ 1410.617616][T21799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1410.726695][T21799] team0: Port device team_slave_0 added [ 1410.760534][T21943] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4491'. [ 1410.771610][T21799] team0: Port device team_slave_1 added [ 1410.779730][ T5946] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1410.874458][T21929] lo speed is unknown, defaulting to 1000 [ 1410.891124][T21815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.906270][T21815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.915467][T21815] bridge_slave_0: entered allmulticast mode [ 1410.930826][T21815] bridge_slave_0: entered promiscuous mode [ 1410.938889][T21799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.949600][ T5946] usb 8-1: Using ep0 maxpacket: 32 [ 1410.954952][T21799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1410.960882][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1410.991244][T21799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1411.027415][T21799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1411.029560][ T5946] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1411.053925][T21799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1411.060171][ T5946] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1411.098476][T21799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.111607][ T5946] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1411.122175][ T5946] usb 8-1: config 0 descriptor?? [ 1411.165371][T21815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1411.188734][T21815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.198184][T21815] bridge_slave_1: entered allmulticast mode [ 1411.206439][T21815] bridge_slave_1: entered promiscuous mode [ 1411.426561][T17274] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.564353][ T5946] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1411.622184][T21815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1411.636161][T21815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1411.688482][T17274] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.844211][ T5946] usb 8-1: USB disconnect, device number 4 [ 1412.107814][T21799] hsr_slave_0: entered promiscuous mode [ 1412.157029][T21799] hsr_slave_1: entered promiscuous mode [ 1412.199855][T21799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1412.207683][T21799] Cannot create hsr debugfs directory [ 1412.289724][T19741] Bluetooth: hci2: command tx timeout [ 1412.372818][T17274] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.433437][T21960] bridge0: port 1(syz_tun) entered blocking state [ 1412.445847][T21960] bridge0: port 1(syz_tun) entered disabled state [ 1412.477298][T21960] syz_tun: entered allmulticast mode [ 1412.498085][T21960] syz_tun: entered promiscuous mode [ 1412.506230][T21960] bridge0: port 1(syz_tun) entered blocking state [ 1412.513499][T21960] bridge0: port 1(syz_tun) entered forwarding state [ 1412.570348][T21815] team0: Port device team_slave_0 added [ 1412.606903][T17274] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.709316][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1412.724627][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1412.734616][T21815] team0: Port device team_slave_1 added [ 1412.794416][T21815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1412.817917][T21815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.886379][T21815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1412.941567][T21815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1412.948603][T21815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1412.987716][T21815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1412.993773][T21975] hub 6-0:1.0: USB hub found [ 1413.060368][T21975] hub 6-0:1.0: 1 port detected [ 1413.624659][T21815] hsr_slave_0: entered promiscuous mode [ 1413.639747][T21815] hsr_slave_1: entered promiscuous mode [ 1413.647032][T21815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1413.667509][T21815] Cannot create hsr debugfs directory [ 1413.939513][T17274] bridge_slave_1: left allmulticast mode [ 1413.945302][T17274] bridge_slave_1: left promiscuous mode [ 1413.963375][T17274] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.990392][T21986] loop7: detected capacity change from 0 to 2048 [ 1414.000758][T17274] bridge_slave_0: left allmulticast mode [ 1414.006453][T17274] bridge_slave_0: left promiscuous mode [ 1414.020191][T17274] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.041238][T21986] Alternate GPT is invalid, using primary GPT. [ 1414.049173][T21986] loop7: p1 p2 p3 [ 1414.378136][T19741] Bluetooth: hci2: command tx timeout [ 1414.833779][T17274] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.847342][T17274] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.866803][T17274] bond0 (unregistering): Released all slaves [ 1414.912587][T21929] chnl_net:caif_netlink_parms(): no params data found [ 1417.369625][T19741] Bluetooth: hci2: command tx timeout [ 1417.617096][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1417.617125][ T29] audit: type=1326 audit(1741233943.105:1885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.660393][ T29] audit: type=1326 audit(1741233943.105:1886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.684117][ T29] audit: type=1326 audit(1741233943.105:1887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.712943][ T29] audit: type=1326 audit(1741233943.105:1888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.736285][ T29] audit: type=1326 audit(1741233943.105:1889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.759759][ T29] audit: type=1326 audit(1741233943.105:1890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.801769][ T29] audit: type=1326 audit(1741233943.105:1891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.839510][ T29] audit: type=1326 audit(1741233943.105:1892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.876106][ T29] audit: type=1326 audit(1741233943.105:1893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1417.906400][ T29] audit: type=1326 audit(1741233943.105:1894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22010 comm="syz.7.4512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7fc00000 [ 1418.122128][T21929] bridge0: port 1(bridge_slave_0) entered blocking state [ 1418.133703][T21929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1418.142555][T21929] bridge_slave_0: entered allmulticast mode [ 1418.150614][T21929] bridge_slave_0: entered promiscuous mode [ 1418.221340][T21929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1418.239059][T21929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1418.257555][T21929] bridge_slave_1: entered allmulticast mode [ 1418.283768][T21929] bridge_slave_1: entered promiscuous mode [ 1418.809120][T22032] No control pipe specified [ 1419.433896][T19741] Bluetooth: hci2: command tx timeout [ 1419.474025][T17274] hsr_slave_0: left promiscuous mode [ 1419.508167][T17274] hsr_slave_1: left promiscuous mode [ 1419.531502][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1419.547583][T17274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1419.563341][T17274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1419.581790][T17274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1419.800531][T17274] veth1_macvtap: left promiscuous mode [ 1419.806166][T17274] veth0_macvtap: left promiscuous mode [ 1419.819880][T17274] veth1_vlan: left promiscuous mode [ 1419.825299][T17274] veth0_vlan: left promiscuous mode [ 1420.269821][ T9506] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1421.171895][ T9506] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1421.182874][ T9506] usb 5-1: config 0 has no interface number 0 [ 1421.189058][ T9506] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1421.200635][ T9506] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1421.214175][ T9506] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1421.223875][ T9506] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1421.233305][ T9506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.243718][ T9506] usb 5-1: config 0 descriptor?? [ 1421.254263][ T9506] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1421.470314][ T9506] usb 5-1: USB disconnect, device number 18 [ 1421.518970][T17274] team0 (unregistering): Port device team_slave_1 removed [ 1421.610961][T17274] team0 (unregistering): Port device team_slave_0 removed [ 1422.508319][T21929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1422.560583][T22046] bridge0: entered promiscuous mode [ 1422.567047][T22046] bridge0: port 1(macsec1) entered blocking state [ 1422.574014][T22046] bridge0: port 1(macsec1) entered disabled state [ 1422.580833][T22046] macsec1: entered allmulticast mode [ 1422.586271][T22046] bridge0: entered allmulticast mode [ 1422.597619][T22046] macsec1: left allmulticast mode [ 1422.603028][T22046] bridge0: left allmulticast mode [ 1422.619323][T22046] bridge0: left promiscuous mode [ 1422.662468][T21929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1422.994100][T21929] team0: Port device team_slave_0 added [ 1423.013872][T22063] loop7: detected capacity change from 0 to 512 [ 1423.023000][T21929] team0: Port device team_slave_1 added [ 1423.111110][T21929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1423.118142][T21929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.144644][T21929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1423.158046][T22063] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1423.182917][T22063] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1423.187484][T21929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1423.209412][T21929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1423.244586][T21929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1423.367870][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1423.367898][ T29] audit: type=1326 audit(1741233948.855:1953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.489013][ T29] audit: type=1326 audit(1741233948.855:1954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.556600][ T29] audit: type=1326 audit(1741233948.905:1955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.592948][T21929] hsr_slave_0: entered promiscuous mode [ 1423.608731][T21929] hsr_slave_1: entered promiscuous mode [ 1423.609487][ T29] audit: type=1326 audit(1741233948.905:1956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.647669][T21929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1423.652032][ T29] audit: type=1326 audit(1741233948.905:1957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.678355][T21929] Cannot create hsr debugfs directory [ 1423.693621][ T29] audit: type=1326 audit(1741233948.905:1958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.697115][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1423.717620][ T29] audit: type=1326 audit(1741233948.905:1959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.790126][ T29] audit: type=1326 audit(1741233948.905:1960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.842260][ T29] audit: type=1326 audit(1741233948.905:1961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1423.875224][ T29] audit: type=1326 audit(1741233948.905:1962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22062 comm="syz.7.4531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b20b8d169 code=0x7ffc0000 [ 1425.131729][T21799] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1425.188442][T21799] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1425.279046][T21799] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1425.307448][T21799] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1425.453762][T21815] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1425.627439][T21815] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1425.665274][T21815] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1425.690126][T21815] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1426.092772][T21799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.233836][T21799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.270943][T17274] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.278162][T17274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.328728][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.335944][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.524508][T21815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.646168][T21929] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1426.699998][ T5841] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1426.703000][T21929] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1426.757792][T21929] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1426.770141][T21815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.783740][T21799] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1426.810718][T21799] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1426.855355][T21929] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1426.869843][ T5841] usb 8-1: Using ep0 maxpacket: 16 [ 1426.877774][ T5841] usb 8-1: config 0 has an invalid interface number: 217 but max is 0 [ 1426.895715][ T5841] usb 8-1: config 0 has no interface number 0 [ 1426.909015][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.916211][T10418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.929123][ T5841] usb 8-1: config 0 interface 217 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1426.944233][ T5841] usb 8-1: config 0 interface 217 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1426.971997][ T5841] usb 8-1: New USB device found, idVendor=17e9, idProduct=0d52, bcdDevice=9b.89 [ 1426.995455][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.002660][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.014188][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.026726][ T5841] usb 8-1: Product: syz [ 1427.032693][ T5841] usb 8-1: Manufacturer: syz [ 1427.037320][ T5841] usb 8-1: SerialNumber: syz [ 1427.082997][ T5841] usb 8-1: config 0 descriptor?? [ 1427.325053][T21929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.387747][ T5841] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1427.402879][T21929] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.430959][ T5841] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1427.457289][ T5841] [drm:udl_init] *ERROR* Selecting channel failed [ 1427.466739][ T2919] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.473975][ T2919] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.508359][ T2919] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.515688][ T2919] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.516037][ T5841] [drm] Initialized udl 0.0.1 for 8-1:0.217 on minor 2 [ 1427.544850][ T5841] [drm] Initialized udl on minor 2 [ 1427.561352][ T5841] udl 8-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1427.571013][T21799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1427.602526][ T5841] udl 8-1:0.217: [drm] Cannot find any crtc or sizes [ 1427.666430][ T5841] usb 8-1: USB disconnect, device number 5 [ 1427.673839][ T9506] udl 8-1:0.217: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1427.681489][T21929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1427.720766][ T9506] udl 8-1:0.217: [drm] Cannot find any crtc or sizes [ 1427.814617][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1427.829493][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.924924][T21815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.279675][T22144] netlink: 144 bytes leftover after parsing attributes in process `syz.7.4554'. [ 1428.305234][T22144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1428.343615][T21929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1428.353592][T22144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1428.469891][ T5946] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1428.547301][T21799] veth0_vlan: entered promiscuous mode [ 1428.611355][T21799] veth1_vlan: entered promiscuous mode [ 1428.667733][ T5946] usb 1-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 1428.691775][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.730572][ T5946] usb 1-1: config 0 descriptor?? [ 1428.762225][T21815] veth0_vlan: entered promiscuous mode [ 1428.781718][T21799] veth0_macvtap: entered promiscuous mode [ 1428.808503][T21799] veth1_macvtap: entered promiscuous mode [ 1428.843599][T21815] veth1_vlan: entered promiscuous mode [ 1428.898413][T21799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1428.920116][T21799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1428.942407][T21799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1428.991071][T21799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.016350][T21799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.035312][T21799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.074582][T21815] veth0_macvtap: entered promiscuous mode [ 1429.098811][T21799] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.128356][T21799] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.149557][T21799] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.162618][T21799] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.163939][ T5946] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 1429.199893][ T5946] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 1429.207061][ T5946] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 1429.236042][T21815] veth1_macvtap: entered promiscuous mode [ 1429.240152][ T5946] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 1429.248946][ T5946] gembird 0003:11FF:3331.0006: unknown main item tag 0x0 [ 1429.257324][T22158] loop7: detected capacity change from 0 to 128 [ 1429.281539][ T5946] gembird 0003:11FF:3331.0006: hidraw0: USB HID v1.01 Device [HID 11ff:3331] on usb-dummy_hcd.0-1/input0 [ 1429.342697][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.386633][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.415621][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1429.431290][T22158] syz.7.4556: attempt to access beyond end of device [ 1429.431290][T22158] loop7: rw=2049, sector=145, nr_sectors = 456 limit=128 [ 1429.455936][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.471410][T21815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1429.504725][T22160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1429.515832][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.530699][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.541731][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1429.551072][T22160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1429.557578][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1429.572200][T22158] syz.7.4556: attempt to access beyond end of device [ 1429.572200][T22158] loop7: rw=524288, sector=145, nr_sectors = 64 limit=128 [ 1429.598550][T21815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1429.611820][ T5841] usb 1-1: USB disconnect, device number 3 [ 1429.678908][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.706608][T21815] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.709830][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1429.718954][T21815] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.733669][T21815] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.774953][T21815] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1429.789925][T21929] veth0_vlan: entered promiscuous mode [ 1429.888982][T21929] veth1_vlan: entered promiscuous mode [ 1429.923142][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1429.944380][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.377366][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.428157][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.544138][T21929] veth0_macvtap: entered promiscuous mode [ 1430.570038][T21036] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1430.617822][T21929] veth1_macvtap: entered promiscuous mode [ 1430.664068][T10418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1430.724124][T10418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1430.745169][T21929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.778591][T21036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1430.806362][T21929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.820322][T22178] loop8: detected capacity change from 0 to 1024 [ 1430.828952][T21036] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1430.864392][T21929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.885694][T21036] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.00 [ 1430.917117][T21929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.949415][T21036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1430.971205][T21036] usb 1-1: config 0 descriptor?? [ 1430.986807][T22178] hfsplus: request for non-existent node 3 in B*Tree [ 1431.007015][T21929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1431.024706][T22178] hfsplus: request for non-existent node 3 in B*Tree [ 1431.039218][T21929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.078744][T21929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1431.128893][T21929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.158527][T21929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.199654][T21929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.219546][T21929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.254120][T21929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.275522][T21929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.300575][T21929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.336337][T21929] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.336401][T21929] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.336454][T21929] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.336505][T21929] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.415472][T21036] apple 0003:05AC:0262.0007: unknown main item tag 0x0 [ 1431.415517][T21036] apple 0003:05AC:0262.0007: unknown main item tag 0x0 [ 1431.415553][T21036] apple 0003:05AC:0262.0007: unknown main item tag 0x0 [ 1431.415587][T21036] apple 0003:05AC:0262.0007: unknown main item tag 0x0 [ 1431.415622][T21036] apple 0003:05AC:0262.0007: unknown main item tag 0x0 [ 1431.429769][T21036] apple 0003:05AC:0262.0007: hidraw0: USB HID v0.00 Device [HID 05ac:0262] on usb-dummy_hcd.0-1/input0 [ 1431.642773][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.642807][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.684854][T11760] usb 1-1: USB disconnect, device number 4 [ 1431.709963][T11813] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1431.733627][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.742805][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.911718][T11813] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1431.935734][T11813] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1431.952847][T11813] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1431.974636][T11813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1431.989917][T11813] usb 8-1: SerialNumber: syz [ 1432.237422][T11813] usb 8-1: 0:2 : does not exist [ 1432.561708][T11813] usb 8-1: USB disconnect, device number 6 [ 1433.622207][T22210] loop6: detected capacity change from 0 to 1024 [ 1433.693067][T22210] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1433.819535][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 1433.819563][ T29] audit: type=1804 audit(1741233959.285:1979): pid=22210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4570" name="/newroot/1/file1/bus" dev="loop6" ino=18 res=1 errno=0 [ 1433.932451][T22210] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4114: comm syz.6.4570: Allocating blocks 497-513 which overlap fs metadata [ 1433.961927][T22210] EXT4-fs (loop6): pa ffff88808d8013a0: logic 256, phys. 385, len 8 [ 1433.970814][T22210] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5365: group 0, free 0, pa_free 1 [ 1434.603124][T22227] loop7: detected capacity change from 0 to 2048 [ 1434.616245][T22228] loop8: detected capacity change from 0 to 1024 [ 1434.683518][T22227] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1434.750185][T22227] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1434.771420][T22227] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1434.786043][T22227] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1434.786043][T22227] [ 1434.795923][T22227] EXT4-fs (loop7): Total free blocks count 0 [ 1434.802201][T22227] EXT4-fs (loop7): Free/Dirty block details [ 1434.808229][T22227] EXT4-fs (loop7): free_blocks=2415919504 [ 1434.814362][T22227] EXT4-fs (loop7): dirty_blocks=16 [ 1434.819713][T22227] EXT4-fs (loop7): Block reservation details [ 1434.825883][T22227] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 1434.862627][T22228] hfsplus: xattr searching failed [ 1434.922484][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1434.980157][T21815] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1435.201626][T22238] loop7: detected capacity change from 0 to 16 [ 1435.242665][T22238] erofs (device loop7): mounted with root inode @ nid 36. [ 1435.317461][T22238] erofs (device loop7): bogus i_mode (0) @ nid 0 [ 1435.337430][T22238] erofs (device loop7): bogus i_mode (0) @ nid 0 [ 1435.474305][T22243] loop9: detected capacity change from 0 to 128 [ 1435.521089][T22243] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256 [ 1435.599420][T22243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1435.608999][T22245] loop6: detected capacity change from 0 to 256 [ 1435.701522][T22245] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1435.779811][T22245] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 1435.845682][T22245] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1436.463822][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1438.412653][T22284] bridge0: entered promiscuous mode [ 1438.431370][T22284] bridge0: entered allmulticast mode [ 1438.514563][T22284] bridge0: left promiscuous mode [ 1439.189898][T22294] loop8: detected capacity change from 0 to 2048 [ 1439.238548][T22294] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1439.321570][T22294] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1439.343381][T22294] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.763420][T22312] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4607'. [ 1442.682149][T21799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1443.164169][T22346] tap0: tun_chr_ioctl cmd 1074025677 [ 1443.182232][T22346] tap0: linktype set to 5 [ 1444.759631][ T29] audit: type=1326 audit(1741233970.235:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1444.839864][ T29] audit: type=1326 audit(1741233970.245:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1444.929496][ T29] audit: type=1326 audit(1741233970.245:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1444.983976][ T29] audit: type=1326 audit(1741233970.245:1983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1445.085173][ T29] audit: type=1326 audit(1741233970.245:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1445.238142][ T29] audit: type=1326 audit(1741233970.245:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1445.426530][ T29] audit: type=1326 audit(1741233970.245:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1445.795071][ T29] audit: type=1326 audit(1741233970.245:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1445.845455][ T29] audit: type=1326 audit(1741233970.245:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1445.876976][ T29] audit: type=1326 audit(1741233970.255:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22355 comm="syz.0.4625" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1448.487366][T22448] bridge_slave_0: left allmulticast mode [ 1448.497995][T22452] loop7: detected capacity change from 0 to 1024 [ 1448.545813][T22448] bridge_slave_0: left promiscuous mode [ 1448.559665][T22448] bridge0: port 1(bridge_slave_0) entered disabled state [ 1448.560576][T22452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1448.641630][T22448] bridge_slave_1: left allmulticast mode [ 1448.648601][T22448] bridge_slave_1: left promiscuous mode [ 1448.655835][T22448] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.734664][T22448] bond0: (slave bond_slave_0): Releasing backup interface [ 1448.898798][T22448] bond0: (slave bond_slave_1): Releasing backup interface [ 1449.011781][T22452] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4114: comm syz.7.4662: Allocating blocks 497-513 which overlap fs metadata [ 1449.091947][T22452] EXT4-fs (loop7): pa ffff88808d801d98: logic 256, phys. 385, len 8 [ 1449.100125][T22452] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5365: group 0, free 0, pa_free 1 [ 1449.130868][T22448] team0: Port device team_slave_0 removed [ 1449.164220][T22472] loop9: detected capacity change from 0 to 2048 [ 1449.174689][T22448] team0: Port device team_slave_1 removed [ 1449.185432][T22472] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1449.196056][T22448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1449.203664][T22448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1449.224181][T22448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1449.232481][T22448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.244060][T22472] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1449.260923][T22472] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1449.778084][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1450.435706][T21929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1451.600116][T22526] loop8: detected capacity change from 0 to 512 [ 1451.762838][T22526] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1451.794218][T22526] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1451.974908][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1451.974936][ T29] audit: type=1326 audit(1741233977.465:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.021096][T22539] bridge0: entered promiscuous mode [ 1452.028478][T22539] bridge0: port 3(macsec1) entered blocking state [ 1452.028565][ T29] audit: type=1326 audit(1741233977.465:1993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.035274][T22539] bridge0: port 3(macsec1) entered disabled state [ 1452.065509][T22539] macsec1: entered allmulticast mode [ 1452.071183][T22539] bridge0: entered allmulticast mode [ 1452.128847][T22539] macsec1: left allmulticast mode [ 1452.135136][T22539] bridge0: left allmulticast mode [ 1452.146830][ T29] audit: type=1326 audit(1741233977.465:1994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.176604][T22539] bridge0: left promiscuous mode [ 1452.235480][T21799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1452.282370][ T29] audit: type=1326 audit(1741233977.465:1995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.376977][ T29] audit: type=1326 audit(1741233977.465:1996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.458693][ T29] audit: type=1326 audit(1741233977.465:1997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.651336][T22557] Bluetooth: MGMT ver 1.23 [ 1452.654740][ T29] audit: type=1326 audit(1741233977.465:1998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.728829][T22558] loop9: detected capacity change from 0 to 512 [ 1452.778991][ T29] audit: type=1326 audit(1741233977.465:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1452.854272][T22558] EXT4-fs (loop9): blocks per group (95) and clusters per group (32768) inconsistent [ 1452.905106][ T29] audit: type=1326 audit(1741233977.465:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1453.034076][ T29] audit: type=1326 audit(1741233977.465:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22525 comm="syz.8.4691" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7ff43718d169 code=0x7ffc0000 [ 1453.115772][T22567] fuse: Bad value for 'fd' [ 1454.003092][T22598] loop8: detected capacity change from 0 to 512 [ 1454.041243][ C0] dccp_invalid_packet: pskb_may_pull failed [ 1454.074614][ C1] dccp_invalid_packet: pskb_may_pull failed [ 1454.133397][T22598] EXT4-fs (loop8): 1 orphan inode deleted [ 1454.170845][ C0] dccp_invalid_packet: pskb_may_pull failed [ 1454.194507][T22598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1454.224429][ T11] EXT4-fs error (device loop8): ext4_release_dquot:6948: comm kworker/u8:0: Failed to release dquot type 1 [ 1454.253971][T22598] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.521634][ C0] dccp_invalid_packet: pskb_may_pull failed [ 1454.524023][T21799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1454.649665][T11813] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1454.714128][T22614] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4725'. [ 1454.833159][T11813] usb 5-1: Using ep0 maxpacket: 32 [ 1454.865660][T11813] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 36975, setting to 1024 [ 1454.897324][T11813] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1456.905286][T11813] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 1456.926340][T11813] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1457.029781][T11813] usb 5-1: Product: syz [ 1457.034023][T11813] usb 5-1: Manufacturer: syz [ 1457.038905][T11813] usb 5-1: SerialNumber: syz [ 1457.075277][T11813] usb 5-1: config 0 descriptor?? [ 1457.100398][T22612] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1457.128333][T22635] loop7: detected capacity change from 0 to 512 [ 1457.163113][T11813] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1457.256141][T22635] loop7: detected capacity change from 0 to 512 [ 1457.314869][T22635] loop7: detected capacity change from 0 to 1024 [ 1457.387650][T22635] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 1457.418493][T11813] usb 5-1: USB disconnect, device number 19 [ 1457.481176][T22645] loop8: detected capacity change from 0 to 1024 [ 1457.494193][T22635] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (25054!=20869) [ 1457.527426][T22635] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1457.579467][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1457.579495][ T29] audit: type=1800 audit(1741233983.045:2006): pid=22645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.4735" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 1457.606733][T22635] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 1457.724906][T22656] loop7: detected capacity change from 0 to 16 [ 1457.752234][T22656] erofs (device loop7): mounted with root inode @ nid 36. [ 1458.029496][T11813] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1458.179482][T11813] usb 5-1: Using ep0 maxpacket: 16 [ 1458.200297][T11813] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1458.209437][T11813] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1458.218531][T11813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.282660][T11813] usb 5-1: config 0 descriptor?? [ 1458.376793][T22667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4744'. [ 1458.700351][T22669] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4746'. [ 1458.716639][T11813] logitech 0003:046D:C295.0008: item fetching failed at offset 4/5 [ 1458.760290][T11813] logitech 0003:046D:C295.0008: parse failed [ 1458.766439][T11813] logitech 0003:046D:C295.0008: probe with driver logitech failed with error -22 [ 1458.799477][ T29] audit: type=1326 audit(1741233984.285:2007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1458.859623][ T29] audit: type=1326 audit(1741233984.285:2008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1458.909510][ T29] audit: type=1326 audit(1741233984.285:2009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1458.924570][ T9506] usb 5-1: USB disconnect, device number 20 [ 1459.008035][ T29] audit: type=1326 audit(1741233984.285:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1459.115265][ T29] audit: type=1326 audit(1741233984.285:2011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1459.189990][ T29] audit: type=1326 audit(1741233984.285:2012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1459.287220][ T29] audit: type=1326 audit(1741233984.285:2013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1459.325309][ T29] audit: type=1326 audit(1741233984.285:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1459.358974][ T29] audit: type=1326 audit(1741233984.285:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22672 comm="syz.0.4748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1460.304150][T22702] loop8: detected capacity change from 0 to 128 [ 1460.397116][T22704] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4760'. [ 1461.937288][T22731] netlink: 252 bytes leftover after parsing attributes in process `syz.7.4773'. [ 1461.985675][T22732] loop8: detected capacity change from 0 to 736 [ 1462.131425][T22738] loop7: detected capacity change from 0 to 164 [ 1462.201503][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4778'. [ 1462.230451][T22738] isofs_fill_super: bread failed, dev=loop7, iso_blknum=41, block=164 [ 1462.388493][T22745] loop9: detected capacity change from 0 to 512 [ 1462.399609][T11760] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1462.518240][T22745] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1462.548020][T22745] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.589601][T11760] usb 5-1: Using ep0 maxpacket: 32 [ 1462.621930][T11760] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1462.653029][T11760] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.693858][T11760] usb 5-1: config 0 has no interface number 0 [ 1462.729484][T11760] usb 5-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 1462.789109][T11760] usb 5-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1462.825693][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 1462.825720][ T29] audit: type=1326 audit(1741233988.305:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1462.829404][T11760] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1462.859484][ T29] audit: type=1326 audit(1741233988.305:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1462.896741][T22757] loop8: detected capacity change from 0 to 2048 [ 1462.917259][T22757] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1462.931297][T11760] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1462.941096][T11760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1462.949129][T11760] usb 5-1: Product: syz [ 1462.953631][ T29] audit: type=1326 audit(1741233988.305:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1462.986896][T11760] usb 5-1: Manufacturer: syz [ 1462.991865][T11760] usb 5-1: SerialNumber: syz [ 1462.994338][T22757] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1463.003775][T11760] usb 5-1: config 0 descriptor?? [ 1463.019592][ T29] audit: type=1326 audit(1741233988.305:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.045047][T11760] smsc75xx v1.0.0 [ 1463.048725][T11760] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1463.059611][T11760] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22 [ 1463.069678][ T29] audit: type=1326 audit(1741233988.305:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.096224][ T29] audit: type=1326 audit(1741233988.305:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.102072][T22764] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4786'. [ 1463.120101][ T29] audit: type=1326 audit(1741233988.305:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.131483][T22757] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1463.158068][ T29] audit: type=1326 audit(1741233988.305:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.197788][ T29] audit: type=1326 audit(1741233988.345:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.203411][T21929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1463.244569][ T29] audit: type=1326 audit(1741233988.345:2032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22744 comm="syz.9.4780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1463.321540][T11816] usb 5-1: USB disconnect, device number 21 [ 1463.616060][T22773] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4791'. [ 1463.625857][T22773] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4791'. [ 1464.474412][T22780] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1464.510824][T21799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1465.626378][T22792] loop9: detected capacity change from 0 to 512 [ 1465.700397][T22792] ext4: Unknown parameter 'noacl' [ 1466.425140][T22813] netlink: 'syz.9.4805': attribute type 13 has an invalid length. [ 1466.590929][ T5842] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1467.331211][T22819] loop8: detected capacity change from 0 to 16 [ 1467.340383][T22820] loop9: detected capacity change from 0 to 16 [ 1467.373083][T22820] erofs (device loop9): mounted with root inode @ nid 36. [ 1467.381379][T22819] erofs (device loop8): mounted with root inode @ nid 36. [ 1467.443109][T22819] erofs (device loop8): unsupported i_format 36 of nid 37 [ 1467.482173][T22819] erofs (device loop8): unsupported i_format 36 of nid 37 [ 1467.629500][ T5842] usb 1-1: Using ep0 maxpacket: 16 [ 1467.636481][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1467.659618][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1467.671163][ T5842] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 1467.689418][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1467.697482][ T5842] usb 1-1: SerialNumber: syz [ 1467.728669][ T5842] usb 1-1: 0:2 : does not exist [ 1468.182179][T22830] loop8: detected capacity change from 0 to 8192 [ 1468.220849][T22830] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1468.234714][T11816] usb 1-1: USB disconnect, device number 5 [ 1468.266585][T22838] loop9: detected capacity change from 0 to 4096 [ 1468.297618][T22838] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 1468.320711][T22838] UDF-fs: Scanning with blocksize 512 failed [ 1468.349270][T22838] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1468.731666][T22846] loop8: detected capacity change from 0 to 256 [ 1468.808037][T22848] bridge0: entered promiscuous mode [ 1468.814308][T22848] bridge0: port 1(macsec1) entered blocking state [ 1468.820878][T22848] bridge0: port 1(macsec1) entered disabled state [ 1468.827526][T22848] macsec1: entered allmulticast mode [ 1468.832980][T22848] bridge0: entered allmulticast mode [ 1468.859021][T22848] macsec1: left allmulticast mode [ 1468.864518][T22848] bridge0: left allmulticast mode [ 1468.882079][T22846] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 1468.916058][T22848] bridge0: left promiscuous mode [ 1468.980186][ T5842] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1469.179635][ T5842] usb 5-1: Using ep0 maxpacket: 16 [ 1469.221855][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.309509][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1469.388951][ T5842] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1469.418589][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.439921][ T5842] usb 5-1: Product: syz [ 1469.458911][ T5842] usb 5-1: Manufacturer: syz [ 1469.473502][ T5842] usb 5-1: SerialNumber: syz [ 1469.640616][T11816] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1469.667919][T22861] loop8: detected capacity change from 0 to 2048 [ 1469.702343][ T5842] usb 5-1: 0:2 : does not exist [ 1469.709427][T22861] EXT4-fs (loop8): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1469.733801][ T5842] usb 5-1: unit 5 not found! [ 1469.774547][T22861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1469.777113][ T5842] usb 5-1: USB disconnect, device number 22 [ 1469.819888][T11816] usb 1-1: Using ep0 maxpacket: 8 [ 1469.828267][T22861] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1469.860148][T11816] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1469.874055][T11816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.027457][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4829'. [ 1470.170620][T11816] usb 1-1: config 0 descriptor?? [ 1471.210605][T11816] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1473.512663][T22892] capability: warning: `syz.9.4833' uses 32-bit capabilities (legacy support in use) [ 1474.121456][T11816] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1474.159592][T11816] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1474.209696][T11816] usb 1-1: USB disconnect, device number 6 [ 1474.266145][T21799] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.324967][T21036] kernel write not supported for file bpf-prog (pid: 21036 comm: kworker/0:2) [ 1474.417680][T22902] syz_tun: left allmulticast mode [ 1474.436665][T22902] syz_tun: left promiscuous mode [ 1474.456728][T22902] bridge0: port 1(syz_tun) entered disabled state [ 1474.787281][T22916] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4844'. [ 1475.077137][T22924] loop8: detected capacity change from 0 to 256 [ 1475.097859][T22924] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1475.149229][T22924] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1475.173770][T22924] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1475.957131][T22935] loop9: detected capacity change from 0 to 8 [ 1476.030080][T22935] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1476.038341][T22935] SQUASHFS error: Failed to read block 0x91: -5 [ 1476.077028][T22935] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1476.093507][T22935] SQUASHFS error: Unable to read inode 0x11f [ 1476.170890][T22942] loop7: detected capacity change from 0 to 2048 [ 1476.211067][T22942] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1476.267837][T22942] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1476.315576][T22942] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1476.964822][T22956] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4859'. [ 1477.880925][T22970] bridge_slave_0: left allmulticast mode [ 1477.886910][T22970] bridge_slave_0: left promiscuous mode [ 1477.935233][T22970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.835471][T22970] bridge_slave_1: left allmulticast mode [ 1478.845690][T22970] bridge_slave_1: left promiscuous mode [ 1478.851861][T22970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.887407][T22970] bond0: (slave bond_slave_0): Releasing backup interface [ 1478.960169][T22970] bond0: (slave bond_slave_1): Releasing backup interface [ 1479.313873][T22970] team0: Port device team_slave_0 removed [ 1479.336764][T22970] team0: Port device team_slave_1 removed [ 1479.344027][T22970] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1479.352311][T22970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1479.364462][T22970] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1479.379494][T22970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1479.488062][T22979] bridge0: entered promiscuous mode [ 1479.495402][T22979] bridge0: port 1(macsec1) entered blocking state [ 1479.501999][T22979] bridge0: port 1(macsec1) entered disabled state [ 1479.508630][T22979] macsec1: entered allmulticast mode [ 1479.514103][T22979] bridge0: entered allmulticast mode [ 1479.558017][T22979] macsec1: left allmulticast mode [ 1479.563281][T22979] bridge0: left allmulticast mode [ 1479.613687][T22979] bridge0: left promiscuous mode [ 1479.699772][T22986] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1479.932576][T22994] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4874'. [ 1480.154934][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.229598][T23042] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4891'. [ 1484.691457][T23054] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1485.919528][T23066] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4900'. [ 1486.425836][T23076] loop7: detected capacity change from 0 to 512 [ 1486.461940][T23076] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1487.153099][T23076] EXT4-fs (loop7): 1 truncate cleaned up [ 1487.230296][T23076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1488.341248][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1488.491064][T23093] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4908'. [ 1489.300297][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.308978][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1491.031790][T23098] loop7: detected capacity change from 0 to 8192 [ 1491.106225][T23110] program syz.4.4914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1491.499830][T11816] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1492.191433][T23098] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1492.204936][T23098] FAT-fs (loop7): Filesystem has been set read-only [ 1492.226168][T23115] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1492.235562][T23115] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1492.249455][T23115] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1492.339591][T11816] usb 1-1: Using ep0 maxpacket: 8 [ 1492.357128][T11816] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 1492.429567][T11816] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1492.479482][T11816] usb 1-1: config 0 has no interface number 0 [ 1492.535249][T11816] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1492.620048][T11816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.690949][T11816] usb 1-1: Product: syz [ 1492.695821][T11816] usb 1-1: Manufacturer: syz [ 1492.742565][T11816] usb 1-1: SerialNumber: syz [ 1492.750196][ T5842] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1493.071212][T11816] usb 1-1: config 0 descriptor?? [ 1493.170603][T21380] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 2074) [ 1493.220076][ T5842] usb 7-1: Using ep0 maxpacket: 32 [ 1493.257466][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 106, changing to 10 [ 1493.289675][ T5842] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50912, setting to 1024 [ 1493.309767][T11818] usb 1-1: USB disconnect, device number 7 [ 1493.359489][ T5842] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1493.408652][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1493.449012][ T5842] usb 7-1: config 0 descriptor?? [ 1493.465658][T23118] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1493.475118][ T5842] hub 7-1:0.0: USB hub found [ 1493.687129][ T5842] hub 7-1:0.0: 1 port detected [ 1494.145232][T23136] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4925'. [ 1494.234457][T23140] loop9: detected capacity change from 0 to 1024 [ 1494.673912][ T9506] hub 7-1:0.0: hub_ext_port_status failed (err = 0) [ 1494.950177][ T9506] usb 7-1: reset high-speed USB device number 2 using dummy_hcd [ 1496.191043][ T5842] usb 7-1: USB disconnect, device number 2 [ 1497.319551][ T9506] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1497.706817][ T9506] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1497.723134][ T9506] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1497.733466][ T9506] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1497.753679][ T9506] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.009707][ T9506] usb 8-1: config 0 descriptor?? [ 1498.838665][ T9506] usbhid 8-1:0.0: can't add hid device: -71 [ 1498.847229][ T9506] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1498.869572][ T9506] usb 8-1: USB disconnect, device number 7 [ 1498.953725][T23191] loop9: detected capacity change from 0 to 1024 [ 1499.034674][T23191] EXT4-fs: Ignoring removed orlov option [ 1499.124099][T23191] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1499.255736][T23191] EXT4-fs (loop9): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1499.618207][T23191] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1499.833951][T23204] loop7: detected capacity change from 0 to 512 [ 1499.880567][T23204] EXT4-fs: Ignoring removed mblk_io_submit option [ 1500.160210][T23204] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1500.205154][T23204] ext4 filesystem being mounted at /95/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.208524][T23196] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1217: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 1501.550990][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.566114][T23191] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 1502.091648][T23191] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 1503.485750][T21929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1503.975152][T23259] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4969'. [ 1505.257104][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1505.257131][ T29] audit: type=1400 audit(1741234030.745:2038): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=23267 comm="syz.6.4970" [ 1505.693239][T23276] loop9: detected capacity change from 0 to 164 [ 1505.813805][T23276] rock: directory entry would overflow storage [ 1505.832063][T23276] rock: sig=0x5053, size=7, remaining=4 [ 1505.901985][T23276] isofs_fill_super: root inode is not a directory. Corrupted media? [ 1509.020989][T23303] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input11 [ 1510.732121][ T11] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.906034][T23329] loop9: detected capacity change from 0 to 512 [ 1511.165042][ T11] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.201400][T23329] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.243530][T23329] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1511.393870][T23329] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.4995: corrupted inode contents [ 1511.480220][ T11] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.495734][T23329] EXT4-fs error (device loop9): ext4_dirty_inode:6042: inode #2: comm syz.9.4995: mark_inode_dirty error [ 1511.582755][T23329] EXT4-fs error (device loop9): ext4_do_update_inode:5154: inode #2: comm syz.9.4995: corrupted inode contents [ 1511.620300][T23329] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #2: comm syz.9.4995: mark_inode_dirty error [ 1511.738012][ T11] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1511.993676][T21929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.560145][ T11] bridge_slave_1: left allmulticast mode [ 1512.566854][ T11] bridge_slave_1: left promiscuous mode [ 1512.660049][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.890137][ T11] bridge_slave_0: left allmulticast mode [ 1512.949639][ T11] bridge_slave_0: left promiscuous mode [ 1512.969899][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.973041][T23356] loop7: detected capacity change from 0 to 128 [ 1513.052550][T23356] vfat: Bad value for 'gid' [ 1513.057220][T23356] vfat: Bad value for 'gid' [ 1514.329549][ T5842] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1514.519771][ T5842] usb 8-1: Using ep0 maxpacket: 32 [ 1514.538115][ T5842] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1514.549388][ T5842] usb 8-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 1514.599698][ T5842] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.632962][ T5842] usb 8-1: config 0 descriptor?? [ 1515.159725][ T5842] wacom 0003:056A:037A.0009: Unknown device_type for 'HID 056a:037a'. Assuming pen. [ 1515.210784][ T5842] wacom 0003:056A:037A.0009: hidraw0: USB HID v0.07 Device [HID 056a:037a] on usb-dummy_hcd.7-1/input0 [ 1515.262443][ T5842] input: Wacom One by Wacom S Pen as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:056A:037A.0009/input/input12 [ 1515.426463][ T5842] usb 8-1: USB disconnect, device number 8 [ 1516.640692][T23388] loop7: detected capacity change from 0 to 512 [ 1516.815817][T23388] EXT4-fs (loop7): 1 orphan inode deleted [ 1516.822871][T23388] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.837802][ T2919] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1516.856554][T23388] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.929817][ T2919] EXT4-fs error (device loop7): ext4_release_dquot:6948: comm kworker/u8:7: Failed to release dquot type 1 [ 1517.363123][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.808598][T23401] loop7: detected capacity change from 0 to 1024 [ 1518.098368][T17274] hfsplus: b-tree write err: -5, ino 8 [ 1519.228206][T23417] loop9: detected capacity change from 0 to 512 [ 1519.263903][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1519.281888][T23417] EXT4-fs (loop9): Test dummy encryption mode enabled [ 1519.322486][T23417] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2240: inode #12: comm syz.9.5031: corrupted in-inode xattr: invalid ea_ino [ 1519.351462][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1519.412954][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1519.448818][ T11] bond0 (unregistering): Released all slaves [ 1519.479994][T23417] EXT4-fs (loop9): Remounting filesystem read-only [ 1519.520653][T23417] EXT4-fs (loop9): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1519.607992][T23351] lo speed is unknown, defaulting to 1000 [ 1520.120192][T21929] EXT4-fs (loop9): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1520.585771][T23351] lo speed is unknown, defaulting to 1000 [ 1524.269639][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5045'. [ 1524.817993][ T11] hsr_slave_0: left promiscuous mode [ 1524.837854][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1524.895877][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.052237][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.091467][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.478536][ T11] veth1_macvtap: left promiscuous mode [ 1525.495189][ T11] veth0_macvtap: left promiscuous mode [ 1527.174502][T17334] Bluetooth: hci0: command 0x0406 tx timeout [ 1527.179782][ T55] Bluetooth: hci4: command 0x0406 tx timeout [ 1529.680261][T23501] fuse: Bad value for 'fd' [ 1529.709998][T19741] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1529.749604][T19741] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1529.760218][T19741] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1529.768410][T19741] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1529.799644][T19741] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1529.823789][T19741] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1531.553506][T23522] loop7: detected capacity change from 0 to 512 [ 1531.560947][T23522] EXT4-fs: Ignoring removed orlov option [ 1531.566630][T23522] EXT4-fs: Ignoring removed i_version option [ 1531.593328][T23522] EXT4-fs (loop7): blocks per group (255) and clusters per group (8192) inconsistent [ 1532.049891][ T5844] Bluetooth: hci6: command tx timeout [ 1532.265616][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1532.810670][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1533.504369][T23542] loop7: detected capacity change from 0 to 512 [ 1533.597489][T23542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1533.717394][T23542] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1533.780050][T23542] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.129947][ T5844] Bluetooth: hci6: command tx timeout [ 1534.401342][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.219554][ T5844] Bluetooth: hci6: command tx timeout [ 1538.118736][T23569] loop7: detected capacity change from 0 to 1024 [ 1538.156529][T23569] EXT4-fs: Ignoring removed nobh option [ 1538.289479][ T5844] Bluetooth: hci6: command tx timeout [ 1538.293716][T23527] bridge_slave_0: left allmulticast mode [ 1538.357317][T23527] bridge_slave_0: left promiscuous mode [ 1538.378054][T23527] bridge0: port 1(bridge_slave_0) entered disabled state [ 1538.459537][T23569] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1538.471563][T23527] bridge_slave_1: left allmulticast mode [ 1538.478684][T23527] bridge_slave_1: left promiscuous mode [ 1538.524070][T23527] bridge0: port 2(bridge_slave_1) entered disabled state [ 1538.525059][T23569] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4114: comm syz.7.5084: Allocating blocks 481-513 which overlap fs metadata [ 1538.577416][T23527] bond0: (slave bond_slave_0): Releasing backup interface [ 1538.682503][T23580] hub 9-0:1.0: USB hub found [ 1538.695179][T23580] hub 9-0:1.0: 1 port detected [ 1538.735927][T23527] bond0: (slave bond_slave_1): Releasing backup interface [ 1538.867329][T23527] team0: Port device team_slave_0 removed [ 1538.901335][T23584] input: syz0 as /devices/virtual/input/input15 [ 1538.924632][T23527] team0: Port device team_slave_1 removed [ 1538.945704][T23527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1538.962078][T23527] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1539.007189][T23527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1539.020490][T23527] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1539.037496][T21380] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.264174][T23504] lo speed is unknown, defaulting to 1000 [ 1540.397582][T23504] lo speed is unknown, defaulting to 1000 [ 1541.006492][T23605] loop9: detected capacity change from 0 to 1024 [ 1541.591025][ T2919] hfsplus: b-tree write err: -5, ino 4 [ 1541.616514][T23504] chnl_net:caif_netlink_parms(): no params data found [ 1544.263285][T23649] loop7: detected capacity change from 0 to 8192 [ 1544.512983][T13153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1544.855262][T23663] loop9: detected capacity change from 0 to 512 [ 1545.023482][T23663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1545.110948][T23504] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.179540][T23663] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1545.200624][T23504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.219769][T23504] bridge_slave_0: entered allmulticast mode [ 1545.227126][T23504] bridge_slave_0: entered promiscuous mode [ 1545.309428][ T29] audit: type=1326 audit(1741234070.795:2039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.383131][ T29] audit: type=1326 audit(1741234070.795:2040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.448639][T13153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.473499][ T29] audit: type=1326 audit(1741234070.795:2041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.523568][T23504] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.559645][T23504] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.566418][ T29] audit: type=1326 audit(1741234070.795:2042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.629638][ T29] audit: type=1326 audit(1741234070.795:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.651043][T23504] bridge_slave_1: entered allmulticast mode [ 1545.654239][ T29] audit: type=1326 audit(1741234070.825:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.689686][ T29] audit: type=1326 audit(1741234070.825:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.693703][T21929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1545.721996][ T29] audit: type=1326 audit(1741234070.825:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.746036][ T29] audit: type=1326 audit(1741234070.825:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1545.750546][T23504] bridge_slave_1: entered promiscuous mode [ 1545.768825][ T29] audit: type=1326 audit(1741234070.825:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23661 comm="syz.9.5118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f851458d169 code=0x7ffc0000 [ 1546.029544][T23679] netlink: 20 bytes leftover after parsing attributes in process `syz.6.5126'. [ 1546.636372][T13153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1546.764658][T23504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.148223][T13153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.247124][T23504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1547.601565][T23705] loop9: detected capacity change from 0 to 8 [ 1547.696117][T23504] team0: Port device team_slave_0 added [ 1547.713151][T23504] team0: Port device team_slave_1 added [ 1549.527793][T23504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.556139][T23504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.806797][T23504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.271925][T23504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.383805][T23504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1550.450669][T23504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.723702][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1550.730116][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1550.806485][T23731] loop7: detected capacity change from 0 to 256 [ 1550.926472][T23731] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1550.937674][T23731] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 1550.975008][T23731] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1550.981648][T23504] hsr_slave_0: entered promiscuous mode [ 1551.015144][T23504] hsr_slave_1: entered promiscuous mode [ 1551.021732][T23504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1551.029733][T23504] Cannot create hsr debugfs directory [ 1551.059481][ T5842] usb 10-1: new low-speed USB device number 3 using dummy_hcd [ 1551.159423][T11813] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1551.221727][ T5842] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1551.243083][ T5842] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1551.261581][ T5842] usb 10-1: config 1 has no interface number 1 [ 1551.278592][ T5842] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1551.312353][ T5842] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 16, setting to 0 [ 1551.347640][T11813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1551.350245][ T5842] usb 10-1: string descriptor 0 read error: -22 [ 1551.373331][ T5842] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1551.400203][T11813] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1551.402164][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.453591][T11813] usb 9-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1551.469166][ T5842] usb 10-1: low speed audio streaming not supported [ 1551.518910][T11813] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1551.547081][T11813] usb 9-1: config 0 descriptor?? [ 1551.689808][ T9506] usb 10-1: USB disconnect, device number 3 [ 1552.143127][T11813] petalynx 0003:18B1:0037.000A: unbalanced collection at end of report description [ 1552.170094][T11813] petalynx 0003:18B1:0037.000A: parse failed [ 1552.176214][T11813] petalynx 0003:18B1:0037.000A: probe with driver petalynx failed with error -22 [ 1553.029209][ T9506] usb 9-1: USB disconnect, device number 2 [ 1554.717490][T23775] loop9: detected capacity change from 0 to 2048 [ 1554.759491][T23775] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 1554.895526][T23775] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1554.908655][T23775] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1555.159533][ T9506] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1556.030065][ T9506] usb 9-1: Using ep0 maxpacket: 32 [ 1556.043693][ T9506] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.054922][ T9506] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.065088][ T9506] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1556.075352][ T9506] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.111858][ T9506] usb 9-1: config 0 descriptor?? [ 1556.119513][ T9506] hub 9-1:0.0: USB hub found [ 1556.239996][T13153] bond0 (unregistering): Released all slaves [ 1556.339045][ T9506] hub 9-1:0.0: 1 port detected [ 1556.503351][T23759] sch_tbf: burst 2944 is lower than device lo mtu (65550) ! [ 1556.996504][ T9506] hub 9-1:0.0: hub_ext_port_status failed (err = 0) [ 1557.107301][T21929] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1557.329582][T11816] usb 9-1: USB disconnect, device number 3 [ 1557.409538][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 1557.409565][ T29] audit: type=1326 audit(1741234082.885:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1557.687229][ T29] audit: type=1326 audit(1741234082.885:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1557.748956][ T29] audit: type=1326 audit(1741234082.885:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1557.819450][ T29] audit: type=1326 audit(1741234082.885:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1557.959418][ T29] audit: type=1326 audit(1741234082.885:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1558.052246][ T29] audit: type=1326 audit(1741234082.885:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1558.275871][ T29] audit: type=1326 audit(1741234082.885:2059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1558.789504][ T29] audit: type=1326 audit(1741234082.885:2060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1558.872698][ T29] audit: type=1326 audit(1741234082.895:2061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1558.999448][ T29] audit: type=1326 audit(1741234082.895:2062): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23785 comm="syz.0.5159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f82d598d169 code=0x7ffc0000 [ 1560.414051][T23810] loop7: detected capacity change from 0 to 512 [ 1560.801238][T23810] EXT4-fs error (device loop7): ext4_ext_check_inode:524: inode #2: comm syz.7.5164: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 7, max 4(4), depth 0(0) [ 1561.024367][T23810] EXT4-fs (loop7): get root inode failed [ 1561.056936][T13153] hsr_slave_0: left promiscuous mode [ 1561.087089][T23810] EXT4-fs (loop7): mount failed [ 1561.123339][T13153] veth1_macvtap: left promiscuous mode [ 1561.225059][T13153] veth0_macvtap: left promiscuous mode [ 1561.239807][T13153] veth1_vlan: left promiscuous mode [ 1561.255469][T13153] veth0_vlan: left promiscuous mode [ 1561.364054][T23810] loop7: detected capacity change from 0 to 128 [ 1566.297147][T11816] lo speed is unknown, defaulting to 1000 [ 1566.420945][T11816] infiniband yz0: ib_query_port failed (-19) [ 1566.954572][T23880] loop9: detected capacity change from 0 to 2048 [ 1567.049503][T11816] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1567.076098][T23880] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1567.108417][ C0] ------------[ cut here ]------------ [ 1567.114097][ C0] memcpy: detected field-spanning write (size 16) of single field "_Generic(info, const struct ip_tunnel_info * : ((const void *)((info) + 1)), struct ip_tunnel_info * : ((void *)((info) + 1)) )" at ./include/net/ip_tunnels.h:662 (size 0) [ 1567.138241][ C0] WARNING: CPU: 0 PID: 11760 at ./include/net/ip_tunnels.h:662 geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.149045][ C0] Modules linked in: [ 1567.153129][ C0] CPU: 0 UID: 0 PID: 11760 Comm: kworker/0:6 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1567.164101][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1567.174339][ C0] Workqueue: mld mld_ifc_work [ 1567.179107][ C0] RIP: 0010:geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.185442][ C0] Code: 31 e8 ff ff e8 89 c9 46 fb c6 05 8a e7 d7 09 01 90 31 c9 48 c7 c2 20 54 16 8c 4c 89 e6 48 c7 c7 00 55 16 8c e8 d9 f8 06 fb 90 <0f> 0b 90 90 e9 5a ec ff ff e8 5a c9 46 fb e8 75 46 c6 02 31 ff 41 [ 1567.205133][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00010282 [ 1567.211256][ C0] RAX: 0000000000000000 RBX: ffff88805beca032 RCX: ffffffff817a2229 [ 1567.219424][ C0] RDX: ffff88801eb55a00 RSI: ffffffff817a2236 RDI: 0000000000000001 [ 1567.227430][ C0] RBP: ffffc900000078b8 R08: 0000000000000001 R09: 0000000000000000 [ 1567.235457][ C0] R10: 0000000000000000 R11: 0000000000000007 R12: 0000000000000010 [ 1567.243503][ C0] R13: ffff88807f026000 R14: 0000000000000000 R15: ffff8880318aca00 [ 1567.251553][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1567.260546][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1567.267176][ C0] CR2: 00007f82d5b762d8 CR3: 00000000348e6000 CR4: 0000000000350ef0 [ 1567.273701][T11816] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.275176][ C0] Call Trace: [ 1567.288592][ C0] [ 1567.291484][ C0] ? __warn+0xea/0x3c0 [ 1567.295598][ C0] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.301290][ C0] ? report_bug+0x3c0/0x580 [ 1567.305836][ C0] ? handle_bug+0x54/0xa0 [ 1567.310258][ C0] ? exc_invalid_op+0x17/0x50 [ 1567.315013][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 1567.320111][ C0] ? __warn_printk+0x199/0x350 [ 1567.324907][ C0] ? __warn_printk+0x1a6/0x350 [ 1567.329792][ C0] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.335495][ C0] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1567.341371][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.347043][ C0] ? udp4_lib_lookup2+0x20f/0x5a0 [ 1567.352126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.357819][ C0] ? udp4_lib_lookup2+0x137/0x5a0 [ 1567.362927][ C0] ? udp4_lib_lookup2+0x8e/0x5a0 [ 1567.367925][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.373647][ C0] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1567.379532][ C0] udp_queue_rcv_one_skb+0xad8/0x18b0 [ 1567.384951][ C0] udp_queue_rcv_skb+0x198/0xd10 [ 1567.389957][ C0] ? raw_local_deliver+0x623/0xcd0 [ 1567.395097][ C0] udp_unicast_rcv_skb+0x165/0x3b0 [ 1567.400311][ C0] __udp4_lib_rcv+0x25fd/0x34e0 [ 1567.405247][ C0] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 1567.410532][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.416209][ C0] ? rcu_is_watching+0x12/0xc0 [ 1567.421047][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.426768][ C0] ? __pfx_udp_rcv+0x10/0x10 [ 1567.431436][ C0] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 1567.436956][ C0] ip_local_deliver_finish+0x316/0x570 [ 1567.442507][ C0] ip_local_deliver+0x18e/0x1f0 [ 1567.447399][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1567.452843][ C0] ip_rcv+0x2c3/0x5d0 [ 1567.456904][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1567.461471][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 1567.467405][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1567.473903][ C0] ? rcu_is_watching+0x12/0xc0 [ 1567.478703][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.484439][ C0] ? process_backlog+0x3f1/0x15f0 [ 1567.489557][ C0] ? process_backlog+0x3f1/0x15f0 [ 1567.494638][ C0] __netif_receive_skb+0x1d/0x160 [ 1567.499735][ C0] process_backlog+0x443/0x15f0 [ 1567.504628][ C0] __napi_poll.constprop.0+0xba/0x550 [ 1567.510071][ C0] net_rx_action+0xa94/0x1010 [ 1567.514798][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1567.519980][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1567.524776][ C0] ? __entry_text_end+0x1020c5/0x1020c9 [ 1567.530400][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1567.535622][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.541338][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.547011][ C0] ? sched_clock+0x38/0x60 [ 1567.551486][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1567.556385][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.562082][ C0] ? mark_held_locks+0x9f/0xe0 [ 1567.566883][ C0] handle_softirqs+0x216/0x8f0 [ 1567.571717][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1567.577050][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.582771][ C0] ? irqtime_account_irq+0x176/0x2d0 [ 1567.588100][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1567.593281][ C0] do_softirq+0xb2/0xf0 [ 1567.597490][ C0] [ 1567.600459][ C0] [ 1567.603405][ C0] __local_bh_enable_ip+0x100/0x120 [ 1567.608656][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1567.613842][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 1567.618826][ C0] ? hlock_class+0x4e/0x130 [ 1567.623384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.629059][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1567.634163][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1567.639626][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.645338][ C0] ? __free_zapped_classes+0x2c0/0x320 [ 1567.650865][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.656571][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1567.662197][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1567.667013][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.672712][ C0] ? find_held_lock+0x2d/0x110 [ 1567.677506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.683223][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.688907][ C0] ? find_held_lock+0x2d/0x110 [ 1567.693721][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.699525][ C0] ? ip6_finish_output+0x3f9/0x1360 [ 1567.704766][ C0] ? __pfx_lock_release+0x10/0x10 [ 1567.709850][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.715548][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.721261][ C0] ? mark_held_locks+0x9f/0xe0 [ 1567.726068][ C0] ip6_finish_output2+0xed9/0x20a0 [ 1567.731249][ C0] ip6_finish_output+0x3f9/0x1360 [ 1567.736321][ C0] ip6_output+0x1f8/0x540 [ 1567.740915][ C0] mld_sendpack+0x9f0/0x11d0 [ 1567.745568][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 1567.750680][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1567.756384][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.762111][ C0] mld_ifc_work+0x740/0xca0 [ 1567.766653][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.772356][ C0] ? lock_acquire+0x2f/0xb0 [ 1567.776898][ C0] process_one_work+0x9c8/0x1ba0 [ 1567.781912][ C0] ? __pfx_psi_avgs_work+0x10/0x10 [ 1567.787046][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1567.792496][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.798193][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1567.803917][ C0] ? assign_work+0x1a0/0x250 [ 1567.808558][ C0] worker_thread+0x6c8/0xf00 [ 1567.813239][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1567.818400][ C0] kthread+0x3b2/0x750 [ 1567.822535][ C0] ? __pfx_kthread+0x10/0x10 [ 1567.827155][ C0] ? lock_acquire+0x2f/0xb0 [ 1567.831767][ C0] ? __pfx_kthread+0x10/0x10 [ 1567.836402][ C0] ret_from_fork+0x48/0x80 [ 1567.840895][ C0] ? __pfx_kthread+0x10/0x10 [ 1567.845528][ C0] ret_from_fork_asm+0x1a/0x30 [ 1567.850399][ C0] [ 1567.853446][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1567.860821][ C0] CPU: 0 UID: 0 PID: 11760 Comm: kworker/0:6 Not tainted 6.14.0-rc5-syzkaller-00023-gbb2281fb05e5 #0 [ 1567.871703][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1567.881784][ C0] Workqueue: mld mld_ifc_work [ 1567.886539][ C0] Call Trace: [ 1567.889831][ C0] [ 1567.892683][ C0] dump_stack_lvl+0x3d/0x1f0 [ 1567.897310][ C0] panic+0x71d/0x800 [ 1567.901235][ C0] ? __pfx_panic+0x10/0x10 [ 1567.905682][ C0] ? show_trace_log_lvl+0x29d/0x3d0 [ 1567.910923][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 1567.916072][ C0] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.921732][ C0] check_panic_on_warn+0xab/0xb0 [ 1567.926712][ C0] __warn+0xf6/0x3c0 [ 1567.930634][ C0] ? geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.936292][ C0] report_bug+0x3c0/0x580 [ 1567.940655][ C0] handle_bug+0x54/0xa0 [ 1567.944842][ C0] exc_invalid_op+0x17/0x50 [ 1567.949381][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1567.954261][ C0] RIP: 0010:geneve_udp_encap_recv+0x2498/0x2b90 [ 1567.960526][ C0] Code: 31 e8 ff ff e8 89 c9 46 fb c6 05 8a e7 d7 09 01 90 31 c9 48 c7 c2 20 54 16 8c 4c 89 e6 48 c7 c7 00 55 16 8c e8 d9 f8 06 fb 90 <0f> 0b 90 90 e9 5a ec ff ff e8 5a c9 46 fb e8 75 46 c6 02 31 ff 41 [ 1567.980166][ C0] RSP: 0018:ffffc900000077a0 EFLAGS: 00010282 [ 1567.986256][ C0] RAX: 0000000000000000 RBX: ffff88805beca032 RCX: ffffffff817a2229 [ 1567.994259][ C0] RDX: ffff88801eb55a00 RSI: ffffffff817a2236 RDI: 0000000000000001 [ 1568.002290][ C0] RBP: ffffc900000078b8 R08: 0000000000000001 R09: 0000000000000000 [ 1568.010286][ C0] R10: 0000000000000000 R11: 0000000000000007 R12: 0000000000000010 [ 1568.018267][ C0] R13: ffff88807f026000 R14: 0000000000000000 R15: ffff8880318aca00 [ 1568.026271][ C0] ? __warn_printk+0x199/0x350 [ 1568.031070][ C0] ? __warn_printk+0x1a6/0x350 [ 1568.035886][ C0] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1568.041714][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.047383][ C0] ? udp4_lib_lookup2+0x20f/0x5a0 [ 1568.052439][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.058107][ C0] ? udp4_lib_lookup2+0x137/0x5a0 [ 1568.063169][ C0] ? udp4_lib_lookup2+0x8e/0x5a0 [ 1568.068151][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.073829][ C0] ? __pfx_geneve_udp_encap_recv+0x10/0x10 [ 1568.079664][ C0] udp_queue_rcv_one_skb+0xad8/0x18b0 [ 1568.085085][ C0] udp_queue_rcv_skb+0x198/0xd10 [ 1568.090059][ C0] ? raw_local_deliver+0x623/0xcd0 [ 1568.095192][ C0] udp_unicast_rcv_skb+0x165/0x3b0 [ 1568.100387][ C0] __udp4_lib_rcv+0x25fd/0x34e0 [ 1568.105289][ C0] ? __pfx___udp4_lib_rcv+0x10/0x10 [ 1568.110528][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.116193][ C0] ? rcu_is_watching+0x12/0xc0 [ 1568.120999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.126756][ C0] ? __pfx_udp_rcv+0x10/0x10 [ 1568.131383][ C0] ip_protocol_deliver_rcu+0x2ff/0x4c0 [ 1568.136874][ C0] ip_local_deliver_finish+0x316/0x570 [ 1568.142375][ C0] ip_local_deliver+0x18e/0x1f0 [ 1568.147257][ C0] ? __pfx_ip_local_deliver+0x10/0x10 [ 1568.152670][ C0] ip_rcv+0x2c3/0x5d0 [ 1568.156680][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1568.161227][ C0] __netif_receive_skb_one_core+0x199/0x1e0 [ 1568.167167][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1568.173645][ C0] ? rcu_is_watching+0x12/0xc0 [ 1568.178437][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.184126][ C0] ? process_backlog+0x3f1/0x15f0 [ 1568.189232][ C0] ? process_backlog+0x3f1/0x15f0 [ 1568.194319][ C0] __netif_receive_skb+0x1d/0x160 [ 1568.199399][ C0] process_backlog+0x443/0x15f0 [ 1568.204313][ C0] __napi_poll.constprop.0+0xba/0x550 [ 1568.209730][ C0] net_rx_action+0xa94/0x1010 [ 1568.214461][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1568.219609][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1568.224425][ C0] ? __entry_text_end+0x1020c5/0x1020c9 [ 1568.230013][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 1568.235249][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.240947][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.246632][ C0] ? sched_clock+0x38/0x60 [ 1568.251102][ C0] ? sched_clock_cpu+0x6d/0x4d0 [ 1568.256007][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.261694][ C0] ? mark_held_locks+0x9f/0xe0 [ 1568.266584][ C0] handle_softirqs+0x216/0x8f0 [ 1568.271408][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1568.276870][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.282549][ C0] ? irqtime_account_irq+0x176/0x2d0 [ 1568.287890][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1568.293043][ C0] do_softirq+0xb2/0xf0 [ 1568.297248][ C0] [ 1568.300195][ C0] [ 1568.303156][ C0] __local_bh_enable_ip+0x100/0x120 [ 1568.308406][ C0] ? __dev_queue_xmit+0x89b/0x43e0 [ 1568.313569][ C0] __dev_queue_xmit+0x8b0/0x43e0 [ 1568.318561][ C0] ? hlock_class+0x4e/0x130 [ 1568.323100][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.328789][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 1568.333867][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1568.339389][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.345109][ C0] ? __free_zapped_classes+0x2c0/0x320 [ 1568.350633][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.356352][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 1568.361617][ C0] ? __pfx_mark_lock+0x10/0x10 [ 1568.366427][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.372109][ C0] ? find_held_lock+0x2d/0x110 [ 1568.376910][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.382589][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.388260][ C0] ? find_held_lock+0x2d/0x110 [ 1568.393060][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.398747][ C0] ? ip6_finish_output+0x3f9/0x1360 [ 1568.403987][ C0] ? __pfx_lock_release+0x10/0x10 [ 1568.409036][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.414709][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.420379][ C0] ? mark_held_locks+0x9f/0xe0 [ 1568.425185][ C0] ip6_finish_output2+0xed9/0x20a0 [ 1568.430355][ C0] ip6_finish_output+0x3f9/0x1360 [ 1568.435415][ C0] ip6_output+0x1f8/0x540 [ 1568.439790][ C0] mld_sendpack+0x9f0/0x11d0 [ 1568.444460][ C0] ? __pfx_mld_sendpack+0x10/0x10 [ 1568.449562][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1568.455240][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.460935][ C0] mld_ifc_work+0x740/0xca0 [ 1568.465493][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.471175][ C0] ? lock_acquire+0x2f/0xb0 [ 1568.475737][ C0] process_one_work+0x9c8/0x1ba0 [ 1568.480727][ C0] ? __pfx_psi_avgs_work+0x10/0x10 [ 1568.485887][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1568.491368][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.497067][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1568.502778][ C0] ? assign_work+0x1a0/0x250 [ 1568.507435][ C0] worker_thread+0x6c8/0xf00 [ 1568.512086][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1568.517242][ C0] kthread+0x3b2/0x750 [ 1568.521353][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.525989][ C0] ? lock_acquire+0x2f/0xb0 [ 1568.530537][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.535150][ C0] ret_from_fork+0x48/0x80 [ 1568.539605][ C0] ? __pfx_kthread+0x10/0x10 [ 1568.544219][ C0] ret_from_fork_asm+0x1a/0x30 [ 1568.549020][ C0] [ 1568.552411][ C0] Kernel Offset: disabled [ 1568.556756][ C0] Rebooting in 86400 seconds..