last executing test programs: 3m52.500388779s ago: executing program 32 (id=110): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file0\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==") gettid() r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r0, r0, 0x0, 0xe0000000) 3m34.413826091s ago: executing program 1 (id=235): unshare(0x64000600) socket$inet6(0xa, 0x80002, 0x88) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x401, 0x4, 0x3, {0x0, 0x0, 0x0, r4, 0x60, 0x880}, [@IFLA_MASTER={0x8, 0x3, r1}]}, 0x28}, 0x1, 0xd, 0x0, 0x480c5}, 0x10) 3m34.084073597s ago: executing program 1 (id=241): syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 3m33.687620983s ago: executing program 1 (id=244): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(r0, 0x29, 0x8, 0x0, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, 0x0) 3m32.053985639s ago: executing program 1 (id=250): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$eJzs3U9sHNd9B/DfGy3FpdxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUWRNi3+EWV9Prb43Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cvHU6fSwWwEA7KfLo189dcb9HwAeK1f9/z8AAAAAAAAAAAAAABx0KYp4MlLMXl5N49X7jvqldt/tO2PDI5tXG0hVzUNV+fJX/fSZs+e+9MLQ+W5eak9/QP3d9tl4bfTqxcbLM7dm5ybn5ycnGmPT7eszE5Pb3sNO6290ojoBjVuv3564cWO+ceb5s/d8fGfw/f4njg1eGHr25DPdsmPDIyOj60XqveVrD9yQjq1meByOIk5Giue+99PUiogidn4u6vs79hsNVJ04UXVibHik6shUuzW9UH54pXsiiohGT6Vm9xxtPhZR69vXPmytGbFYNr9s8Imye6OzrbnWtanJxpXW3EJ7oT0zfSV1Wlv2pxFFnE8RSxGx0n//7vqiiFqk+M7R1XQtIg51z8MXq4nBW7ej2MM+bkPZzkZfxFLxCIzZAdYfRbwaKX72zvG4nq8z1bXmCxGvlvmDiLfKfCkilV+McxHvbfI94tFUiyL+shz/C6tporoedK8rl77W+Mr0jZmest3ryke8P9x3pXhI94eBDbk/7rs2Ha1+HpRrUz2KaFVX/NX04L/ZAQAAAAAAAAAAAAAAAGC3DUQRn4kUr/zHn1TziqOal370wtAfDv5q75zxpz9kP2XZ5yNisdjenNzDeWLglXQlpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989npaid03x9vTNxtXWtanOqrDdtX+7a6avra2tNVInmznHcy7mXMq5nHMlZxS5fs5mzvGcizmXci7nXMkZh3L9nM2c4zkXcy7lXM65kjNquX7OZs7xnIs5l3Iu51zJGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jdWU6SIaEaMRyeX+x926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzbvbahGRqn87jpc/zkXzcJmfjOZQmS9F82LOVpW15rceQvvZmb5UxI8jRX/97bsDnse/r/Pu7tcg3vrm+rvP1jp5qPvh4Pv9Txw7emFo5Dee3up12qwBJy61p2/faYwNj4yM9myu5aN/smfbYD5usTtdJyLm33jz9dbU1OTcg78ovwIPUr0c4Z0ffT9fpNqD9dSLR/RF1A5EMx5O33kMlPf/9yLF7777n90bfuf+X49f6by7e4ePn//Z+v3/xY072ub9v7axXr7/l/f0ze7/T/ZsezH/bqSvFlFfuDXbdyyiPv/Gmyfbt1o3J29OTp87derLQ0NfPnuq73BE/UZ7arLn1a6cLgAAAAAAAAAAAAAAAID9k4r4/UjR+vFqakTEnWq+1uCFoWdPPnMoDlXzre6Zt/3a6NWLjZdnbs3OTc7PT040xqbb12cmJrd7uHo13WtseGRPOvOhBva4/QP1l2dm35hr3/zjhU0/P1K/eG1+Ya51ffOPYyCKiGbvlhNVg8eGR6pGT7Vb01XVK5tOpv/o+lIR/xUprp9rpM/nbXn+/8YZ/vfM/1/cuKM9mv//iZ5t5TFTKuLnkeJ3/urp+HzVziNx3znL5f4uUpw4/7lcLg6X5bpt6DxXoDMzsCz7f5Hin35xb9nufMgn18ue3vaJfUSU4380Unz/L74bv5m33fv8h83H/8jGHe3R+D/Vs+3IPc8r2HHXyeN/MlK89OTb8Vt52wc9/6P77I3jufDd53Ps0fh/qmfbYD7ub+9O1wEAAAAAAAAAAB5pfamIv48UPxyppRfytu38/b+JjTvao7//9emebRO7s17Rh77Y8UkFAAAAgAOiLxXxk0hxc+Htu3Oo753/3TP/8/fW538Opw2fVn/O92vVcwN288//eg3m447vvNsAAAAAAAAAAAAAAAAAAABwoKRUxAt5PfXxaj7/xJbrqS9Hilf+57lcLh0ry3XXgR+sftYvz0yfvDg1NXO9tdC6NjXZGJ1tXZ8s6z4VKVb/9nO5blGtr95db76zxvv6WuxzkWLkH7plO2uxd9cmf2q97Omy7CcixX//471lu+tYf2q97Jmy7N9Eiq//y+Zlj62XPVuW/W6k+NHXG92yR8qy3eejfnq97PPXZ4o9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97a+nuXP68/n9fz9vKW9/sWe9/gzvVOv+D1fr/W71+kPX/q+cKLG51VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWL28mpa7i/fd9Qvtadv3xkbHtm82kCqah6qype/6qfPnD33pReGznfzg+vvts/Ea6NXLzZenrk1Ozc5Pz850Ribbl+fmZjc9h52Wn+jE9UJaNx6/fbEjRvzjTPPn73n4zuD7/c/cWzwwtCzJ5/plh0bHhkZ7SlT63vgo98nbbH9cBTx15Hiue/9NP2wP6KInZ+L+747u9iPbRioOnGi6sTY8EjVkal2a3qh/PBK90QUEY2eSs3uOdqHsdiRZsRi2fyywSfK7o3OtuZa16YmG1dacwvthfbM9JXUaW3Zn0YUcT5FLEXESv/9u+uLIl6PFN85upr+tT/iUPc8fPHy6FdPndm6HcUe9nEbynY2+iKWikdgzA6w/ijinyPFz945Hv/WH1GLzq/4QsSrZf4g4q3ojHcqvxjnIt7b5HvEo6kWRfx/Of4XVtM7/flSXV1XLn2t8ZXpGzM9ZbvXlV2/P+yvgX092gG/NtWjiB9VV/zV9O/+uwYAAAAAAAAAAAAAAAA4QIr49Ujx4rvHUzU/+O6c4vb0zcbV1rWpzrS+7ty/7pzptbW1tUbqZDPneM7FnEs5l3Ou5Iwi18/ZLLO+tjae3y/mXMq5nHMlZxzK9XM2c47nXMy5lHM550rOqOX6OZs5x3Mu5lzKuZxzJec+z2cHAAAAAAAAAAAAAAAAAAAeE0X1T4pvf2M1rfV31pcej04uWw/0Y++XAQAA//8acfcO") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x1001, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='user.h'], 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3m31.691409765s ago: executing program 1 (id=256): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/firmware/fdt', 0x302, 0x0) writev(r0, &(0x7f0000000100)=[{0x0}, {&(0x7f0000002340)="ae74e91e0a", 0x5}], 0x2) 3m30.854101468s ago: executing program 5 (id=264): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x2, 0x0, &(0x7f0000000680)) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x41) chroot(&(0x7f0000000540)='./file0/file0\x00') mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) 3m30.826521648s ago: executing program 5 (id=266): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=0000000000000000000\x00\x00\x00\x00,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") r0 = open(&(0x7f0000000140)='./file2\x00', 0x4442, 0xa0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 3m30.74534897s ago: executing program 1 (id=267): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) read(r0, 0x0, 0x0) 3m30.655340951s ago: executing program 33 (id=267): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x2) read(r0, 0x0, 0x0) 3m30.554304853s ago: executing program 5 (id=270): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0) r2 = dup(r1) fallocate(r1, 0x0, 0x0, 0x8) finit_module(r2, 0x0, 0x5) 3m30.315062777s ago: executing program 5 (id=272): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000240)={[{@bh}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nobarrier}, {@noload}, {@max_batch_time={'max_batch_time', 0x3d, 0xfffe}}]}, 0x1, 0x44a, &(0x7f0000000400)="$eJzs281vFOUfAPDvzLbl9+OtFfEFRK0SY+NLSwsqBy8aTTxgNNEDHuu2EMJCDa2JECLVGLyYGBI9G48m/gXevBj1ZOJV74aEKBfQU83MzsDuslsobHcr+/kkA8+z82yf57vPPDPPzLMbwMAaz/5JIrZGxG8RMVrPNhcYr/939fLZ6t+Xz1aTWFl5688kL3fl8tlqWbR835YiM5FGpJ8kRSXNFk+fOT5bq82fKvJTSyfem1o8febZYydmj84fnT85c/Dggf3TLzw/81xX4sziurL7w4U9u15758Lr1cMX3v3p26y9W4v9jXF0y3gW+F8rudZ9T3S7sj7b1pBOhvrYENakEhFZdw3n4380KnG980bj1Y/72jhgXWXXpk2ddy+vAHexJPrdAqA/ygt9dv9bbj2aemwIl16q3wBlcV8ttvqeoUiLMsMt97fdNB4Rh5f/+SrbYp2eQwAANPqs+uWheKbd/C+N+xvKbS/WUMYi4p6I2BER90bEzoi4LyIv+0BEPLjG+luXhm6c/6QXbyuwW5TN/14s1raa53/l7C/GKkVuWx7/cHLkWG1+X/GZTMTwpiw/vUod37/y6+ed9jXO/7Itq7+cCxbtuDjU8oBubnZpNp+UdsGljyJ2D7WLP7m2EpBExK6I2L22P729TBx76ps9nQrdPP5VdGGdaeXriCfr/b8cLfGXktXXJ6f+F7X5fVPlUXGjn385/2an+u8o/i7I+n9z8/HfWmQsaVyvXVx7Hed//7TjPc3tHv8jydv5+WikeO2D2aWlU9MRI8mhPN/0+sz195b5snwW/8Te9uN/R/GeLP6HIiI7iB+OiEci4tGi7Y9FxOMRsXeV+H98ufO+jdD/c23Pf9eO/5b+X3uicvyH7zrVf2v9fyBPTRSv5Oe/m7jVBt7JZwcAAAD/FWn+HfgknbyWTtPJyfp3+HfG5rS2sLj09JGF90/O1b8rPxbDafmka7Theeh0slz8xXp+pnhWXO7fXzw3/qLy/zw/WV2ozfU5dhh0WzqM/8wflX63Dlh37dbRZkb60BCg51rHf9qcPfdGLxsD9JTfa8Pgusn4T3vVDqD3XP9hcLUb/+da8tYC4O7k+g+Dy/iHwWX8w+Ay/mEg3cnv+iUGORHphmiGxDol+n1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6I5/AwAA///K8u7c") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) setresuid(0x0, 0xee01, 0x0) chdir(&(0x7f0000000200)='./file0\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 3m29.437244851s ago: executing program 5 (id=275): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x0, 0x9dff, 0x1, "0007edeb00cbe600"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x5, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) unshare(0x8000480) dup3(r1, r0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000001100)=0x12) 3m27.842880287s ago: executing program 5 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010027bd7000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="802e0a0019c20000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8c041}, 0x20008032) 3m27.708231549s ago: executing program 34 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010027bd7000fbdbdfa500000000", @ANYRES32=r2, @ANYBLOB="802e0a0019c20000080001"], 0x28}, 0x1, 0x0, 0x0, 0x8c041}, 0x20008032) 3m19.652120109s ago: executing program 4 (id=339): syz_emit_ethernet(0x2a, &(0x7f0000003f00)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="6a6d1f440ab5", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x3, @local, @dev={0xac, 0x14, 0x14, 0x22}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={0xac, 0x14, 0x14, 0x18}}}}}, 0x0) 3m19.312764555s ago: executing program 4 (id=345): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10008000040000000800", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) sendto$packet(0xffffffffffffffff, &(0x7f0000000140)="a5dcce2d48272499784b729df2bcad", 0xf, 0x4810, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file2\x00', 0x2000000, &(0x7f0000000280)=ANY=[], 0x8, 0x2f8, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_RELEASEINTERFACE(r4, 0x8008550e, 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001a00010000000000000000000a000000000000000000000006001d000000000006001c0000000000080019"], 0x44}}, 0x40800) r6 = dup(r0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000340)={0x23, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}}, 0x108) getsockopt$inet_buf(r7, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x98) vmsplice(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0xfffffdff}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) 3m18.253110972s ago: executing program 4 (id=349): syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @random="09db9b044547", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x0, {[@window={0x3, 0x3, 0x4}]}}}}}}}}, 0x0) 3m17.008517982s ago: executing program 4 (id=352): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x1001, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='user.h'], 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3m13.146953064s ago: executing program 4 (id=368): syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000006080)={[{@inlinecrypt}, {@minixdf}, {@acl}, {@sb={'sb', 0x3d, 0x7}}, {@jqfmt_vfsv0}, {@user_xattr}, {@stripe={'stripe', 0x3d, 0x374}}]}, 0x10, 0x501, &(0x7f0000001f40)="$eJzs3cFvG1kZAPBvJvG2abMkCxzKSuyu2EXpCmonG7obcVgWCbGnlSjlXkLiRFGcOIqdtokqlApxBQkhQOLEiQsSVyQE6p+AkCrBjQMqCISghQMHwMjjcZsGO05V11OS30+azJt59nzfS+SZeTMvngBOrdci4r2IGIuINyNiKl+f5tP77forndc9uH9rqT0l0Wpd/WsSSb6uu60kn5+PiP2IOBsRX34/4mvJ/8Zt7O6tL9Zq1e18udLc2Ko0dvcurW0srlZXq5vz83NvL7yzcHlhtmfe3/zdk7VzOiLe/cIfv/ftH3/x3V9++sbvr/354tfbaU3m9QfbEXHmyTZ+hE7TS9nvoms8IraHFqFYY/m81Kf+W2MjTAYAgIHa5/gfjohPZOf/UzGWnZ0OMjGCzAAAAIBhaX1uMv6VRLQAAACAEyvNxsAmaTkfCzAZaVoud8bwfjTOpbV6o/mplfrO5nJnrOx0lNKVtVp1Nh8rPB2lpL08l4+x7S6/dWh5PiJeiojvTk1ky+Wlem256IsfAAAAcEqcP9T//8dU1v8f+A+w6WjSAwAAAIZluugEAAAAgGduUP//hRHlAQAAADw77v8DAADAifalDz5oT63u86+Xr+/urNevX1quNtbLGztL5aX69lZ5tV5fzb6zb2PQ9mr1+tZnYnPnZqVZbTQrjd29axv1nc3mtbXHHoENAAAAjNBLr975bRIR+5+dyKYw3B9OjWRAffaQkHv5wh9GkBAwMmNFJwAUZrzoBIDClIpOACjcoOsAfQfv/Gr4uQAAAM/GzMf63/93bQBONs/xBIDTx/1/OL1Kj48AvFxcJkBRPjSg/unv/7daT5QQAAAwdJPZlKTl/F7gZKRpuRzxYvZYgFKyslarzub9g99Mlc60l+eydyYDxwwDAAAAAAAAAAAAAAAAAAAAAAAAAB2tVhKtQ5KHdQAAAMBJEJH+Kcm+zT9iZuqNycPXB15I/jmVzSPixg+vfv/mYrO5Pdde/7eH65s/yNe/NeqrFwAAAEAv3X56tx8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMP04P6tpe40yrh/+XxETD+Kf+Fnv6jkVa+ezWZnoxQR5/6exPiB9yURMTaE+Pu3I+JCr/Yn7bRiOjpZ9Io/UWD8NCLODyE+nGZ32vuf93p9/tJ4LZv3/vyN59PTOrz/Oxi/u/8b67P/efGYMV6++9NK3/i3I14e773/6cZP+sR//Zjxv/qVvb1e69vbaP0oYqbn8Sd57HWV5sZWpbG7d2ltY3G1ulrdnJ+fe3vhnYXLC7OVlbVaNf/ZM/53Pv7z/xzV/nN94k8PaP8bx2z/v+/evP+RTrHUK/7F13sffy/0iZ/mx75P5uV2/Uy3vN8pH/TKT379ylHtX+7T/od//x4H2nbMi8ds/5tXvnHvmC8FAEagsbu3vlirVbf/HwtpPBdpKAylcOb5SOM5KnS7QIVEL3jHBAAADN2jk/6iMwEAAAAAAAAAAAAAAAAAAIDTaxRfJ3Y45n4xTQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAONJ/AwAA//87qs6H") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 3m11.5341577s ago: executing program 4 (id=370): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000013c0)) 3m11.365896443s ago: executing program 35 (id=370): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000013c0)) 3m11.354023693s ago: executing program 2 (id=372): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000000040), 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@resgid}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000006c0)) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x4, 0x7, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xd, 0x3, 0x4, 0x1, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r6}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 3m8.220160113s ago: executing program 2 (id=389): chdir(&(0x7f0000000400)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r1, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./bus/file0\x00', 0x2) 3m7.249972479s ago: executing program 2 (id=380): syz_mount_image$vfat(&(0x7f00000004c0), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[], 0xfe, 0x1222, &(0x7f00000024c0)="$eJzs3E9rXFUYB+DXSdrUxPxRa7UF6cFudHNJsnCjIEFSkA4obSO0gnBrbnTIdSbMHQIjYnTl1o0fwK24dCeIO91k42dwl41LF+qVzrTaaUeDFjtpeJ7NvMw5P+a9M8OBM8y5By9/9v72VpVt5b1oPPJKNHYipn9LkaIRt30cL7z0/Q/PXrl2/dJas7l+OaWLa1dXXkwpLZz/9q0Pv3ruu97cm18vfDMT+0tvH/y8+tP+mf2zB79ffa9VpVaV2p1eytONTqeX3yiLtNmqtrOU3iiLvCpSq10V3ZHxrbKzs9NPeXtzfnanW1RVytv9tF30U6+Tet1+yt/NW+2UZVmanw3ux8aXv9R1HVHXJ+Jk1HVdPxqz0YjHYj4WYjGW4vF4Ip6M0/FUnImn45k4O5g16b4BAAAAAAAAAAAAAAAAAADgeBl3/n/unvP/n0eMO/9/fsLNAwAAAAAAAAAAAAAAAAAAwDFx5dr1S2vN5vrllE5FlJ/ubuxuDB+H42tb0YoyiliOxfg1Bqf/h4b1yWiuL6eBpfik3LuV39vdmBrNrwxuJ3BP/uJrzfWVYT6N5mdi9s78aizG6fH51bvyFwb5U/H8hTvyWSzGj+9EJ8rYjJvZv/IfraT06uvNu17/3GAeAAAAHAdZ+tPY/XuW/d34MH/Y7wM399fLY/f303FuerLXTkTV/2A7L8uiO/HidkfDZ/Yi4og09p+LRkQcgTb+oThx6Jy5CTT2xVzEfcSnRr5IR+J9fhiLw1aOqf91XeLBuPWhz0y6DwAAAAAAAAAAAP6dB/F3wklfIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAsQAAAACAMH/rNDo2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvgoAAP//SPnJBA==") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0xc0bc5310, &(0x7f0000000040)={0x69b0, 0x3, {}, 0xffffffff}) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x188000, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) 3m6.985146623s ago: executing program 2 (id=386): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="cdf7c0c4ada580d5d36bd90806b670b73bb5112f75ca483652cf9b8a22555c3af34a84c5747ac51aa890ca205a0f27d7dde81ad3a01f21810b6de2d56be05416c54e1c6e8459e1643b129327581f7716b38db3d3f3bbeb6d1b846a2aad654e1795850a1f82ac738387d9c3009d18eb2a78258fcc4ac4eb6a12a5650e10ebf077d9ab33f24de7cbffe0", @ANYRESHEX], 0x2, 0xc3f, &(0x7f0000001780)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0\x00', &(0x7f0000000180), &(0x7f0000000280)=ANY=[], 0x1001, 0x0) write$FUSE_DIRENTPLUS(r2, 0x0, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xd9d7, 0x5) lgetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000380)=ANY=[@ANYBLOB='user.h'], 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 3m6.733527617s ago: executing program 2 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x212082) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_mount_image$squashfs(&(0x7f0000000680), &(0x7f00000001c0)='.\x02\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="11881e672fae6c0cd8b8671e770a1d10e3da622a2714da6d0737898efafcf45e4042993ef091557d2a7d8efac5133dcf49641038788e3834afaad9a7b29c16f1d4f82d5e44e855fb706d86336372a71497be43b4931d352c89eb880eacf58edd5bfa05faf03108b8f73907c3befe4c146ebaa5535aa54849e25c03fe91c50e7c673a9d283c992293311414063f287e82c3f976bcfbf2b2188f8157ce2030b90ec1e90dfd590221bdfbad9d8067c3c412dc235330121b40a0383d4c20866b8985b5a6", @ANYBLOB="cd099bf46634ae0ef20ed2ba2228c7861d77eb8ee5d97ce7a0ac26cdadf7a684dc0ee6f5048a6a3e2e299d207a30c3fe1e73696eaac25bca2d9a44025207a0e36ed20b09f1d1d8752bbb15faa46ca426761546b6172b48665c39072e12cf803bf0b5bf916b8ae2d7e88dd90364d29921c836893f31f70c3e002757353d4a6cdcb9fe803e2ba2139c69b3f60a55aae07cdbbcd36af6fa6cb0368c73a7b97a89c035", @ANYRES16=0x0, @ANYBLOB="565c3d1a135dcfa3316f89263710cde4cfdcd5a74eea8949a429df95b42bb65e79848dce3ea160e362e643428d36716d0f17497310c5680569"], 0x6, 0x18f, &(0x7f0000000840)="$eJzsVb1OKkEU/mYZdrk3t6CmveTCLZTdRYlvIJWVDyCBFYmLPyyJQkhcKx6FxKew8B0sTGywoNACSxMzZn5YZmsSgma+BL7vnDk/c6Y4exJdRg6Az/moiTwECP7giRBQACUifQeO5Hdbck3ZMyrZU/47xS+Ko8HwtBGGQU8IeyHCFQRTrRPPyhU3X7CbtTftbcrsRvwcwRjFGpsuzf1bC29ilz3OR00ujgAwxhj3teSP6DEZAA9aTIECBeRIBiyJoWJbAiUAlX73ohINhludbqMdtIMz36/W3B3X3fUrx50wcOU/0VpYcpGB838AfLH90s6zAJ7Vgv2NNIh2NXVO9Fy+f2exDCj/TedaWq5eQ9a9T2qoRQv+FIf4hxyAq5ho3qKoRiFGq4MgowyPaveUPXPiYLt5HrbGICCLtAloUsObIpsYvm5U9+LFFceKi4rriieKp4odkv4mUVHhVVnleDm0bQHXjX6/5wG2VD4Pkyof6w/Hu37Y6eGKDgwMDAwMDAwMvgm+AgAA//+a42GE") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={0x0, r3}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) llistxattr(&(0x7f0000000140)='./file1\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setitimer(0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000300)={0x0, 0x9c}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000001180)={{{@in=@empty, @in=@multicast2, 0x4e22, 0x2, 0x4e20, 0x0, 0xa, 0x20, 0x0, 0x3c}, {0xe9, 0x5, 0x8003, 0xfe, 0xfffffffffffffffe, 0x6, 0x775, 0x8}, {0x499, 0x9, 0x4, 0xffffffff80000001}, 0x5, 0x6e6bb0, 0x1, 0x1, 0x2, 0x1}, {{@in=@broadcast, 0x4d6, 0xff}, 0xa, @in=@multicast2, 0x3501, 0x0, 0x3, 0xf, 0x3, 0x8, 0x4}}, 0xe8) syz_open_dev$tty1(0xc, 0x4, 0x4) 3m4.621980842s ago: executing program 2 (id=405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) futex(0x0, 0x18d, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 3m4.296456237s ago: executing program 36 (id=405): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) futex(0x0, 0x18d, 0x0, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m41.414123156s ago: executing program 7 (id=587): syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x11, 0x6c7, &(0x7f0000000a80)="$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") r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000000)='./bus/file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f0000000000)='./file0\x00', r2, &(0x7f0000000100)='./bus/file0\x00', 0x2) 2m41.18392398s ago: executing program 7 (id=589): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x121042, 0x45) r1 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2m40.942416493s ago: executing program 7 (id=592): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000200)=[@window={0x3, 0x9, 0x1}, @sack_perm, @window={0x3, 0x7f, 0x1}, @window={0x3, 0xa8, 0xd56c}, @window={0x3, 0x1, 0x100}, @mss={0x2, 0x3}, @mss={0x2, 0x8}, @mss={0x2, 0xb}], 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000040)) 2m40.732399457s ago: executing program 7 (id=596): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bsdgroups}, {@resgid}, {@nouid32}, {@debug}, {@acl}]}, 0x1, 0x746, &(0x7f0000000f40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./bus\x00', 0x0, 0x101010, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x187102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000080)={[{@nogrpid}, {@jqfmt_vfsv0}, {@nouid32}, {@debug}, {@lazytime}, {@quota}]}, 0x1, 0x43d, &(0x7f00000002c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, 0x0) 2m40.150048966s ago: executing program 7 (id=603): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@quota}]}, 0x1, 0x629, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) open_tree(r0, &(0x7f00000000c0)='./file0\x00', 0x100) 2m38.476757473s ago: executing program 7 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 2m38.319729436s ago: executing program 37 (id=615): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x1, 0x2}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 9.274011351s ago: executing program 3 (id=2090): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x5, 0x1, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x67, 0x0, 0xd, 0x4, 0x0, @local, @loopback, {[@timestamp={0x44, 0xc, 0xd2, 0x0, 0x0, [0x7a8, 0x0]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r0, 0xe, 0x1, 0x7f, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0088a8000002"], 0x110a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000004c0)=0x10, 0x800) accept4(r5, &(0x7f00000002c0)=@l2tp, &(0x7f0000000340)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r6, 0x5170c560dce29b81, 0x8, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x2, 0xfffffffffffffff9, 0xac}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) 9.006251285s ago: executing program 3 (id=2097): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) 8.925409106s ago: executing program 3 (id=2098): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[], 0x70}, 0x1, 0x7}, 0x8000) 8.762958759s ago: executing program 3 (id=2103): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='bridge0\x00') 8.634488091s ago: executing program 3 (id=2107): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271c, 0x0, &(0x7f00000000c0)) sendmsg$SMC_PNETID_DEL(r0, 0x0, 0x0) 8.508933973s ago: executing program 3 (id=2113): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffd, @loopback}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0) socket$qrtr(0x2a, 0x2, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x4001, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10123, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x44) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="700000000108010400000000b26d140ea1977a7cee7c8d000000000500000654000480080001400000007f080001400000000208000140fffffffb08000140ffffbcca0800014000000007080001400000000908000140000000040800014000000003080001400000000e08000140000000d006000240000d0000"], 0x70}, 0x1, 0x0, 0x0, 0x40044}, 0x4004000) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x1c, 0x8, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048040}, 0x4000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x305) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001b80)=ANY=[@ANYBLOB="b81700002a000b0000000000ffdbdf250900000008000200040001009c170180060200005f730000c3034f80f8002380813f0d44111a5374b1940cad5be39aef0e22dca76a34e1b82a64a955aea2972724abe1c8489006469dad0f4ea7ce6014e7c9d315c1fd0b3762b504c9be2ae6403ddb6bacc28839ea1ec1c372a4ee7917825a50caa65a7f7a338bc43d3ba838cc9ca868d06fa2abee008ff2726277aa222f0bae6afad2f34538ea0e838aa3f22005410d16905a870ea5dbb78c5153943e6c5aab3e852a62d7620e7338f40f516bcecd1fe6b677b3122297be1231d6f520862039e84e9400cebffb5889bda4778954c1c5f022b8faa947a144a65f8328e6a6c6689b0d1c9a22dc08534cbda8092857d01d557a68684eb6c44d1d981238c20c905e9821fb8590a09bf465038d5f0aaf5475eff157b5589b36ae9bd4b0cbb91cacfdc3158e8deefa444ec95e6d486d9ba55c885856d21ce07099514a0c8a443ea3da82d59a0064d75b58597443333e543eed35ed0eecde2d32abfc4c8aa28e7aa7163f3e0fe46047873d7a1ff4eeb094f38601dec410195e2b07dd5b9ab847c12ca1b61ece71d872a01eca8014e4f4a713978450af42eefc4baa4f4472738f1f6c1067be6dac7b9dc40fbd28d8d22b6990c7495d15ae2271213edcfd19a2f55c3a1f5c2d87e5e012406f42661cd26c0ba4951ea351a3c28463755174278a71ce983848edaf96d0d6bfefb960ebc6a7002c80080065000100000008004400ac1e0001c14426c2811ce4b32e23e179c6e8f029f66d586ea3a1d727901be2825a674cfe9d9f68cae824651e204272de565a363ad2b5b1386f02d8a613e27750b146a614ea337e0cd500de76fc32aaffd3af71b9405ea4f5022b3c23ec99f27e4f56a91a228929d069bf572f568c66a74183d6e9a5a42abe8d5fdab105c59cd2ed5969f1df4211f02c09c89c4d0ed9282f392616fc07fa000400648030018f80ee0ecaa7ad6dbb4ee35dc911cf8fff9002414b1eac61eec6b2438fa4a12ef496e28aa583680581117f7473efd53e032a0e421a9bf8e61628674c285a09be916baa6fb814ae3e1f655b22f841ff415fe021b2652c09fbb41de2361822dddb8b3ba51badac83e3fd206bc8be285a8ea60a5f6daf59c5038af29080aa2a744ec4ebaab2376a531808d1189fe9b33cb954aba163eb94d34937972a63eef9a1987218eba5acaaa14a3e2d614befcfceb28b4536824b46690b17c1a200ef52b17a88edc29d1f08876bf6c475c547b08629a94717dbd420f62fe8", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x17b8}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000980)=0x9, 0x4) 1.88049866s ago: executing program 0 (id=2191): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x8, 0x3, 0x598, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x4c8, 0xffffffff, 0xffffffff, 0x4c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x208, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x80, 0xfffffffe, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x7, 0x3, 0x98a9, '\x00', 'syz0\x00', {0x4}}}}, {{@uncond, 0x0, 0x298, 0x2c0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x2, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x300, 0x4, 0x0, 'syz0\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) 1.758937682s ago: executing program 0 (id=2193): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@enum64={0x5, 0x1, 0x0, 0x13, 0x0, 0x4, [{0x9, 0x401, 0x5}]}]}, {0x0, [0x2e, 0x5f, 0x10, 0x2e, 0x61, 0x2e, 0x0, 0x5f, 0x61]}}, 0x0, 0x3b, 0x0, 0x1, 0x5, 0x0, @void, @value}, 0x28) 1.664260653s ago: executing program 9 (id=2194): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.641772154s ago: executing program 0 (id=2195): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.545788035s ago: executing program 6 (id=2198): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf252100000008000300", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x40000) 1.536094965s ago: executing program 0 (id=2199): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x3c) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/240, 0xf0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000640)=""/187, 0xbb}], 0x1}}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000000900)=""/174, 0xae}], 0x1}}], 0x3, 0x0, 0x0) 1.419456537s ago: executing program 6 (id=2200): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)}, {&(0x7f0000003a40)="0ac69cdab0ac826a3dab2891b2c683529e39fdfb1b940530d2d1dc0bdc03a6a8df0addba6742846c803dbff66691c6d6eedecd469bfb87ad93bc7ee44675e08a7be1305db84dc5044ecb39430ab17fde2a9c0d4bd06e7de539382390bb18c09cfbb3ab721a4b135eda61221a130e58d099f402670426eedfcfb0a4ac8ef783ba02998c21cb7d8836612108fe9a583721b0281b709b9f6af51a8e7695506482dde9bc250cdb682d5b5a0d0159f655802cb53e2a25ae60c2e333182b024262e6eaa99509dc67e61c6387ea4cb8c58dbd3be0937f60698c413e7b4b4c7b7fdb1368f78773eb95a90e028c43f12534cc5b8f143300085a1e9a3290d561beeea43442cedc66714e8ea25a58e9c60ee4f05278d05691c60e7003c0c0c67f7de4d6e307e822ec97707c2aa843ab3cbe6b1eda5c2481bd80282b28052d16a39b4b95bfd26203c7d85316d85a86ef3e0a9e738d07c88a82d50e8df61e845cb548e43078cfecbd14f45a9f68eeb761faee852156edb81ef672b1cacfaac665d9c03ca09427b36202bb2312f04173b63e9e69b2449d3ec8dee6dc7d9486ca9f56b7c24d9493ab7961cf3084b397dea5e8bf6b2499d75c7582549797b4149e1a86f358375411d56c62dd07fa2a195b9445e1d34f37edf2631b325a7108b7ec7642aa5219ca528747ab23b7b55f08a924245ccde182fc940f353ab5dbee3d70818d70defe4a5ee2d8fd652bde3e1111567ffd24967481bed21274ddc4c48a57a5a3a8a6200066afe7d0f1e94ed64d74c8faeb562883517c620f852fa65b3be1cd6ec5d7aa594c2c4417cc704ef476b21f3ee5d177d8b347439d3218b5c5b7bc090552fda4c197cd6465328290f834caacee680e67821709e9b82f8960cf3ac0946dd7f12bca35f796d85eb5363650e7865b3f510276830681a99db7abc083fdf29a85144a3dc07e6e259634a281e25203e36169422bbf2fb8c5323dad69edcf0135a4d72bc1958b07e79d9fabf68f76c0359a02b107ee05d7d36704f6dafac9ff40d4d8560a3a867e84e7b0e2a869d8f475dd038a3b7a7aa2b746c222aa7a9620ba75c04fbf6bb9b91b10a2e336494a71da84c65e2a009c0dfeabc6edc271293c58c1600a801d16c8af795bfa284b74a45d6936645ce0f92f483a7e2a8d5199c1447ac769917bd8ef4ea42f3ea9e87fd3f3a29132396d7f2c4c71ea0a80854b13de2c8906b9a690adb4ecc1ba101da18317ea434f1d92ee5e2b73a38651b8fb492ad23ef16f6b39f58128acb40812e6fd52d9f5cb87efb7b516008add3c64668a21a7d511d5d886", 0x3a1}], 0x2}}], 0x1, 0x40840) 1.418250047s ago: executing program 9 (id=2201): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000000100000000000000000200010000000000fc00020c030000"], 0x70}, 0x1, 0x7}, 0x8000) 1.331537169s ago: executing program 6 (id=2202): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000002000)={'geneve0\x00', {0x2, 0x4e24, @remote}}) 1.312665669s ago: executing program 9 (id=2203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x1, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), 0x0}, 0x20) 1.165957731s ago: executing program 9 (id=2205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000040)={0x0, 0x0, 0x8, 0xd, 0x200, &(0x7f0000000080)="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"}) 1.165659682s ago: executing program 6 (id=2206): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) unshare(0x22020600) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 994.216884ms ago: executing program 6 (id=2207): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(r0, 0x1) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x40010022) 774.384818ms ago: executing program 8 (id=2210): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'team_slave_0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 661.96017ms ago: executing program 8 (id=2211): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002380)="1b0000001a007f029e741683c28f7b331d00"/27, 0x1b}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x29, 0x2, 0x1, 0x8001, 0x4, @remote, @mcast1, 0x700, 0x8, 0x9, 0x9}}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.events\x00', 0x275a, 0x0) preadv(r6, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/20, 0xfdef}], 0x1, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1e000000010000000300000009000000a8000000", @ANYRES32, @ANYBLOB="001000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000382000004df7b1748b50000e7c92aecc0008fac1d00000000ba100000"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e000000bff2ca3a55210000090000000000", @ANYRES32=0x1, @ANYBLOB="8800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000300"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0x1, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x140, 0x10, 0x633, 0x0, 0x0, {{@in=@multicast2, @in6=@dev}, {@in6=@loopback, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}]}, 0x140}}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)=ANY=[@ANYBLOB="38010000100001000000000000000000e0000002000000000000000000000000fe8000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000010000000032000000ac1414aa00000000000000000000000000000000000000000400000000000000000000000000000001000021000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29"], 0x138}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xd, &(0x7f0000000340)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}, @map_val={0x18, 0x2, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0xf}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffa}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000880)='syzkaller\x00', 0xc, 0x40, &(0x7f00000003c0)=""/64, 0x40f00, 0xa, '\x00', r4, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xe, 0x2, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000740)=[0x1, r7, r8, r9, r10], 0x0, 0x10, 0x305c, @void, @value}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010300000ae6f72087a003"], 0x3c}}, 0x0) r13 = epoll_create1(0x0) r14 = socket(0x1d, 0x2, 0x6) epoll_ctl$EPOLL_CTL_ADD(r13, 0x1a000, r14, &(0x7f0000000000)={0x10000000}) r15 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300), r0) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r15, 0x121, 0x0, 0x0, {0x3}, [@SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 483.625013ms ago: executing program 0 (id=2212): socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x40, 0x80, 0x5, 0x1, {{0x8, 0x4, 0x1, 0x8, 0x20, 0x67, 0x0, 0xd, 0x4, 0x0, @local, @loopback, {[@timestamp={0x44, 0xc, 0xd2, 0x0, 0x0, [0x7a8, 0x0]}]}}}}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r0, 0xe, 0x1, 0x7f, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0088a8000002"], 0x110a) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$llc(0xffffffffffffffff, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000004c0)=0x10, 0x800) accept4(r5, &(0x7f00000002c0)=@l2tp, &(0x7f0000000340)=0x80, 0x80000) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_LISTALL(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x14, r6, 0x5170c560dce29b81, 0x8, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40008c4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00'}) 482.773492ms ago: executing program 8 (id=2213): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000380)="7c04350e6c7635e8fc4cbae2983b0f143617795f22406549b308336cd844ad6e7679ed989835de10398ac388183e3a72d01f95d92a09983978de6853d58e4a233a9b499d3cc5559e67bf7648e2f0adbb9ce59df4165f9a4f10de329806d01ed333d9a40484ffe5b6e4563a93cf36", 0x6e}, {&(0x7f0000003a40)="0ac69cdab0ac826a3dab2891b2c683529e39fdfb1b940530d2d1dc0bdc03a6a8df0addba6742846c803dbff66691c6d6eedecd469bfb87ad93bc7ee44675e08a7be1305db84dc5044ecb39430ab17fde2a9c0d4bd06e7de539382390bb18c09cfbb3ab721a4b135eda61221a130e58d099f402670426eedfcfb0a4ac8ef783ba02998c21cb7d8836612108fe9a583721b0281b709b9f6af51a8e7695506482dde9bc250cdb682d5b5a0d0159f655802cb53e2a25ae60c2e333182b024262e6eaa99509dc67e61c6387ea4cb8c58dbd3be0937f60698c413e7b4b4c7b7fdb1368f78773eb95a90e028c43f12534cc5b8f143300085a1e9a3290d561beeea43442cedc66714e8ea25a58e9c60ee4f05278d05691c60e7003c0c0c67f7de4d6e307e822ec97707c2aa843ab3cbe6b1eda5c2481bd80282b28052d16a39b4b95bfd26203c7d85316d85a86ef3e0a9e738d07c88a82d50e8df61e845cb548e43078cfecbd14f45a9f68eeb761faee852156edb81ef672b1cacfaac665d9c03ca09427b36202bb2312f04173b63e9e69b2449d3ec8dee6dc7d9486ca9f56b7c24d9493ab7961cf3084b397dea5e8bf6b2499d75c7582549797b4149e1a86f358375411d56c62dd07fa2a195b9445e1d34f37edf2631b325a7108b7ec7642aa5219ca528747ab23b7b55f08a924245ccde182fc940f353ab5dbee3d70818d70defe4a5ee2d8fd652bde3e1111567ffd24967481bed21274ddc4c48a57a5a3a8a6200066afe7d0f1e94ed64d74c8faeb562883517c620f852fa65b3be1cd6ec5d7aa594c2c4417cc704ef476b21f3ee5d177d8b347439d3218b5c5b7bc090552fda4c197cd6465328290f834caacee680e67821709e9b82f8960cf3ac0946dd7f12bca35f796d85eb5363650e7865b3f510276830681a99db7abc083fdf29a85144a3dc07e6e259634a281e25203e36169422bbf2fb8c5323dad69edcf0135a4d72bc1958b07e79d9fabf68f76c0359a02b107ee05d7d36704f6dafac9ff40d4d8560a3a867e84e7b0e2a869d8f475dd038a3b7a7aa2b746c222aa7a9620ba75c04fbf6bb9b91b10a2e336494a71da84c65e2a009c0dfeabc6edc271293c58c1600a801d16c8af795bfa284b74a45d6936645ce0f92f483a7e2a8d5199c1447ac769917bd8ef4ea42f3ea9e87fd3f3a29132396d7f2c4c71ea0a80854b13de2c8906b9a690adb4ecc1ba101da18317ea434f1d92ee5e2b73a38651b8fb492ad23ef16f6b39f58128acb40812e6fd52d9f5cb87efb7b516008add3c64668a21a7d511d5d886", 0x3a1}], 0x2}}], 0x1, 0x40840) 410.751364ms ago: executing program 8 (id=2214): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300000e00000028bd7000fdffffff05000600338000000a000000000000000000000000000000000000000000000100000000000000000200010000000000fc00020c030000"], 0x70}, 0x1, 0x7}, 0x8000) 360.913604ms ago: executing program 8 (id=2215): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bf0400000000000019020000f8ffffffb7f0000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 225.790007ms ago: executing program 8 (id=2216): socket$kcm(0x10, 0x2, 0x0) unshare(0x62040200) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x4be}}}}}}}, 0x3e) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0xb) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) close(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@polexpire={0x188, 0x1b, 0x1, 0x70bd27, 0x25dfdbfc, {{{@in=@loopback, @in6=@mcast2, 0x4e24, 0x9, 0x4e22, 0x6, 0x2, 0x80, 0x20, 0x2b}, {0x9, 0x4, 0x1, 0x0, 0x7fffffff, 0x6, 0x9, 0x5}, {0x8, 0x8001, 0xffff, 0xffffffffffffffff}, 0x81, 0x6e6bb2, 0x0, 0x1, 0x0, 0x2}, 0x40}, [@coaddr={0x14, 0xe, @in6=@loopback}, @XFRMA_SET_MARK={0x8, 0x1d, 0xffff}, @policy={0xac, 0x7, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x4e21, 0x1000, 0x4e22, 0x8001, 0x2, 0x80, 0x0, 0x73}, {0x7, 0x0, 0x9, 0x7, 0x4, 0xfffffffffffffff7, 0x8, 0x427}, {0x7, 0x72f, 0x0, 0x9}, 0x325de6c4, 0x6e6bbf, 0x2, 0x0, 0x2}}]}, 0x188}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="038126a49c604ba34d27d9eead4036d85f581274bb8d7eaa98e5be9bf788883b7a7c6416e1f9024f2c1e52129f936bd97a722d3f35b1108e9e64cad83c977b09c7f1b6e102adb9fdbea3928df3799f24639bbce4b107d3b2a3e41fe366b36bc6d2a8ff77af7720fa5fd1d80bde7b5620501692ed", 0x74) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000000000000180012800b00000067656e65bb074e35f8a74f781b766500"], 0x38}}, 0x20008090) 201.609757ms ago: executing program 9 (id=2217): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x6c000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, 0x0, &(0x7f00000008c0)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=@udp=r1, 0x4}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e23, @multicast1}], 0x20) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCBRDELBR(r5, 0x89a3, &(0x7f0000000200)='bridge0\x00') 151.067578ms ago: executing program 0 (id=2218): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4000884, &(0x7f0000000100)={0xa, 0x4e20, 0x2, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000180)=0x10000, 0x4) 86.179609ms ago: executing program 6 (id=2219): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, &(0x7f0000000040)=[{&(0x7f00000001c0)="080056f977e644ff", 0x8}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 0s ago: executing program 9 (id=2220): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) recvmsg(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0}, 0x10000) kernel console output (not intermixed with test programs): 4 [ 123.177619][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 123.180784][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 123.468666][ T4078] Bluetooth: hci3: command 0x040f tx timeout [ 123.861923][ T5773] hfsplus: found bad thread record in catalog [ 123.903868][ T148] hfsplus: b-tree write err: -5, ino 4 [ 123.913980][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 123.916814][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 123.926102][ T5460] device veth0_vlan entered promiscuous mode [ 123.948502][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 123.954540][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.036503][ T5460] device veth1_vlan entered promiscuous mode [ 124.089526][ T5784] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.091711][ T5784] IPv6: NLM_F_CREATE should be set when creating new route [ 124.137318][ T5583] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 124.272184][ T5785] loop0: detected capacity change from 0 to 8192 [ 124.315470][ T5460] device veth0_macvtap entered promiscuous mode [ 124.320426][ T5583] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 124.370534][ T5583] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 124.406987][ T5797] loop7: detected capacity change from 0 to 8192 [ 124.417425][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 124.421377][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 124.424173][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 124.430473][ T5460] device veth1_macvtap entered promiscuous mode [ 124.439501][ T5583] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 124.499490][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.502087][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.510528][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.513136][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.515533][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.537600][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.544727][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.547282][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.554594][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 124.558542][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.565434][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 124.578528][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 124.582043][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 124.598817][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 124.726527][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.737958][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.740448][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.742931][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.745300][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.773996][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.776460][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.811147][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.823034][ T5460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 124.850737][ T5460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.867882][ T5460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 124.885208][ T5786] syzkaller0: tun_net_xmit 76 [ 124.886530][ T5786] syzkaller0: tun_net_xmit 48 [ 124.984269][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 124.987297][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.043998][ T5460] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.046234][ T5460] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.052876][ T5460] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.058068][ T5460] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.188598][ T5838] netlink: 44 bytes leftover after parsing attributes in process `syz.0.477'. [ 125.269890][ T5836] loop7: detected capacity change from 0 to 8192 [ 125.417344][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.432801][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.434978][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.437903][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.440284][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.450590][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.473178][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.496947][ T4368] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.500616][ T4368] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.505574][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 125.547821][ T1963] Bluetooth: hci3: command 0x0419 tx timeout [ 125.561617][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.570893][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.578601][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.580406][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.601342][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.619791][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.632214][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.642832][ T4368] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.644813][ T4368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.829592][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.844277][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.891106][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.909316][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.916653][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.931830][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.965710][ T5874] udc-core: couldn't find an available UDC or it's busy [ 125.968987][ T5874] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 126.009496][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 126.012183][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 126.015573][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.026086][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.030672][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.039715][ T5583] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.300425][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.302816][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.318241][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 126.414060][ T5880] loop6: detected capacity change from 0 to 8192 [ 126.766929][ T5908] loop0: detected capacity change from 0 to 128 [ 126.782457][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 126.785256][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 126.821247][ T5908] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.845674][ T5908] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.888389][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 126.891055][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 126.893652][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 126.896040][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 126.907620][ T5583] device veth0_vlan entered promiscuous mode [ 126.967798][ T5583] device veth1_vlan entered promiscuous mode [ 127.063816][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 127.066655][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 127.151244][ T5916] loop7: detected capacity change from 0 to 8192 [ 127.180877][ T1963] syzkaller0: tun_net_xmit 76 [ 127.182284][ T1963] syzkaller0: tun_net_xmit 48 [ 127.336023][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 127.350821][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 127.454963][ T5583] device veth0_macvtap entered promiscuous mode [ 127.520204][ T5583] device veth1_macvtap entered promiscuous mode [ 127.594533][ T5938] loop0: detected capacity change from 0 to 8192 [ 127.630859][ T1834] device hsr_slave_0 left promiscuous mode [ 127.702398][ T5946] loop6: detected capacity change from 0 to 128 [ 127.721613][ T1834] device hsr_slave_1 left promiscuous mode [ 127.733331][ T5946] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 127.817487][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.823892][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.925616][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.006165][ T5946] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 128.215378][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.385517][ T1834] device bridge_slave_1 left promiscuous mode [ 128.387255][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.503326][ T1834] device bridge_slave_0 left promiscuous mode [ 128.505059][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.544467][ T1834] device hsr_slave_0 left promiscuous mode [ 128.646343][ T1834] device hsr_slave_1 left promiscuous mode [ 128.680685][ T5953] loop0: detected capacity change from 0 to 8192 [ 128.718244][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.720179][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.728742][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.730654][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.748514][ T1834] device bridge_slave_1 left promiscuous mode [ 128.750197][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.751553][ T5961] udc-core: couldn't find an available UDC or it's busy [ 128.762610][ T5961] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 128.819798][ T1834] device bridge_slave_0 left promiscuous mode [ 128.821425][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.938728][ T1834] device veth1_macvtap left promiscuous mode [ 128.940361][ T1834] device veth0_macvtap left promiscuous mode [ 128.941988][ T1834] device veth1_vlan left promiscuous mode [ 128.943497][ T1834] device veth0_vlan left promiscuous mode [ 128.966743][ T5975] loop8: detected capacity change from 0 to 128 [ 128.972436][ T5975] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 128.987350][ T5975] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 129.088613][ T1834] device veth1_macvtap left promiscuous mode [ 129.090109][ T1834] device veth0_macvtap left promiscuous mode [ 129.091638][ T1834] device veth1_vlan left promiscuous mode [ 129.093165][ T1834] device veth0_vlan left promiscuous mode [ 130.121652][ T5985] loop7: detected capacity change from 0 to 8192 [ 130.386073][ T5997] loop6: detected capacity change from 0 to 128 [ 130.417013][ T6001] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 130.421446][ T5997] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.428631][ T5997] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.543074][ T6005] loop6: detected capacity change from 0 to 256 [ 130.690645][ T6005] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd94015fb, utbl_chksum : 0xe619d30d) [ 130.880502][ T6011] loop7: detected capacity change from 0 to 128 [ 131.073556][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 131.075268][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 131.541023][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 131.545795][ T6011] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 131.594406][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 131.613054][ T6016] loop8: detected capacity change from 0 to 512 [ 131.616739][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.669246][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.716844][ T6016] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 131.749432][ T6018] loop6: detected capacity change from 0 to 8192 [ 131.796287][ T6016] EXT4-fs (loop8): 1 truncate cleaned up [ 131.798794][ T6016] EXT4-fs (loop8): mounted filesystem without journal. Opts: quota,resuid=0x000000000000ee01,barrier=0x0000000000000003,debug_want_extra_isize=0x0000000000000080,block_validity,jqfmt=vfsv1,,errors=continue. Quota mode: writeback. [ 131.954117][ T6021] loop7: detected capacity change from 0 to 1024 [ 132.024438][ T1834] bond0 (unregistering): Released all slaves [ 133.016501][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 133.024934][ T6034] loop7: detected capacity change from 0 to 1024 [ 133.033656][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 133.070734][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.117899][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.131337][ T6036] loop7: detected capacity change from 0 to 128 [ 133.134120][ T6036] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.140692][ T6036] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.332214][ T1834] bond0 (unregistering): Released all slaves [ 133.436183][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.439151][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.441566][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.444030][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.446445][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.472551][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.479707][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.484802][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.502968][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.516088][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.525417][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.532648][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.540412][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.545784][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.555008][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.564069][ T5583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.573825][ T5583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.579332][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.582578][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.586401][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.590367][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.593289][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.596431][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.599906][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 134.344378][ T5583] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.346699][ T5583] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.362368][ T5583] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.366222][ T5583] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.454026][ T6060] loop6: detected capacity change from 0 to 128 [ 134.529490][ T6060] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.529725][ T6058] loop0: detected capacity change from 0 to 8192 [ 134.534338][ T6064] loop7: detected capacity change from 0 to 1024 [ 134.535889][ T6060] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.638053][ T922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.640575][ T922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.644958][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 134.673773][ T922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.675966][ T922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.682874][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 134.889208][ T6073] loop6: detected capacity change from 0 to 4096 [ 134.950657][ T6073] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 134.999664][ T6088] device veth1_to_team entered promiscuous mode [ 135.105495][ T6088] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 135.113660][ T6098] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 135.165202][ T6100] loop8: detected capacity change from 0 to 256 [ 135.183795][ T6100] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 135.270827][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.8.568'. [ 136.081527][ T6109] loop9: detected capacity change from 0 to 8192 [ 136.519249][ T6115] loop7: detected capacity change from 0 to 256 [ 137.074961][ T6118] loop6: detected capacity change from 0 to 512 [ 137.095737][ T6125] loop8: detected capacity change from 0 to 8 [ 137.109078][ T6115] FAT-fs (loop7): IO charset cp8 not found [ 137.180724][ T6130] loop0: detected capacity change from 0 to 256 [ 137.197623][ T6118] EXT4-fs (loop6): 1 orphan inode deleted [ 137.199033][ T6118] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 137.310361][ T6130] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 137.375854][ T6138] udc-core: couldn't find an available UDC or it's busy [ 137.394464][ T6138] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 137.507513][ T6141] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 137.681991][ T6149] netlink: 20 bytes leftover after parsing attributes in process `syz.7.581'. [ 137.918928][ T6155] loop7: detected capacity change from 0 to 128 [ 137.979646][ T6155] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.051175][ T6155] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.295739][ T6158] loop8: detected capacity change from 0 to 8192 [ 139.419469][ T6142] netlink: 88 bytes leftover after parsing attributes in process `syz.9.578'. [ 139.663413][ T6182] loop7: detected capacity change from 0 to 1024 [ 139.734257][ T6183] syzkaller0: create flow: hash 2131402305 index 1 [ 139.905106][ T1963] syzkaller0: tun_net_xmit 76 [ 139.907839][ T1963] syzkaller0: tun_net_xmit 48 [ 139.936803][ T6194] loop7: detected capacity change from 0 to 128 [ 139.937765][ T6178] syzkaller0: delete flow: hash 2131402305 index 1 [ 140.006076][ T6194] EXT4-fs (loop7): mounted filesystem without journal. Opts: usrquota,acl,,errors=continue. Quota mode: writeback. [ 140.225597][ T6202] loop0: detected capacity change from 0 to 128 [ 140.279560][ T6202] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.285614][ T6202] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.401320][ T6209] loop7: detected capacity change from 0 to 2048 [ 140.484566][ T6219] loop9: detected capacity change from 0 to 1024 [ 140.546578][ T6209] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e01c, mo2=0002] [ 140.548973][ T6209] System zones: 0-7 [ 140.550580][ T6209] EXT4-fs (loop7): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,nouid32,debug,acl,,errors=continue. Quota mode: none. [ 140.860951][ T6230] syz.9.602 uses obsolete (PF_INET,SOCK_PACKET) [ 140.873868][ T5086] EXT4-fs error (device loop7): __ext4_iget:4872: inode #17: block 1803188595: comm syz-executor: invalid block [ 140.897136][ T5086] EXT4-fs error (device loop7): __ext4_iget:4872: inode #17: block 1803188595: comm syz-executor: invalid block [ 141.110442][ T6237] loop9: detected capacity change from 0 to 1764 [ 141.494516][ T6250] loop0: detected capacity change from 0 to 128 [ 141.580757][ T6250] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.605134][ T6250] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.957747][ T6262] loop8: detected capacity change from 0 to 128 [ 142.325726][ T6262] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 142.718831][ T6269] loop0: detected capacity change from 0 to 1024 [ 143.209910][ T6295] loop0: detected capacity change from 0 to 128 [ 143.261071][ T6297] loop8: detected capacity change from 0 to 128 [ 143.328788][ T6297] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 143.338775][ T6297] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.504971][ T6298] chnl_net:caif_netlink_parms(): no params data found [ 143.815995][ T6319] loop0: detected capacity change from 0 to 128 [ 144.464776][ T6319] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 144.513330][ T6298] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.515385][ T6298] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.529904][ T6298] device bridge_slave_0 entered promiscuous mode [ 144.588971][ T6298] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.594393][ T6298] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.612218][ T6298] device bridge_slave_1 entered promiscuous mode [ 144.864042][ T6298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.663777][ T6298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.741469][ T25] Bluetooth: hci1: command 0x0409 tx timeout [ 145.792797][ T6298] team0: Port device team_slave_0 added [ 145.796447][ T6298] team0: Port device team_slave_1 added [ 145.865932][ T6343] loop9: detected capacity change from 0 to 1024 [ 146.001055][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.002897][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.011712][ T6349] loop0: detected capacity change from 0 to 128 [ 146.013542][ T6298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.017825][ T6298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.019642][ T6298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.025994][ T6298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.072209][ T6353] loop6: detected capacity change from 0 to 128 [ 146.100047][ T6353] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.125358][ T6353] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.204687][ T6298] device hsr_slave_0 entered promiscuous mode [ 146.238070][ T6298] device hsr_slave_1 entered promiscuous mode [ 146.317827][ T6298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.319902][ T6298] Cannot create hsr debugfs directory [ 146.410531][ T6368] loop6: detected capacity change from 0 to 256 [ 146.469547][ T6368] exfat: Deprecated parameter 'namecase' [ 146.471205][ T6368] exfat: Deprecated parameter 'utf8' [ 146.472588][ T6368] exfat: Unknown parameter 'keep_last_dots' [ 146.878763][ T6378] loop9: detected capacity change from 0 to 128 [ 148.573656][ T4082] Bluetooth: hci1: command 0x041b tx timeout [ 148.599096][ T6378] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.040644][ T1834] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.119531][ T1834] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.188340][ T1834] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.249858][ T6402] loop9: detected capacity change from 0 to 1024 [ 149.286109][ T1834] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.364340][ T6410] loop8: detected capacity change from 0 to 128 [ 149.375853][ T6410] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 149.391683][ T6410] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 149.609780][ T6422] udc-core: couldn't find an available UDC or it's busy [ 149.611592][ T6422] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 149.704343][ T6417] loop0: detected capacity change from 0 to 8192 [ 149.879850][ T6434] loop6: detected capacity change from 0 to 128 [ 149.993345][ T6443] loop0: detected capacity change from 0 to 1024 [ 149.994204][ T6445] loop8: detected capacity change from 0 to 128 [ 150.019294][ T6445] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 150.026452][ T6445] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 150.549854][ T6466] "syz.9.671" (6466) uses obsolete ecb(arc4) skcipher [ 150.587851][ T4082] Bluetooth: hci1: command 0x040f tx timeout [ 150.869837][ T6473] loop9: detected capacity change from 0 to 2048 [ 150.929822][ T6471] loop0: detected capacity change from 0 to 8192 [ 150.932917][ T6473] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 151.247362][ T6486] netlink: 48 bytes leftover after parsing attributes in process `syz.9.678'. [ 151.278712][ T6485] loop8: detected capacity change from 0 to 256 [ 151.280890][ T6485] exfat: Deprecated parameter 'namecase' [ 151.296271][ T6485] exfat: Deprecated parameter 'utf8' [ 151.304980][ T6485] exfat: Unknown parameter 'keep_last_dots' [ 151.446021][ T6483] loop0: detected capacity change from 0 to 8192 [ 151.550010][ T6501] loop9: detected capacity change from 0 to 128 [ 151.646795][ T6505] loop6: detected capacity change from 0 to 128 [ 151.659894][ T6503] loop8: detected capacity change from 0 to 8192 [ 151.694836][ T6505] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 151.703181][ T6505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.929902][ T6516] loop0: detected capacity change from 0 to 512 [ 151.977301][ T6516] EXT4-fs (loop0): inline encryption not supported [ 151.979166][ T6516] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 152.044133][ T6516] EXT4-fs (loop0): 1 orphan inode deleted [ 152.045627][ T6516] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,minixdf,acl,sb=0x0000000000000007,jqfmt=vfsv0,user_xattr,stripe=0x0000000000000374,,errors=continue. Quota mode: writeback. [ 152.185218][ T1834] device hsr_slave_0 left promiscuous mode [ 152.236461][ T1834] device hsr_slave_1 left promiscuous mode [ 152.308845][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.311700][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.386992][ T6534] loop6: detected capacity change from 0 to 128 [ 152.584553][ T6534] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 152.699792][ T1834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.703130][ T1834] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.909039][ T1834] device bridge_slave_1 left promiscuous mode [ 152.910713][ T1834] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.959312][ T4082] Bluetooth: hci1: command 0x0419 tx timeout [ 152.990909][ T1834] device bridge_slave_0 left promiscuous mode [ 152.992672][ T1834] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.168519][ T1834] device veth1_macvtap left promiscuous mode [ 153.170235][ T1834] device veth0_macvtap left promiscuous mode [ 153.171896][ T1834] device veth1_vlan left promiscuous mode [ 153.173394][ T1834] device veth0_vlan left promiscuous mode [ 153.250290][ T6537] loop0: detected capacity change from 0 to 8192 [ 153.714573][ T1834] team0 (unregistering): Port device team_slave_1 removed [ 153.726481][ T1834] team0 (unregistering): Port device team_slave_0 removed [ 153.735897][ T1834] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.737662][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 153.786860][ T1834] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.945260][ T1834] bond0 (unregistering): Released all slaves [ 154.052373][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.060324][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.076203][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.080816][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.083609][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.086432][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.091719][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.094627][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.097358][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.705'. [ 154.113238][ T6552] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 154.113917][ T7] usb 1-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 154.118120][ T6552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.118950][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 154.120338][ T6552] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.122487][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 154.298871][ T6558] loop8: detected capacity change from 0 to 8192 [ 154.311051][ T7] usb 1-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 154.313229][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.316683][ T6298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.317293][ T7] usb 1-1: Product: syz [ 154.319566][ T7] usb 1-1: Manufacturer: syz [ 154.320692][ T7] usb 1-1: SerialNumber: syz [ 154.374067][ T7] usb 1-1: config 0 descriptor?? [ 154.459802][ T6298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.633996][ T6298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.679496][ T7] usb 1-1: Found UVC 34.00 device syz (8086:0b5b) [ 154.681628][ T7] usb 1-1: No valid video chain found. [ 154.742789][ T6575] loop9: detected capacity change from 0 to 128 [ 155.069342][ T7] usb 1-1: USB disconnect, device number 8 [ 155.423744][ T6298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.444764][ T6575] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 155.727031][ T6576] loop8: detected capacity change from 0 to 8192 [ 155.755390][ T6298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.807383][ T6298] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.822266][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.824737][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.915425][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.922825][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.925276][ T1812] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.927185][ T1812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.931815][ T6589] "syz.6.720" (6589) uses obsolete ecb(arc4) skcipher [ 155.949496][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.952243][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.965003][ T1812] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.966800][ T1812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.974036][ T6593] loop9: detected capacity change from 0 to 1024 [ 155.979350][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.985008][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.003516][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.040315][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.044620][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.059363][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.066075][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.081584][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.086566][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.105780][ T6298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 156.122331][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.124830][ T6593] hfsplus: xattr searching failed [ 156.130537][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.138930][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.142258][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.244331][ T6592] loop0: detected capacity change from 0 to 8192 [ 156.475294][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.477390][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.536510][ T6298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.793532][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.796386][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.392484][ T6298] device veth0_vlan entered promiscuous mode [ 157.411252][ T6618] loop8: detected capacity change from 0 to 8192 [ 157.481388][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.484102][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.486897][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.527080][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.553403][ T6642] loop9: detected capacity change from 0 to 256 [ 157.568215][ T6298] device veth1_vlan entered promiscuous mode [ 157.600715][ T6647] loop6: detected capacity change from 0 to 1024 [ 157.660981][ T6642] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 157.685730][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.688779][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.702036][ T6298] device veth0_macvtap entered promiscuous mode [ 157.711095][ T6642] tmpfs: Bad value for 'uid' [ 157.726866][ T6647] hfsplus: xattr searching failed [ 157.738056][ T6298] device veth1_macvtap entered promiscuous mode [ 157.804274][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.816148][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.829385][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.840208][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.861299][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.884349][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.896093][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.909654][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.926678][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.944590][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.947409][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.954300][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.964345][ T6651] loop8: detected capacity change from 0 to 8192 [ 157.972194][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.981904][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.985872][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.995291][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.006396][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.014770][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.049823][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.053225][ T6656] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 158.065095][ T6298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.074768][ T6298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.088445][ T6298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.093976][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.097142][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.116396][ T6298] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.127970][ T6298] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.135261][ T6298] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.145794][ T6298] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.252753][ T6663] loop6: detected capacity change from 0 to 1024 [ 159.665791][ T1812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.675484][ T1812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.710349][ T6681] loop8: detected capacity change from 0 to 8 [ 159.749553][ T1812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.751786][ T1812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.054277][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 160.057009][ T922] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.178242][ T6681] SQUASHFS error: zlib decompression failed, data probably corrupt [ 160.180511][ T6681] SQUASHFS error: Failed to read block 0x9b: -5 [ 160.182071][ T6681] SQUASHFS error: Unable to read metadata cache entry [99] [ 160.183779][ T6681] SQUASHFS error: Unable to read inode 0x127 [ 160.345933][ T6700] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 160.385465][ T6701] loop3: detected capacity change from 0 to 1024 [ 160.585675][ T6694] loop6: detected capacity change from 0 to 8192 [ 161.334595][ T6701] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 161.449596][ T6719] loop9: detected capacity change from 0 to 256 [ 161.508274][ T6719] exfat: Deprecated parameter 'namecase' [ 161.509785][ T6719] exfat: Deprecated parameter 'utf8' [ 161.511162][ T6719] exfat: Unknown parameter 'keep_last_dots' [ 161.636126][ T6713] loop8: detected capacity change from 0 to 8192 [ 161.932431][ T6738] loop6: detected capacity change from 0 to 128 [ 162.563654][ T6738] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.084476][ T6769] loop9: detected capacity change from 0 to 256 [ 163.090089][ T6759] loop0: detected capacity change from 0 to 8192 [ 163.119084][ T6769] exfat: Deprecated parameter 'namecase' [ 163.120450][ T6769] exfat: Deprecated parameter 'utf8' [ 163.121665][ T6769] exfat: Unknown parameter 'keep_last_dots' [ 163.146924][ T6774] loop8: detected capacity change from 0 to 764 [ 163.201558][ T6774] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 163.413619][ T6780] loop3: detected capacity change from 0 to 8192 [ 163.589169][ T6793] loop6: detected capacity change from 0 to 128 [ 163.931215][ T6793] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 164.354618][ T6802] loop0: detected capacity change from 0 to 1024 [ 164.613406][ T6811] loop3: detected capacity change from 0 to 8192 [ 164.874776][ T6840] loop3: detected capacity change from 0 to 256 [ 165.028398][ T6840] exfat: Deprecated parameter 'namecase' [ 165.029993][ T6840] exfat: Deprecated parameter 'utf8' [ 165.034380][ T6840] exfat: Unknown parameter 'keep_last_dots' [ 165.161980][ T6855] loop8: detected capacity change from 0 to 128 [ 165.912209][ T6855] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.026132][ T6866] loop9: detected capacity change from 0 to 8192 [ 166.527304][ T6904] loop9: detected capacity change from 0 to 8 [ 167.481770][ T6904] SQUASHFS error: lzo decompression failed, data probably corrupt [ 167.483826][ T6904] SQUASHFS error: Failed to read block 0x91: -5 [ 167.485517][ T6904] SQUASHFS error: Unable to read metadata cache entry [8f] [ 167.487284][ T6904] SQUASHFS error: Unable to read inode 0x11f [ 167.603793][ T6904] udc-core: couldn't find an available UDC or it's busy [ 167.605710][ T6904] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 167.677323][ T6913] loop6: detected capacity change from 0 to 8192 [ 167.876916][ T6943] loop0: detected capacity change from 0 to 1024 [ 168.051856][ T6943] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 168.145676][ T6943] EXT4-fs (loop0): Cannot change journaled quota options when quota turned on [ 168.464284][ T6975] loop9: detected capacity change from 0 to 256 [ 168.508785][ T6975] exfat: Deprecated parameter 'namecase' [ 168.511178][ T6975] exfat: Deprecated parameter 'utf8' [ 168.514129][ T6975] exfat: Unknown parameter 'keep_last_dots' [ 168.548267][ T6983] udc-core: couldn't find an available UDC or it's busy [ 168.550075][ T6983] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 168.692227][ T6974] loop6: detected capacity change from 0 to 8192 [ 169.318987][ T7018] loop6: detected capacity change from 0 to 128 [ 169.995497][ T6977] __nla_validate_parse: 63 callbacks suppressed [ 169.995515][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.3.842'. [ 170.021490][ T7018] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 170.196034][ T7031] loop8: detected capacity change from 0 to 256 [ 170.221318][ T7031] exfat: Deprecated parameter 'namecase' [ 170.222801][ T7031] exfat: Deprecated parameter 'utf8' [ 170.224062][ T7031] exfat: Unknown parameter 'keep_last_dots' [ 170.823926][ T7056] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 170.966643][ T7059] loop6: detected capacity change from 0 to 8192 [ 171.456695][ T7099] loop0: detected capacity change from 0 to 128 [ 171.909862][ T7099] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 172.356559][ T7123] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 172.594196][ T7125] loop3: detected capacity change from 0 to 8192 [ 173.113480][ T7163] loop3: detected capacity change from 0 to 128 [ 173.490636][ T7163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.732796][ T7167] loop6: detected capacity change from 0 to 1024 [ 173.733192][ T7166] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 173.859115][ T7165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.884'. [ 174.110473][ T1963] Bluetooth: hci2: command 0x0406 tx timeout [ 174.456630][ T7212] loop0: detected capacity change from 0 to 1024 [ 174.724617][ T7219] loop6: detected capacity change from 0 to 128 [ 175.057294][ T7219] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 175.462989][ T7222] loop3: detected capacity change from 0 to 128 [ 175.597831][ T7233] loop0: detected capacity change from 0 to 128 [ 175.615024][ T7240] loop8: detected capacity change from 0 to 256 [ 175.763142][ T7240] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 175.768681][ T7240] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 175.772308][ T7240] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 175.774460][ T7240] UDF-fs: Scanning with blocksize 512 failed [ 175.787881][ T7240] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 175.806556][ T7240] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 175.830300][ T7252] loop3: detected capacity change from 0 to 1024 [ 176.614985][ T7276] loop8: detected capacity change from 0 to 128 [ 176.904498][ T7276] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 177.034249][ T7306] loop3: detected capacity change from 0 to 1024 [ 177.040397][ T7303] loop6: detected capacity change from 0 to 512 [ 177.041312][ T7] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 177.220790][ T7318] loop9: detected capacity change from 0 to 128 [ 177.232675][ T7303] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 177.317659][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 177.391360][ T7323] loop8: detected capacity change from 0 to 8192 [ 177.514062][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.597786][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.600502][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 177.602595][ T7] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 178.473271][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.475645][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.478930][ T7] usb 1-1: Product: syz [ 178.480018][ T7] usb 1-1: Manufacturer: syz [ 178.481070][ T7] usb 1-1: SerialNumber: syz [ 178.626373][ T7358] loop9: detected capacity change from 0 to 1024 [ 178.686094][ T7361] loop3: detected capacity change from 0 to 512 [ 178.744932][ T7361] EXT4-fs (loop3): mounted filesystem without journal. Opts: sb=0x0000000000000001,nodioread_nolock,,errors=continue. Quota mode: writeback. [ 178.766235][ T7] cdc_ncm 1-1:1.0: skipping garbage [ 178.770543][ T7] cdc_ncm 1-1:1.0: skipping garbage [ 178.771841][ T7] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 178.773367][ T7] cdc_ncm 1-1:1.0: bind() failure [ 178.797669][ T7] usb 1-1: USB disconnect, device number 9 [ 178.996854][ T7382] loop9: detected capacity change from 0 to 128 [ 180.141971][ T7391] loop0: detected capacity change from 0 to 1024 [ 180.145102][ T7395] Invalid option length (1043749) for dns_resolver key [ 180.513253][ T7417] loop8: detected capacity change from 0 to 16 [ 180.625212][ T7420] loop9: detected capacity change from 0 to 8 [ 181.139565][ T7424] loop3: detected capacity change from 0 to 128 [ 181.267872][ T7417] erofs: (device loop8): mounted with root inode @ nid 36. [ 181.300057][ T7417] erofs: (device loop8): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 181.304646][ T4033] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 181.360826][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 181.384574][ T7417] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress 6887 in[4096, 0] out[8192] [ 181.454892][ T7430] loop9: detected capacity change from 0 to 512 [ 181.525325][ T7430] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 181.527242][ T7430] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 181.574332][ T7430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002] [ 181.587032][ T7430] System zones: 1-12 [ 181.612633][ T7440] udc-core: couldn't find an available UDC or it's busy [ 181.614475][ T7440] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 181.661607][ T7430] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.986: corrupted in-inode xattr [ 181.682364][ T7430] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.986: couldn't read orphan inode 15 (err -117) [ 181.701645][ T7430] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,debug,,errors=continue. Quota mode: none. [ 181.827694][ T7430] udc-core: couldn't find an available UDC or it's busy [ 181.829414][ T7430] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.006139][ T7449] udc-core: couldn't find an available UDC or it's busy [ 182.017046][ T7449] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.267220][ T7456] udc-core: couldn't find an available UDC or it's busy [ 182.273174][ T7456] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.535292][ T7464] loop0: detected capacity change from 0 to 128 [ 182.557274][ T7468] loop9: detected capacity change from 0 to 1024 [ 182.716849][ T7479] udc-core: couldn't find an available UDC or it's busy [ 182.726136][ T7479] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 182.765218][ T7476] loop3: detected capacity change from 0 to 512 [ 182.906180][ T7476] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 182.937861][ T7476] EXT4-fs (loop3): 1 truncate cleaned up [ 182.939336][ T7476] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 183.156245][ T7495] loop6: detected capacity change from 0 to 128 [ 183.977465][ C0] sched: RT throttling activated [ 184.028690][ T7476] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1001: corrupted in-inode xattr [ 184.137732][ T7476] EXT4-fs (loop3): Remounting filesystem read-only [ 184.139477][ T7476] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1751: inode #15: comm syz.3.1001: unable to update i_inline_off [ 184.142721][ T7476] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1001: corrupted in-inode xattr [ 184.175969][ T7495] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 184.195375][ T7476] EXT4-fs (loop3): Remounting filesystem read-only [ 184.237144][ T7476] udc-core: couldn't find an available UDC or it's busy [ 184.256491][ T7476] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 184.603644][ T7520] loop9: detected capacity change from 0 to 1024 [ 184.637733][ T4080] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 184.733309][ T7524] loop6: detected capacity change from 0 to 128 [ 184.903030][ T4080] usb 1-1: Using ep0 maxpacket: 16 [ 185.027870][ T4080] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 185.029955][ T4080] usb 1-1: config 0 has no interface number 0 [ 185.031698][ T4080] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 185.202576][ T4080] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 185.204950][ T4080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.206830][ T4080] usb 1-1: Product: syz [ 185.209387][ T4080] usb 1-1: Manufacturer: syz [ 185.210544][ T4080] usb 1-1: SerialNumber: syz [ 185.216534][ T4080] usb 1-1: config 0 descriptor?? [ 186.236926][ T7563] netlink: 'syz.6.1024': attribute type 4 has an invalid length. [ 186.478030][ T4080] usbtouchscreen: probe of 1-1:0.214 failed with error -71 [ 188.057882][ T4080] usb 1-1: USB disconnect, device number 10 [ 188.173751][ T7589] loop3: detected capacity change from 0 to 128 [ 188.174625][ T7578] loop9: detected capacity change from 0 to 512 [ 188.213996][ T7578] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 188.233054][ T7578] EXT4-fs (loop9): 1 truncate cleaned up [ 188.234598][ T7578] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 188.248331][ T7589] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 188.361803][ T7578] udc-core: couldn't find an available UDC or it's busy [ 188.363610][ T7578] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 188.437666][ T7607] loop3: detected capacity change from 0 to 128 [ 188.446975][ T7604] loop0: detected capacity change from 0 to 1024 [ 188.976811][ T7623] loop6: detected capacity change from 0 to 8 [ 191.428860][ T7656] loop3: detected capacity change from 0 to 512 [ 191.585644][ T7656] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1048: corrupted inode contents [ 191.620089][ T7656] EXT4-fs error (device loop3): ext4_dirty_inode:6010: inode #16: comm syz.3.1048: mark_inode_dirty error [ 191.658630][ T7656] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1048: corrupted inode contents [ 191.699623][ T7656] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #16: comm syz.3.1048: mark_inode_dirty error [ 191.717740][ T7656] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1048: corrupted inode contents [ 191.726143][ T7679] xt_CT: You must specify a L4 protocol and not use inversions on it [ 191.757203][ T7656] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 191.791715][ T7671] loop0: detected capacity change from 0 to 512 [ 191.797685][ T7656] EXT4-fs error (device loop3): ext4_do_update_inode:5174: inode #16: comm syz.3.1048: corrupted inode contents [ 191.804563][ T7656] EXT4-fs error (device loop3): ext4_truncate:4272: inode #16: comm syz.3.1048: mark_inode_dirty error [ 191.854857][ T7656] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 191.878734][ T7656] EXT4-fs (loop3): 1 truncate cleaned up [ 191.880424][ T7656] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,dioread_nolock,data=journal,noblock_validity,bsddf,,errors=continue. Quota mode: writeback. [ 191.886534][ T7671] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 191.933284][ T7671] EXT4-fs (loop0): 1 truncate cleaned up [ 191.934991][ T7671] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 191.946803][ T7685] loop8: detected capacity change from 0 to 512 [ 192.032575][ T7685] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 192.072967][ T7671] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1052: corrupted in-inode xattr [ 192.088206][ T7685] EXT4-fs (loop8): orphan cleanup on readonly fs [ 192.091759][ T7685] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:510: comm syz.8.1055: Block bitmap for bg 0 marked uninitialized [ 192.111181][ T7685] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 192.113632][ T7671] EXT4-fs (loop0): Remounting filesystem read-only [ 192.115346][ T7671] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1751: inode #15: comm syz.0.1052: unable to update i_inline_off [ 192.144509][ T7685] EXT4-fs (loop8): 1 orphan inode deleted [ 192.146096][ T7685] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 192.156582][ T7671] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.1052: corrupted in-inode xattr [ 192.214918][ T7685] EXT4-fs (loop8): Unrecognized mount option "z [ 192.214918][ T7685] " or missing value [ 192.235587][ T7671] EXT4-fs (loop0): Remounting filesystem read-only [ 192.515130][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.516693][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 192.587622][ T5786] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 192.599582][ T7710] udc-core: couldn't find an available UDC or it's busy [ 192.601438][ T7710] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 193.717692][ T5786] usb 1-1: config 0 has an invalid interface number: 216 but max is 0 [ 193.719778][ T5786] usb 1-1: config 0 has no interface number 0 [ 193.721255][ T5786] usb 1-1: config 0 interface 216 altsetting 253 bulk endpoint 0x8 has invalid maxpacket 1024 [ 193.724099][ T5786] usb 1-1: config 0 interface 216 has no altsetting 0 [ 193.725769][ T5786] usb 1-1: New USB device found, idVendor=0636, idProduct=0003, bcdDevice=8c.05 [ 193.764947][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.799744][ T5786] usb 1-1: config 0 descriptor?? [ 193.815329][ T7751] udc-core: couldn't find an available UDC or it's busy [ 193.817923][ T7692] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 193.823982][ T7751] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 193.839135][ T5786] usb-storage 1-1:0.216: USB Mass Storage device detected [ 194.002737][ T5786] usb-storage 1-1:0.216: Quirks match for vid 0636 pid 0003: 8 [ 194.219636][ T5786] usb 1-1: USB disconnect, device number 11 [ 195.104861][ T7789] loop3: detected capacity change from 0 to 128 [ 195.148119][ T7789] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 195.514578][ T7800] FAT-fs (loop3): FAT read failed (blocknr 234) [ 196.487650][ T7813] loop3: detected capacity change from 0 to 2048 [ 196.577190][ T7813] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.286668][ T7839] loop9: detected capacity change from 0 to 256 [ 197.333867][ T292] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.366340][ T7839] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 197.376509][ T7839] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 197.412612][ T7839] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 197.446174][ T7838] loop6: detected capacity change from 0 to 512 [ 197.460374][ T292] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.515983][ T26] audit: type=1326 audit(197.474:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7842 comm="syz.8.1088" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83919ce8 code=0x0 [ 197.536070][ T7838] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 197.572845][ T292] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.585563][ T7838] EXT4-fs (loop6): 1 truncate cleaned up [ 197.587084][ T7838] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 197.685856][ T7853] loop3: detected capacity change from 0 to 256 [ 197.697015][ T7838] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.1086: corrupted in-inode xattr [ 197.750443][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 197.752075][ T7838] EXT4-fs warning (device loop6): ext4_xattr_set_entry:1751: inode #15: comm syz.6.1086: unable to update i_inline_off [ 197.765539][ T7838] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.1086: corrupted in-inode xattr [ 197.771885][ T7838] EXT4-fs (loop6): Remounting filesystem read-only [ 197.774112][ T292] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.788247][ T7838] udc-core: couldn't find an available UDC or it's busy [ 197.789950][ T7838] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 198.798973][ T26] audit: type=1326 audit(198.764:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.8.1092" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83919ce8 code=0x0 [ 198.968747][ T7872] udc-core: couldn't find an available UDC or it's busy [ 198.970628][ T7872] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 198.974120][ T7873] "syz.3.1093" (7873) uses obsolete ecb(arc4) skcipher [ 199.083133][ T7878] udc-core: couldn't find an available UDC or it's busy [ 199.086285][ T7878] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 199.227370][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 199.946399][ T4081] Bluetooth: hci2: command 0x0409 tx timeout [ 200.321392][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.329579][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.350689][ T7850] device bridge_slave_0 entered promiscuous mode [ 200.423901][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.426023][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.435460][ T7850] device bridge_slave_1 entered promiscuous mode [ 200.506436][ T7915] loop9: detected capacity change from 0 to 128 [ 200.560362][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 200.565642][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 200.594005][ T7915] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 200.709266][ T7850] team0: Port device team_slave_0 added [ 200.714805][ T7850] team0: Port device team_slave_1 added [ 200.987711][ T7925] FAT-fs (loop9): FAT read failed (blocknr 234) [ 201.715918][ T7931] "syz.3.1106" (7931) uses obsolete ecb(arc4) skcipher [ 201.719496][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.721538][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.740279][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.795434][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.797347][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.817211][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.872488][ T26] audit: type=1326 audit(201.834:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.9.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a13ce8 code=0x7fc00000 [ 201.881567][ T26] audit: type=1326 audit(201.844:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.9.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff81a13ce8 code=0x7fc00000 [ 202.026680][ T7944] loop8: detected capacity change from 0 to 128 [ 202.028507][ T4078] Bluetooth: hci2: command 0x041b tx timeout [ 202.094619][ T7948] loop3: detected capacity change from 0 to 256 [ 202.124695][ T7944] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 202.196507][ T7948] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.199720][ T7948] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 202.226602][ T7948] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 202.254155][ T7850] device hsr_slave_0 entered promiscuous mode [ 202.298813][ T7850] device hsr_slave_1 entered promiscuous mode [ 202.344227][ T7850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.346137][ T7850] Cannot create hsr debugfs directory [ 202.455833][ T7961] loop6: detected capacity change from 0 to 256 [ 202.614325][ T7964] loop3: detected capacity change from 0 to 256 [ 202.690695][ T26] audit: type=1326 audit(202.604:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7932 comm="syz.9.1107" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a13ce8 code=0x7fc00000 [ 203.444553][ T7964] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 203.466672][ T7964] exFAT-fs (loop3): error, tried to truncate zeroed cluster. [ 203.504180][ T7964] exFAT-fs (loop3): Filesystem has been set read-only [ 203.523404][ T7972] loop9: detected capacity change from 0 to 2048 [ 203.552451][ T7974] "syz.8.1118" (7974) uses obsolete ecb(arc4) skcipher [ 203.771137][ T7972] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 203.796693][ T7983] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.859638][ T7983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.868077][ T7983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.873251][ T7983] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 204.100337][ T8003] loop6: detected capacity change from 0 to 128 [ 204.105968][ T292] device hsr_slave_0 left promiscuous mode [ 204.108627][ T1963] Bluetooth: hci2: command 0x040f tx timeout [ 204.121382][ T8003] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 204.856627][ T292] device hsr_slave_1 left promiscuous mode [ 204.861253][ T8008] udc-core: couldn't find an available UDC or it's busy [ 204.863005][ T8008] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 205.508130][ T8017] FAT-fs (loop6): FAT read failed (blocknr 234) [ 206.299412][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.301547][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.318094][ T4083] Bluetooth: hci2: command 0x0419 tx timeout [ 206.564074][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.566419][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.578483][ T292] device bridge_slave_1 left promiscuous mode [ 206.587359][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.603131][ T8034] udc-core: couldn't find an available UDC or it's busy [ 206.606249][ T8034] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 206.646878][ T292] device bridge_slave_0 left promiscuous mode [ 206.649610][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.758543][ T292] device veth1_macvtap left promiscuous mode [ 206.760234][ T292] device veth0_macvtap left promiscuous mode [ 206.761967][ T292] device veth1_vlan left promiscuous mode [ 206.763503][ T292] device veth0_vlan left promiscuous mode [ 207.016737][ T292] team0 (unregistering): Port device team_slave_1 removed [ 207.026140][ T292] team0 (unregistering): Port device team_slave_0 removed [ 207.036058][ T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.098771][ T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.195201][ T8040] "syz.3.1130" (8040) uses obsolete ecb(arc4) skcipher [ 207.317767][ T292] bond0 (unregistering): Released all slaves [ 207.363862][ T8046] loop8: detected capacity change from 0 to 256 [ 208.562541][ T8057] loop6: detected capacity change from 0 to 128 [ 208.682481][ T7850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.483831][ T7850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.516107][ T8057] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 209.593888][ T8068] udc-core: couldn't find an available UDC or it's busy [ 209.595610][ T8068] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 210.872884][ T7850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.923411][ T7850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.102569][ T26] audit: type=1326 audit(211.064:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8085 comm="syz.9.1154" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a13ce8 code=0x0 [ 211.138085][ T8084] loop8: detected capacity change from 0 to 2048 [ 211.237099][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.261139][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.282168][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.285632][ T8084] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 211.326478][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.356968][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.360332][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.362854][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.364670][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.383123][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.399135][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.409472][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.419689][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.421628][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.458469][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.465805][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.555568][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 211.563788][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 211.568739][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 211.899844][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 211.922656][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 211.939831][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 211.986308][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.092981][ T8098] loop3: detected capacity change from 0 to 256 [ 212.152398][ T7850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.155672][ T7850] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.168661][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.171354][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.181548][ T8098] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 212.184174][ T8098] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 212.226771][ T8098] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 212.299390][ T8101] loop9: detected capacity change from 0 to 256 [ 213.947615][ T8116] "syz.8.1152" (8116) uses obsolete ecb(arc4) skcipher [ 213.967901][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.969972][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.990691][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.058263][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.061269][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.128486][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.131208][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.133835][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.155076][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.167225][ T7850] device veth0_vlan entered promiscuous mode [ 214.194339][ T7850] device veth1_vlan entered promiscuous mode [ 214.359559][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.362234][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.364818][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.378814][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 215.126579][ T26] audit: type=1326 audit(215.084:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8124 comm="syz.8.1157" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff83919ce8 code=0x0 [ 215.140695][ T7850] device veth0_macvtap entered promiscuous mode [ 215.149820][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 215.188974][ T7850] device veth1_macvtap entered promiscuous mode [ 215.283047][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.285614][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.288729][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.291327][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.293823][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.296339][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.299793][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.302408][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.306647][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.311009][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 215.314103][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 215.324128][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.326744][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.329923][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.333237][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.335911][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.339398][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.342054][ T7850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.345411][ T7850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.353656][ T7850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.360758][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.363766][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.415550][ T7850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.427384][ T7850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.438723][ T7850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.442439][ T7850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.702764][ T8144] "syz.3.1164" (8144) uses obsolete ecb(arc4) skcipher [ 215.717260][ T4209] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.442547][ T4209] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.523045][ T25] Bluetooth: hci0: command 0x0406 tx timeout [ 216.552652][ T1834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 216.613338][ T1834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.615804][ T1834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.621364][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 216.795853][ T8156] loop3: detected capacity change from 0 to 512 [ 217.679825][ T8156] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 217.768465][ T26] audit: type=1326 audit(217.734:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8165 comm="syz.6.1170" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccafce8 code=0x0 [ 218.947670][ T4086] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 219.187572][ T4086] usb 1-1: Using ep0 maxpacket: 32 [ 219.221141][ T8200] "syz.9.1177" (8200) uses obsolete ecb(arc4) skcipher [ 219.308286][ T4086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 219.312296][ T4086] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 219.315580][ T4086] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 219.330350][ T4086] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.349149][ T4086] usb 1-1: config 0 descriptor?? [ 219.377917][ T8182] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 219.408624][ T4086] hub 1-1:0.0: USB hub found [ 219.715246][ T4086] hub 1-1:0.0: 1 port detected [ 219.866892][ T8222] loop8: detected capacity change from 0 to 256 [ 219.988714][ T8222] FAT-fs (loop8): "posix" option is obsolete, not supported now [ 220.614719][ T26] audit: type=1326 audit(220.574:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8225 comm="syz.9.1185" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a13ce8 code=0x0 [ 220.782454][ T8232] loop8: detected capacity change from 0 to 128 [ 220.841647][ T8236] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.856382][ T8232] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.895354][ T8240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.210165][ T8251] usb usb8: usbfs: process 8251 (syz.3.1189) did not claim interface 0 before use [ 221.249692][ T25] usb 1-1: USB disconnect, device number 12 [ 221.279642][ T4086] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 221.604487][ T8273] udc-core: couldn't find an available UDC or it's busy [ 221.613543][ T8273] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 221.824578][ T8281] loop0: detected capacity change from 0 to 128 [ 222.002885][ T8281] attempt to access beyond end of device [ 222.002885][ T8281] loop0: rw=0, want=255510, limit=128 [ 222.003348][ T8283] loop3: detected capacity change from 0 to 128 [ 222.041326][ T8281] attempt to access beyond end of device [ 222.041326][ T8281] loop0: rw=0, want=255510, limit=128 [ 222.049465][ T8281] attempt to access beyond end of device [ 222.049465][ T8281] loop0: rw=0, want=255510, limit=128 [ 222.065093][ T8281] attempt to access beyond end of device [ 222.065093][ T8281] loop0: rw=0, want=255510, limit=128 [ 222.078087][ T8283] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.584245][ T26] audit: type=1326 audit(222.544:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8301 comm="syz.3.1203" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96019ce8 code=0x0 [ 222.620233][ T8305] loop8: detected capacity change from 0 to 256 [ 222.663461][ T8305] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 222.666270][ T8305] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 222.706854][ T8305] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 223.166686][ T8330] "syz.6.1211" (8330) uses obsolete ecb(arc4) skcipher [ 223.588730][ T8348] loop3: detected capacity change from 0 to 256 [ 223.610275][ T8348] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 223.613532][ T8348] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 223.658371][ T8348] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 224.404018][ T8383] "syz.3.1222" (8383) uses obsolete ecb(arc4) skcipher [ 224.612665][ T26] audit: type=1326 audit(224.574:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8387 comm="syz.3.1224" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96019ce8 code=0x0 [ 225.424133][ T8405] loop6: detected capacity change from 0 to 128 [ 225.528416][ T8405] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 225.581451][ T8414] loop3: detected capacity change from 0 to 256 [ 225.641555][ T8414] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 225.651915][ T8414] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 225.718237][ T8414] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 225.782480][ T8381] chnl_net:caif_netlink_parms(): no params data found [ 225.828510][ T8420] loop6: detected capacity change from 0 to 256 [ 225.829300][ T8420] FAT-fs (loop6): Unrecognized mount option "eprors=remount-ro" or missing value [ 225.856412][ T8420] udc-core: couldn't find an available UDC or it's busy [ 225.856435][ T8420] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 226.014685][ T8381] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.030070][ T8381] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.032784][ T8381] device bridge_slave_0 entered promiscuous mode [ 226.095444][ T8381] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.106965][ T8429] loop0: detected capacity change from 0 to 2048 [ 226.108858][ T8381] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.123852][ T8381] device bridge_slave_1 entered promiscuous mode [ 226.181025][ T8434] "syz.9.1235" (8434) uses obsolete ecb(arc4) skcipher [ 226.189848][ T8429] EXT4-fs (loop0): inline encryption not supported [ 226.232492][ T8381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.248100][ T8381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.259996][ T8429] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,usrjquota=,lazytime,debug_want_extra_isize=0x0000000000000040,bsdgroups,grpquota,i_version,noload,barrier,grpquota,,errors=continue. Quota mode: writeback. [ 226.303948][ T8429] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 226.343528][ T8381] team0: Port device team_slave_0 added [ 226.346952][ T8381] team0: Port device team_slave_1 added [ 226.404800][ T8429] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 226.428335][ T4078] Bluetooth: hci4: command 0x0409 tx timeout [ 226.464516][ T8429] EXT4-fs (loop0): This should not happen!! Data will be lost [ 226.464516][ T8429] [ 226.466899][ T8429] EXT4-fs (loop0): Total free blocks count 0 [ 226.486114][ T8429] EXT4-fs (loop0): Free/Dirty block details [ 226.488591][ T8429] EXT4-fs (loop0): free_blocks=2415919104 [ 226.490116][ T8429] EXT4-fs (loop0): dirty_blocks=16 [ 226.491500][ T8429] EXT4-fs (loop0): Block reservation details [ 226.492951][ T8429] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 226.556234][ T1904] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 1 with error 28 [ 226.556346][ T1904] EXT4-fs (loop0): This should not happen!! Data will be lost [ 226.556346][ T1904] [ 226.631453][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.633669][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.653930][ T8381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.755099][ T8381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.757027][ T8381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.776127][ T8381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.786681][ T8455] loop6: detected capacity change from 0 to 736 [ 226.946875][ T8460] loop9: detected capacity change from 0 to 2048 [ 227.022125][ T8460] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e01c, mo2=0002] [ 227.024168][ T8460] System zones: 0-7 [ 227.025786][ T8460] EXT4-fs (loop9): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,bsdgroups,resgid=0x0000000000000000,nouid32,debug,acl,,errors=continue. Quota mode: none. [ 227.069965][ T8467] "syz.0.1246" (8467) uses obsolete ecb(arc4) skcipher [ 227.216289][ T292] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.300360][ T8381] device hsr_slave_0 entered promiscuous mode [ 227.327855][ T8381] device hsr_slave_1 entered promiscuous mode [ 227.367623][ T8381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.369519][ T8381] Cannot create hsr debugfs directory [ 227.382242][ T292] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.404817][ T8479] loop0: detected capacity change from 0 to 2048 [ 227.495369][ T292] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.502592][ T8479] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 227.602009][ T292] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.720481][ T8494] loop6: detected capacity change from 0 to 128 [ 227.750894][ T8494] EXT4-fs (loop6): Test dummy encryption mode enabled [ 227.779243][ T8494] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,nolazytime,,errors=continue. Quota mode: none. [ 227.983799][ T8507] "syz.0.1257" (8507) uses obsolete ecb(arc4) skcipher [ 228.510731][ T25] Bluetooth: hci4: command 0x041b tx timeout [ 229.503577][ T8558] "syz.0.1271" (8558) uses obsolete ecb(arc4) skcipher [ 230.110640][ T8575] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1273'. [ 230.517805][ T4080] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.587782][ T4078] Bluetooth: hci4: command 0x040f tx timeout [ 230.778128][ T4080] usb 1-1: Using ep0 maxpacket: 32 [ 230.918145][ T4080] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 231.047426][ T8604] "syz.3.1285" (8604) uses obsolete ecb(arc4) skcipher [ 231.107703][ T4080] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 231.110017][ T4080] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.111860][ T4080] usb 1-1: Product: syz [ 231.112846][ T4080] usb 1-1: Manufacturer: syz [ 231.113928][ T4080] usb 1-1: SerialNumber: syz [ 231.121379][ T4080] usb 1-1: config 0 descriptor?? [ 231.144487][ T26] audit: type=1326 audit(231.104:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8609 comm="syz.3.1287" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff96019ce8 code=0x0 [ 231.167899][ T8568] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 231.248691][ T8381] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 231.369781][ T8381] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 231.426888][ T5786] usb 1-1: USB disconnect, device number 13 [ 232.128773][ T8381] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 232.231943][ T8381] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 232.377133][ T4153] udevd[4153]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.568251][ T292] device hsr_slave_0 left promiscuous mode [ 232.575658][ T8654] "syz.0.1298" (8654) uses obsolete ecb(arc4) skcipher [ 232.589823][ T292] device hsr_slave_1 left promiscuous mode [ 232.657689][ T26] audit: type=1326 audit(232.614:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8658 comm="syz.9.1300" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff81a13ce8 code=0x0 [ 232.667674][ T25] Bluetooth: hci4: command 0x0419 tx timeout [ 232.667923][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.671050][ T292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.694980][ T292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.696838][ T292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.700231][ T292] device bridge_slave_1 left promiscuous mode [ 232.701923][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.824145][ T292] device bridge_slave_0 left promiscuous mode [ 232.826143][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.240789][ T292] device veth1_macvtap left promiscuous mode [ 233.242782][ T292] device veth0_macvtap left promiscuous mode [ 233.246326][ T292] device veth1_vlan left promiscuous mode [ 233.248536][ T292] device veth0_vlan left promiscuous mode [ 234.286429][ T8682] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1302'. [ 234.985101][ T292] team0 (unregistering): Port device team_slave_1 removed [ 234.995509][ T292] team0 (unregistering): Port device team_slave_0 removed [ 235.005870][ T292] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.075274][ T292] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.236765][ T292] bond0 (unregistering): Released all slaves [ 235.557700][ T8704] "syz.9.1309" (8704) uses obsolete ecb(arc4) skcipher [ 235.594719][ T8707] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 235.598511][ T26] audit: type=1326 audit(235.554:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.6.1311" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccafce8 code=0x0 [ 235.642195][ T8381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.680007][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 235.685472][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 235.720340][ T8381] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.773858][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 235.778844][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 235.786805][ T4209] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.788758][ T4209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.820731][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.828208][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 235.846882][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 235.856827][ T4209] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.858683][ T4209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.861116][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.876336][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.917016][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.924167][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.949326][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.952564][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.965200][ T8381] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 235.974885][ T8381] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 235.986065][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.989536][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.992064][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.994770][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 236.018424][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 236.052787][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 236.346964][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 236.349672][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 236.370998][ T8381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.465128][ T26] audit: type=1326 audit(236.424:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8753 comm="syz.0.1331" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb5a41ce8 code=0x0 [ 237.067730][ T8772] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1321'. [ 237.468195][ T8771] "syz.3.1323" (8771) uses obsolete ecb(arc4) skcipher [ 237.638226][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 237.641017][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 237.732367][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 237.735034][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 237.738037][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 237.749914][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 237.771617][ T8381] device veth0_vlan entered promiscuous mode [ 237.817098][ T8381] device veth1_vlan entered promiscuous mode [ 237.917841][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 237.920697][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 237.923291][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 237.925902][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 237.956321][ T8381] device veth0_macvtap entered promiscuous mode [ 237.978292][ T8381] device veth1_macvtap entered promiscuous mode [ 238.076398][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.105119][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.117267][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.122859][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.125357][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.141967][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.150353][ T26] audit: type=1326 audit(238.114:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.6.1335" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8ccafce8 code=0x0 [ 238.165368][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.185829][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.198151][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.202418][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 238.205181][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 238.210068][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 238.215996][ T4368] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 238.232045][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.235036][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.242491][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.256604][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.269616][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.281492][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.296315][ T8381] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.313301][ T8381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.330595][ T8381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.337003][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 238.340286][ T1904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 238.356442][ T8381] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.389215][ T8381] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.407992][ T8381] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.410293][ T8381] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.466319][ T8823] "syz.0.1337" (8823) uses obsolete ecb(arc4) skcipher [ 238.630849][ T4205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.634372][ T4205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.646074][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 238.696099][ T1904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.698667][ T1904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.703541][ T1812] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 239.055564][ T8852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1347'. [ 239.162871][ T8852] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 239.186284][ T8852] netlink: 'syz.0.1347': attribute type 2 has an invalid length. [ 239.273518][ T8860] "syz.3.1350" (8860) uses obsolete ecb(arc4) skcipher [ 239.935531][ T8888] "syz.9.1362" (8888) uses obsolete ecb(arc4) skcipher [ 240.295812][ T5790] syzkaller0: tun_net_xmit 76 [ 240.297213][ T5790] syzkaller0: tun_net_xmit 48 [ 240.675686][ T4081] Bluetooth: hci3: command 0x0406 tx timeout [ 240.705216][ T8933] loop6: detected capacity change from 0 to 128 [ 240.818152][ T8933] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 241.033991][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1383'. [ 241.078234][ T8967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1382'. [ 241.149747][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1382'. [ 241.406766][ T8981] netlink: 'syz.0.1388': attribute type 4 has an invalid length. [ 241.507239][ T8986] "syz.8.1390" (8986) uses obsolete ecb(arc4) skcipher [ 241.701215][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1392'. [ 242.148654][ T7] syzkaller0: tun_net_xmit 76 [ 242.150098][ T7] syzkaller0: tun_net_xmit 48 [ 242.177894][ T7] syzkaller0: tun_net_xmit 76 [ 242.305511][ T9006] ax25_connect(): syz.9.1398 uses autobind, please contact jreuter@yaina.de [ 242.606472][ T9022] tc_dump_action: action bad kind [ 242.934440][ T9041] "syz.9.1409" (9041) uses obsolete ecb(arc4) skcipher [ 243.401542][ T9062] tc_dump_action: action bad kind [ 244.004993][ T4078] syzkaller0: tun_net_xmit 76 [ 244.006495][ T4078] syzkaller0: tun_net_xmit 48 [ 244.025114][ T9102] tc_dump_action: action bad kind [ 244.028020][ T1963] syzkaller0: tun_net_xmit 76 [ 244.133853][ T9105] loop6: detected capacity change from 0 to 128 [ 244.215887][ T9105] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.725135][ T9137] xt_l2tp: v2 doesn't support IP mode [ 244.891028][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1442'. [ 245.239948][ T9137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1438'. [ 246.788128][ T9215] SET target dimension over the limit! [ 246.869093][ T9218] xt_l2tp: v2 doesn't support IP mode [ 247.443858][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1463'. [ 248.929612][ T9289] loop3: detected capacity change from 0 to 128 [ 248.986187][ T9289] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 249.779257][ T5026] syzkaller0: tun_net_xmit 76 [ 249.780662][ T5026] syzkaller0: tun_net_xmit 48 [ 249.807920][ T5026] syzkaller0: tun_net_xmit 76 [ 250.254337][ T9350] netlink: 'syz.9.1497': attribute type 10 has an invalid length. [ 250.256347][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1497'. [ 250.291069][ T9350] device dummy0 entered promiscuous mode [ 250.296077][ T9350] bridge0: port 3(dummy0) entered blocking state [ 250.300178][ T9350] bridge0: port 3(dummy0) entered disabled state [ 250.323023][ T9350] bridge0: port 3(dummy0) entered blocking state [ 250.324769][ T9350] bridge0: port 3(dummy0) entered forwarding state [ 253.895843][ T9461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1533'. [ 253.951430][ T2059] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.953080][ T2059] ieee802154 phy1 wpan1: encryption failed: -22 [ 254.248814][ T4080] syzkaller0: tun_net_xmit 76 [ 254.250115][ T4080] syzkaller0: tun_net_xmit 48 [ 254.277958][ T4080] syzkaller0: tun_net_xmit 76 [ 254.684126][ T9496] device syzkaller0 entered promiscuous mode [ 254.707294][ T9508] loop6: detected capacity change from 0 to 128 [ 254.933099][ T9508] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 255.129320][ T9516] af_packet: tpacket_rcv: packet too big, clamped from 510 to 4294967286. macoff=82 [ 255.681822][ T5786] syzkaller0: tun_net_xmit 76 [ 255.683129][ T5786] syzkaller0: tun_net_xmit 48 [ 256.141023][ T9586] netlink: 'syz.9.1570': attribute type 3 has an invalid length. [ 256.589169][ T9611] loop3: detected capacity change from 0 to 128 [ 256.612647][ T21] syzkaller0: tun_net_xmit 76 [ 256.614177][ T21] syzkaller0: tun_net_xmit 48 [ 256.637870][ T21] syzkaller0: tun_net_xmit 76 [ 256.679354][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.698485][ T9611] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 256.792233][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.842835][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.873729][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.897380][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.926868][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.941395][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.956003][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.966805][ T9609] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.981492][ T9609] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.998155][ T9609] device ipvlan2 entered promiscuous mode [ 257.113572][ T9614] device syzkaller1 entered promiscuous mode [ 257.756492][ T9653] device syzkaller0 entered promiscuous mode [ 257.858922][ T4086] syzkaller0: tun_net_xmit 76 [ 257.860254][ T4086] syzkaller0: tun_net_xmit 48 [ 257.888113][ T4086] syzkaller0: tun_net_xmit 76 [ 258.019105][ T4081] syzkaller0: tun_net_xmit 76 [ 258.140310][ T4081] syzkaller0: tun_net_xmit 76 [ 258.304383][ T9684] loop8: detected capacity change from 0 to 128 [ 258.914593][ T9684] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.613861][ T9735] device syzkaller0 entered promiscuous mode [ 260.635860][ T9741] netlink: 'syz.3.1617': attribute type 7 has an invalid length. [ 262.392103][ T9825] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1645'. [ 262.404339][ T9825] lo speed is unknown, defaulting to 1000 [ 262.406142][ T9825] lo speed is unknown, defaulting to 1000 [ 262.441577][ T9825] lo speed is unknown, defaulting to 1000 [ 262.446042][ T9825] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 262.495606][ T9825] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 262.735254][ T9831] team0 (unregistering): Port device team_slave_0 removed [ 262.753514][ T9831] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 262.782685][ T9831] team0 (unregistering): Port device team_slave_1 removed [ 262.896120][ T9825] lo speed is unknown, defaulting to 1000 [ 262.910894][ T9825] lo speed is unknown, defaulting to 1000 [ 262.912884][ T9825] lo speed is unknown, defaulting to 1000 [ 262.914838][ T9825] lo speed is unknown, defaulting to 1000 [ 262.916712][ T9825] lo speed is unknown, defaulting to 1000 [ 263.021534][ T9825] lo speed is unknown, defaulting to 1000 [ 263.023580][ T9825] lo speed is unknown, defaulting to 1000 [ 263.025527][ T9825] lo speed is unknown, defaulting to 1000 [ 263.113317][ T9848] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1652'. [ 264.525740][ T9896] netlink: 13 bytes leftover after parsing attributes in process `syz.6.1669'. [ 264.672083][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1671'. [ 265.067082][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1678'. [ 265.228151][ T9927] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input34 [ 265.295291][ T9934] netlink: 13 bytes leftover after parsing attributes in process `syz.8.1682'. [ 265.452257][ T9946] netlink: 'syz.8.1686': attribute type 3 has an invalid length. [ 265.663929][ T9958] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1693'. [ 265.682215][ T9958] siw: device registration error -23 [ 266.147903][ T9975] lo speed is unknown, defaulting to 1000 [ 266.267912][ T4081] Bluetooth: hci1: command 0x0406 tx timeout [ 266.567334][T10003] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1706'. [ 266.571629][T10003] siw: device registration error -23 [ 266.655929][T10008] netlink: 'syz.8.1709': attribute type 12 has an invalid length. [ 266.671595][T10008] netlink: 'syz.8.1709': attribute type 29 has an invalid length. [ 266.673614][T10008] netlink: 148 bytes leftover after parsing attributes in process `syz.8.1709'. [ 267.482392][T10062] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1728'. [ 267.497311][T10062] siw: device registration error -23 [ 267.842699][T10081] loop8: detected capacity change from 0 to 128 [ 267.988257][T10081] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 268.201477][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 268.217323][T10102] IPVS: length: 89 != 24 [ 268.638038][T10134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1753'. [ 269.187271][T10180] netlink: 'syz.6.1767': attribute type 1 has an invalid length. [ 269.189370][T10180] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1767'. [ 269.266818][T10177] team0 (unregistering): Port device team_slave_0 removed [ 269.296416][T10177] team0 (unregistering): Port device team_slave_1 removed [ 269.729298][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1773'. [ 269.758396][T10203] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.863247][T10210] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 270.691384][T10266] loop3: detected capacity change from 0 to 128 [ 271.198489][T10266] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 271.361510][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 271.733366][T10282] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1793'. [ 271.804961][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 271.862155][T10291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1798'. [ 272.080528][T10306] device syz_tun entered promiscuous mode [ 272.198326][T10306] device batadv_slave_0 entered promiscuous mode [ 272.326200][ T4209] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 272.407880][T10319] loop9: detected capacity change from 0 to 128 [ 272.725453][T10319] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 273.305274][T10335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 274.178944][T10376] loop6: detected capacity change from 0 to 128 [ 274.759423][T10376] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 275.121871][T10390] 8021q: VLANs not supported on hsr0 [ 275.632049][T10422] netlink: 'syz.8.1839': attribute type 1 has an invalid length. [ 275.771276][T10433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1841'. [ 275.819129][T10422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 275.831747][T10431] lo speed is unknown, defaulting to 1000 [ 275.833302][T10431] lo speed is unknown, defaulting to 1000 [ 275.834973][T10431] lo speed is unknown, defaulting to 1000 [ 275.863661][T10431] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.923831][T10430] bond1: (slave ip6gretap1): making interface the new active one [ 275.936642][T10430] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 275.963993][ T292] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 275.967383][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1842'. [ 275.989710][T10431] lo speed is unknown, defaulting to 1000 [ 275.991912][T10431] lo speed is unknown, defaulting to 1000 [ 275.994309][T10431] lo speed is unknown, defaulting to 1000 [ 275.996319][T10431] lo speed is unknown, defaulting to 1000 [ 276.008362][T10431] lo speed is unknown, defaulting to 1000 [ 276.072413][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1845'. [ 277.164599][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1868'. [ 277.170399][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 277.172311][T10507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.194308][T10507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 277.196422][T10507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.333637][T10509] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.897485][T10546] lo speed is unknown, defaulting to 1000 [ 277.918277][T10546] lo speed is unknown, defaulting to 1000 [ 277.936292][T10531] DRBG: could not allocate digest TFM handle: hmac(sha384) [ 278.111282][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1881'. [ 278.497822][T10586] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1891'. [ 278.536782][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1892'. [ 278.584382][T10587] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1892'. [ 279.309422][T10624] loop9: detected capacity change from 0 to 128 [ 279.917321][T10624] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.470365][T10663] xt_TPROXY: Can be used only with -p tcp or -p udp [ 280.474100][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 282.163341][T10738] lo speed is unknown, defaulting to 1000 [ 282.164982][T10738] lo speed is unknown, defaulting to 1000 [ 282.166692][T10738] lo speed is unknown, defaulting to 1000 [ 282.185771][T10738] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 282.338584][T10741] lo speed is unknown, defaulting to 1000 [ 282.346192][T10741] lo speed is unknown, defaulting to 1000 [ 282.372408][T10738] lo speed is unknown, defaulting to 1000 [ 282.374351][T10738] lo speed is unknown, defaulting to 1000 [ 282.376311][T10738] lo speed is unknown, defaulting to 1000 [ 282.409795][T10738] lo speed is unknown, defaulting to 1000 [ 282.411735][T10738] lo speed is unknown, defaulting to 1000 [ 283.587799][T10804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1952'. [ 284.204480][T10846] netlink: 'syz.9.1964': attribute type 13 has an invalid length. [ 284.365396][T10854] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1966'. [ 284.490848][T10858] bridge0: port 4(erspan0) entered blocking state [ 284.497099][T10858] bridge0: port 4(erspan0) entered disabled state [ 284.515080][T10858] device erspan0 entered promiscuous mode [ 284.521148][T10858] bridge0: port 4(erspan0) entered blocking state [ 284.522938][T10858] bridge0: port 4(erspan0) entered forwarding state [ 284.679866][T10864] device erspan0 left promiscuous mode [ 284.681387][T10864] bridge0: port 4(erspan0) entered disabled state [ 285.536074][T10928] bridge0: port 3(erspan0) entered blocking state [ 285.546379][T10928] bridge0: port 3(erspan0) entered disabled state [ 285.565443][T10928] device erspan0 entered promiscuous mode [ 285.568497][T10928] bridge0: port 3(erspan0) entered blocking state [ 285.570000][T10928] bridge0: port 3(erspan0) entered forwarding state [ 285.602623][T10928] device erspan0 left promiscuous mode [ 285.604236][T10928] bridge0: port 3(erspan0) entered disabled state [ 286.148528][T10960] loop9: detected capacity change from 0 to 128 [ 286.802918][T10960] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 287.201781][T10985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2009'. [ 287.244243][T10989] bridge0: port 3(erspan0) entered blocking state [ 287.264154][T10989] bridge0: port 3(erspan0) entered disabled state [ 287.278381][T10989] device erspan0 entered promiscuous mode [ 287.280241][T10989] bridge0: port 3(erspan0) entered blocking state [ 287.281806][T10989] bridge0: port 3(erspan0) entered forwarding state [ 287.325245][T10989] device erspan0 left promiscuous mode [ 287.339150][T10989] bridge0: port 3(erspan0) entered disabled state [ 288.241933][T11036] loop6: detected capacity change from 0 to 128 [ 288.880753][T11036] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.066438][T11049] netlink: 476 bytes leftover after parsing attributes in process `syz.3.2023'. [ 289.082671][T11049] device bond_slave_0 entered promiscuous mode [ 289.084614][T11049] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2023'. [ 289.086792][T11049] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 289.357273][T11062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2028'. [ 289.663982][T11094] netlink: 476 bytes leftover after parsing attributes in process `syz.8.2041'. [ 289.671680][T11094] device bond_slave_0 entered promiscuous mode [ 289.678839][T11094] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2041'. [ 289.688923][T11094] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 290.275369][T11134] bridge0: port 3(erspan0) entered blocking state [ 290.280621][T11134] bridge0: port 3(erspan0) entered disabled state [ 290.284288][T11134] device erspan0 entered promiscuous mode [ 290.286250][T11134] bridge0: port 3(erspan0) entered blocking state [ 290.287934][T11134] bridge0: port 3(erspan0) entered forwarding state [ 290.305623][T11138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2058'. [ 290.317068][T11134] device erspan0 left promiscuous mode [ 290.330811][T11134] bridge0: port 3(erspan0) entered disabled state [ 290.346875][T11142] loop6: detected capacity change from 0 to 128 [ 290.414418][T11142] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.093393][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2072'. [ 291.228538][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2074'. [ 291.401399][T11196] xt_CT: You must specify a L4 protocol and not use inversions on it [ 291.703493][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2088'. [ 291.769580][T11222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2090'. [ 291.832845][T11230] netlink: 'syz.9.2091': attribute type 8 has an invalid length. [ 292.087109][ T1812] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.089749][ T1812] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.781961][T11293] xt_hashlimit: size too large, truncated to 1048576 [ 293.313012][T11311] device bond_slave_0 entered promiscuous mode [ 293.314958][T11311] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 293.591369][T11317] loop0: detected capacity change from 0 to 128 [ 293.724621][T11317] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 294.156724][T11277] ODEBUG: Out of memory. ODEBUG disabled [ 294.701029][T11360] netlink: 'syz.8.2140': attribute type 3 has an invalid length. [ 294.703014][T11360] __nla_validate_parse: 4 callbacks suppressed [ 294.703027][T11360] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2140'. [ 295.410677][T11377] lo speed is unknown, defaulting to 1000 [ 295.412844][T11377] lo speed is unknown, defaulting to 1000 [ 295.470215][T11380] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2147'. [ 295.689375][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2149'. [ 295.699206][T11387] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2149'. [ 296.468138][T11405] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2157'. [ 296.871609][T11420] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2165'. [ 297.265654][T11444] loop8: detected capacity change from 0 to 128 [ 297.470609][T11444] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 297.547582][ T4081] Bluetooth: hci3: command 0x0401 tx timeout [ 297.754083][T11463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2183'. [ 298.138718][T11468] netlink: 'syz.6.2185': attribute type 4 has an invalid length. [ 298.194180][ T4081] lo speed is unknown, defaulting to 1000 [ 298.199755][T11468] netlink: 'syz.6.2185': attribute type 4 has an invalid length. [ 298.225233][ T25] lo speed is unknown, defaulting to 1000 [ 298.408382][T11471] lo speed is unknown, defaulting to 1000 [ 298.413778][T11471] lo speed is unknown, defaulting to 1000 [ 299.193341][T11489] xt_recent: hitcount (4294967294) is larger than allowed maximum (255) [ 299.246812][T11491] netlink: 'syz.6.2192': attribute type 12 has an invalid length. [ 299.296916][T11491] netlink: 'syz.6.2192': attribute type 29 has an invalid length. [ 299.307598][T11491] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2192'. [ 299.332447][T11491] netlink: 'syz.6.2192': attribute type 1 has an invalid length. [ 299.334586][T11491] netlink: 'syz.6.2192': attribute type 2 has an invalid length. [ 299.336620][T11491] netlink: 39 bytes leftover after parsing attributes in process `syz.6.2192'. [ 299.531109][T11502] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2198'. [ 299.830713][T11519] netlink: 'syz.8.2204': attribute type 4 has an invalid length. [ 299.901226][T11524] netlink: 'syz.8.2204': attribute type 4 has an invalid length. [ 300.503072][T11545] netlink: 'syz.8.2211': attribute type 1 has an invalid length. [ 300.608703][T11550] __nla_validate_parse: 1 callbacks suppressed [ 300.608720][T11550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 300.821086][T11557] lo speed is unknown, defaulting to 1000 [ 300.824535][T11557] lo speed is unknown, defaulting to 1000 [ 300.892368][T11559] bridge0: port 4(erspan0) entered blocking state [ 300.895466][T11559] bridge0: port 4(erspan0) entered disabled state [ 300.899411][T11559] device erspan0 entered promiscuous mode [ 300.905855][T11559] bridge0: port 4(erspan0) entered blocking state [ 300.907598][T11559] bridge0: port 4(erspan0) entered forwarding state [ 300.923586][T11559] device erspan0 left promiscuous mode [ 300.925215][T11559] bridge0: port 4(erspan0) entered disabled state [ 300.959786][T11557] __sock_release: fasync list not empty! [ 301.021655][T11560] netlink: 312 bytes leftover after parsing attributes in process `syz.8.2216'. [ 301.046697][T11560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2216'. [ 301.309015][ C0] ================================================================== [ 301.311477][ C0] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa8/0x7b8 [ 301.313363][ C0] Read of size 8 at addr ffff0000cc432a00 by task kworker/u4:9/4205 [ 301.315348][ C0] [ 301.315912][ C0] CPU: 0 PID: 4205 Comm: kworker/u4:9 Not tainted 5.15.180-syzkaller #0 [ 301.318190][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.320807][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 301.322523][ C0] Call trace: [ 301.323368][ C0] dump_backtrace+0x0/0x530 [ 301.324557][ C0] show_stack+0x2c/0x3c [ 301.325689][ C0] dump_stack_lvl+0x108/0x170 [ 301.326892][ C0] print_address_description+0x7c/0x3f0 [ 301.328281][ C0] kasan_report+0x174/0x1e4 [ 301.329464][ C0] __asan_report_load8_noabort+0x44/0x50 [ 301.330989][ C0] dev_map_generic_redirect+0xa8/0x7b8 [ 301.332546][ C0] xdp_do_generic_redirect+0x3fc/0xe30 [ 301.333935][ C0] do_xdp_generic+0x3b8/0x8a8 [ 301.335094][ C0] __netif_receive_skb_core+0x15c4/0x3420 [ 301.336588][ C0] __netif_receive_skb+0x114/0x400 [ 301.337925][ C0] process_backlog+0x3ec/0x7e0 [ 301.339182][ C0] __napi_poll+0xb4/0x624 [ 301.340274][ C0] net_rx_action+0x500/0xc10 [ 301.341461][ C0] handle_softirqs+0x384/0xdbc [ 301.342678][ C0] do_softirq+0xfc/0x1b0 [ 301.343714][ C0] __local_bh_enable_ip+0x298/0x470 [ 301.345070][ C0] _raw_read_unlock_bh+0xf8/0x180 [ 301.346420][ C0] wg_socket_send_skb_to_peer+0x158/0x1a8 [ 301.347892][ C0] wg_socket_send_buffer_to_peer+0xec/0x144 [ 301.349533][ C0] wg_packet_handshake_send_worker+0x1a8/0x2a4 [ 301.351160][ C0] process_one_work+0x790/0x11b8 [ 301.352473][ C0] worker_thread+0x910/0x1034 [ 301.353714][ C0] kthread+0x37c/0x45c [ 301.354765][ C0] ret_from_fork+0x10/0x20 [ 301.355907][ C0] [ 301.356552][ C0] Allocated by task 11506: [ 301.357789][ C0] ____kasan_kmalloc+0xbc/0xfc [ 301.359073][ C0] __kasan_kmalloc+0x10/0x1c [ 301.360178][ C0] __kmalloc_node+0x2c0/0x5b8 [ 301.361429][ C0] bpf_map_kmalloc_node+0x22c/0x5c0 [ 301.362712][ C0] __dev_map_alloc_node+0x70/0x438 [ 301.364029][ C0] dev_map_update_elem+0x190/0x35c [ 301.365625][ C0] bpf_map_update_value+0x6a8/0x8fc [ 301.366927][ C0] map_update_elem+0x52c/0x6a0 [ 301.368232][ C0] __sys_bpf+0x2a4/0x610 [ 301.369413][ C0] __arm64_sys_bpf+0x80/0x98 [ 301.370613][ C0] invoke_syscall+0x98/0x2b8 [ 301.371796][ C0] el0_svc_common+0x138/0x258 [ 301.373102][ C0] do_el0_svc+0x58/0x14c [ 301.374158][ C0] el0_svc+0x7c/0x1f0 [ 301.375145][ C0] el0t_64_sync_handler+0x84/0xe4 [ 301.376429][ C0] el0t_64_sync+0x1a0/0x1a4 [ 301.377557][ C0] [ 301.378122][ C0] Freed by task 5787: [ 301.379155][ C0] kasan_set_track+0x4c/0x84 [ 301.380353][ C0] kasan_set_free_info+0x28/0x4c [ 301.381635][ C0] ____kasan_slab_free+0x118/0x164 [ 301.382951][ C0] __kasan_slab_free+0x18/0x28 [ 301.384135][ C0] slab_free_freelist_hook+0x128/0x1ec [ 301.385528][ C0] kfree+0x178/0x410 [ 301.386536][ C0] dev_map_free+0x4b0/0x608 [ 301.387707][ C0] bpf_map_free_deferred+0x2cc/0x430 [ 301.389074][ C0] process_one_work+0x790/0x11b8 [ 301.390449][ C0] worker_thread+0x910/0x1034 [ 301.391618][ C0] kthread+0x37c/0x45c [ 301.392682][ C0] ret_from_fork+0x10/0x20 [ 301.393788][ C0] [ 301.394404][ C0] The buggy address belongs to the object at ffff0000cc432a00 [ 301.394404][ C0] which belongs to the cache kmalloc-cg-128 of size 128 [ 301.398197][ C0] The buggy address is located 0 bytes inside of [ 301.398197][ C0] 128-byte region [ffff0000cc432a00, ffff0000cc432a80) [ 301.401534][ C0] The buggy address belongs to the page: [ 301.402979][ C0] page:00000000712b1e6c refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c432 [ 301.405485][ C0] memcg:ffff0000e8d28401 [ 301.406608][ C0] flags: 0x5ffc00000000200(slab|node=0|zone=2|lastcpupid=0x7ff) [ 301.408537][ C0] raw: 05ffc00000000200 fffffc0003439d80 0000000a0000000a ffff0000c0002d80 [ 301.410667][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff ffff0000e8d28401 [ 301.412799][ C0] page dumped because: kasan: bad access detected [ 301.414465][ C0] [ 301.415038][ C0] Memory state around the buggy address: [ 301.416479][ C0] ffff0000cc432900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 301.418518][ C0] ffff0000cc432980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 301.420663][ C0] >ffff0000cc432a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 301.422762][ C0] ^ [ 301.423772][ C0] ffff0000cc432a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 301.425914][ C0] ffff0000cc432b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc [ 301.428049][ C0] ================================================================== [ 301.430052][ C0] Disabling lock debugging due to kernel taint [ 301.431642][ C0] vkms_vblank_simulate: vblank timer overrun