last executing test programs: 3m7.33304837s ago: executing program 32 (id=52): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x20, 0x8}, 0xc) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x1}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m16.759939372s ago: executing program 4 (id=374): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000a00)={0x0, 0x80000001, 0x82}) unshare(0x6a040000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030500008000ffdbdf25020000fd", @ANYRES32=r5], 0x20}, 0x1, 0x0, 0x0, 0x8090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e22, @broadcast}}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000e00)={r1, 0x4, 0x1000, 0x1}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)=0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000600)={r8}, &(0x7f00000006c0)=0x8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000300)={[], [{@euid_gt={'euid>', r6}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '#}\xea)\xd4\x1d,#\xe9\x92\x04\xf7=|t\xa2\xad\xbb\x97\xf7\xe5x[#J\xe7\x88jE4\xaa\x1d@\x10\t\x18\"\xcd\x00\xfc\xd1\x986\xc1\xddy\x14\xa3\x93\x99\x10\xbd\xcf\n\xc5\xbe\x9a\x14'}}, {@pcr={'pcr', 0x3d, 0x3d}}, {@smackfstransmute}, {@seclabel}]}, 0x1, 0x500, &(0x7f0000000500)="$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") r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r9, 0x89f0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d059, 0x0, 0x1, 0x0, &(0x7f0000000140)) rmdir(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m15.75246903s ago: executing program 4 (id=379): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000069"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa6}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x0, 0x0}, 0x10) 2m15.377807062s ago: executing program 4 (id=382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@ccm_128={{0x304}, "1f5fe89b3e65d0fd", "313a19ff4c7d278bf34b54168b154d15", "1e5a7ddb", "2fd978cbd6bf3b5d"}, 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x4, 0x0, 0x0) 2m15.036618552s ago: executing program 4 (id=384): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 2m14.19155868s ago: executing program 4 (id=391): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r5, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) 2m12.253265811s ago: executing program 4 (id=401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x5, 0x3}, 0xe) 2m11.683308634s ago: executing program 33 (id=401): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x5, 0x3}, 0xe) 1m55.060962377s ago: executing program 5 (id=467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)="6459df536e39", 0x6, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) getxattr(0x0, &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) shutdown(r0, 0x1) 1m52.369707672s ago: executing program 5 (id=476): bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 1m52.059992999s ago: executing program 5 (id=477): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x20050800) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, 0x0, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) 1m50.678706609s ago: executing program 5 (id=481): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 1m49.874333885s ago: executing program 5 (id=487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYBLOB="040027"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000e00), r1) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xff}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x40814) 1m47.877351489s ago: executing program 5 (id=495): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x8c}}, 0x0) 1m47.501042591s ago: executing program 34 (id=495): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x44, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x4}]}], {0x14}}, 0x8c}}, 0x0) 1m1.558301307s ago: executing program 2 (id=723): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 1m1.285622173s ago: executing program 2 (id=725): io_setup(0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x0, 0x0, @loopback}}}}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1m0.99332243s ago: executing program 2 (id=726): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m0.560936755s ago: executing program 2 (id=728): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 59.922267721s ago: executing program 2 (id=730): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xaa, &(0x7f0000000140)=""/170, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socketpair(0x28, 0x2, 0x28, &(0x7f0000001400)) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x14, r3, 0x7d243a6ea807936d, 0x70bd2c, 0x25dfdbfa}, 0x14}, 0x1, 0x0, 0x0, 0x815}, 0x40110) 59.005958814s ago: executing program 6 (id=736): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 58.782116487s ago: executing program 6 (id=738): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 58.498882093s ago: executing program 6 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x480f0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 58.095332206s ago: executing program 6 (id=741): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, 0xffffffffffffffff, 0x9000) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8800000) r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 57.575340276s ago: executing program 6 (id=742): getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000100)=0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000008000000080000000080000000550000003000006040000000f00eb00010000000a000000030000000a0000000001000000000000000000030000000001000000030000007f0000000b0000000000000e06000000010000000000000000000003000000000100000002000000050000000600000000000007"], 0x0, 0xa0, 0x0, 0x1, 0x7, 0x10000}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf25070000", @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) 57.365466388s ago: executing program 2 (id=743): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x1, 0x100, "f83beb0900000055d91c5d00f11c7fffffffffffffff000400080000e9feff00", 0x32315258}) 56.750592143s ago: executing program 35 (id=743): r0 = syz_open_dev$vim2m(0x0, 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x44, 0x1, 0x100, "f83beb0900000055d91c5d00f11c7fffffffffffffff000400080000e9feff00", 0x32315258}) 56.2811802s ago: executing program 6 (id=748): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0xbc, 0x85, 0xb, 0x7ffc0001}]}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3, 0x2036}, 0x8) 55.309994746s ago: executing program 36 (id=748): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0xbc, 0x85, 0xb, 0x7ffc0001}]}) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000140)) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r3, 0x2036}, 0x8) 35.443848036s ago: executing program 0 (id=800): sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x1c}}, 0x840) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e0000140002800600020030000000080004"], 0x44}}, 0x0) 35.098427965s ago: executing program 0 (id=801): r0 = add_key(&(0x7f0000000900)='cifs.spnego\x00', &(0x7f0000000940)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_security(0x11, r0, &(0x7f00000010c0)=""/23, 0x17) 34.786487514s ago: executing program 0 (id=804): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[@ANYBLOB="2a01000020000040b7080000000000000301090292000301"], 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(0xffffffffffffffff, 0xc0805841, &(0x7f0000000240)={0x9, 0x3, 0x4, 0x0, 0x9}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x3, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) sched_setattr(0x0, &(0x7f00000004c0)={0x38, 0x0, 0x55, 0x80, 0x0, 0xb49, 0x200000000002, 0x7, 0x1a, 0xfffffffa}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40040) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 31.52572938s ago: executing program 0 (id=818): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(0x0, 0x66842, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x5a00, 0x0, 0x3) 30.961436343s ago: executing program 0 (id=819): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) symlink(&(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x7fffffff, 0x269a064, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffec}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, 0x0, 0x200000, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006200)="277922c31d68964cc03e9e8592c222e18acc0f5ae6346cd023fcf98cd237b648447e00e281207a7038c3997e69161f989366d7738c6a807c2726adf695efe754229a48c802d694690baf032cd88751b51245ac2ae3cb87e2da3db338e806c84063ea8ee43acea049545630a1692335e4d9ad11c42dc95224386146bcbfa6e0e32934404b4254075accf64cfd5bbc23a190ca981970738abb255a1c05a7a7261f683d10f4794ae174671d216a657598331b469a73bd985469b03b8545b5f7d48a08205ae92d6abe68819fa23e161b654b2871e649b19bd2b7d79838f3d80fc506560b33c20a6cc20877bf2eefcdaab788d15ce7e9634c272973df277427cb913d08aa0b235b1a797617e798a18c4b555c5835e17114c49a57f23f0d8f0a22e3522e5a8e9e788bcdf48c08862177ce92e00a606211b9302639bb851867acdbd7920b47618e9994a6fec653c692d733d5f6fa1305bf9f2582a3ca12fb440550ee9614932fb67d04092a8171c800c6796b44bf78eaa7506cb5f09c3e63b0e80738e09c767438f60fb1a3cc3e8c57caa6c5058d5e1c64903f9b81a90bd0221bce6d209c8123dc4381412da223ec55d193a8e5b8cbe69503b6b3b6d44ce168e48d794f2c655486ae999750f123814a3ea830cc0e9c71ce5b260414a44ffbed56791bac519504f3745012cac2384507df2cd1ff1f0c693b0a0f7aab727e5b1856b2d9b7ec809a60b96a063967389f5ff96958226292eff653ad449bda3902c1683aafa81b0c689864f3bf3929abddc567acdbd0af6154184f55aa5b86b94a035c98aa3565dcb3394fed13e64800d3917e69b8fb7a9affa2ab0ed3b6d21ee31826979efc6f1cd62327357143e268988d072732786223ed15eae9d42c267afd9b377cc2b0c3bf5b6bc8cbdceeb336bccdc708a0cc4773e900a2778bd8c97a342147b1fae79fd6271e3b25a9a630ad38a9aa6d84806549ac07a8ca631b6b565cd45b9ad30cd047af2063a4ff070c04ee4b8b1a7152fd3d29825000bed0b237df40f01e8b59014fe8b4236381d10bf04d57aa7a1aac76e9af7466fe0b3724df3decae064c3a3d3000e285ec83e1c893e9c08eefe5f4fd86f457f90ed4b675ec7d5457cef36043bd7c1c611115c63a7d7819dcce86d71a0255193436aa96d2619fb2d52db332dbe3245f84125e221ab5a918ad13217b914cc61685761686c56f74fa5c10a6c1a586bd5abc2585ea9d6ac070647cf3f631508debe7c28d6482f0f8a2afea7a61d2f0c166a1b7dd6135ac9c7469c95ccd1025d0149cee049873cb9d69a89e9bab13a80183944876522c8f0c0c551ca7f4faa495c643bec973b92bf13dfa9803981394ff290cb1f4e48d3356224ec7df9284baef008c19949c4570b4d753c4fa0dc97175209102a38a0f3e8fa9e6b52319b81db379f4bee52bdcdc136825179ab72d9ac6f3f5a72cae5b11340f8056eb050523c5049938a2572eaafbce4e073e115a520da2f1905ec6daf637bbfc879b02fdb58bd8426526b916366bce92f87ad76d1ef5ca6946006ccf17687fdfa62cd23e441e2f6effbdd0a175ce00ca86cb0dfc2cad7f818caf7dbf64ce6e63b5320954957c100701c06024a02c28ab13250f029ae8f2dea7fcb60f5cb65f4f8bba2ac3270811bb4c12641b7fb0f80d14ffc2a9c45f2001b0d54c98465d1cd2619a1546134bad9268ff48710fa833a3f3191711d1c7bdfcb502acdc51b9f9642c1066bb01a9e912e0de1b5f8acf8d9e1177a252df26b7cb690747d2023d7cdff3904281b37218981ddb6d044360d65be09dc2efdf3cef9f9d6416d81485bed6a997ff00daa26fbd59c39705b7e590a95362bc4cb54329a89840af5c1cf587e8c05a3b4f83d45ea2b06110fdb93627da88e09c51e669ae3bc43632aa638d1549ada4f1c11d935cc9757e254c0c0417852be06a023f27a41bf1e086648a365cefaf7bc994f083a68d5643256a3cb9263c571576c6d0b1dd221dc7fbdd9cb908f631eb3f1158b41d28893ece18af0f8b8c03bd960de7868d231a6e2d19c4975d0c2f8f910f6fdae49618379bbc0d41ba2c7922409b036d08d217529cb3317f0caf97e94b679fbcaf808a1a859cd4f468e4df8ee3567c684ba1f04213c7fbff3857fbde87c722f4c3a6cf027b13706ce61b7a9fa4eb823607600e7007fc114fb5f303d5986785a680ad68101d41ca518056da41ab94ff03ae20b23e50cb5cd9345788e6e7773bb5d0423c35861f10f3484be3ce23adc4a46560463a704f8c631dddfea199ba045f5d6c20ef130fbeccb32de365d28c88108904f523d936801b846e7130e68dc843c0ddbe490f305f5884642dc1d51ba2937537ec1c1d1ba1f8b5add859132b52a8f44349d7de31486a4c017109595d07231d6329f50de6802eee32b9d6fcdb2b16f58ce1ea0fa2e7c462e4d73c8cbdbdef5c714696f6ff8b7ca46f5f8277d5181475099377763cdf5a2b20d5a6ece550919b567d412ae2523444f49f09510a5f8d2397b4545d9377f40d4d57be884b2643f6737b1c9ac2708d3e48b590e5b7362fc86f5f56e116a544f3a80c1ae66a2e42a335b015ed6ffbc3b6ad6740fdad3ee9168effce9ddb9ae97845cf2a38c79df3813a4a8408895d8dd33bdb254fd620dd3c833cb33fb3af63befd7ac09178f6f4fefbd136c727957ca25cc4e365ac2ef7cee2c88d29901c11c5d8d12d7c9bd1f1eb591d6da52b26e64144bf691059f001352598fd1ad651c9d23d8e74aaf99400e4b87a7c8141be5eb3f9a563cb76f163ec93e24e4219ea98b3191223d93b02d032e66d674e9ad844b3115fa0d07c41637db3b46b0133b9b1b8fc85d5494787f63692d18f5512f6e8515c0c14b844996db924954c59d9f1dec047b235163891edb13d05e16e212bd5003cdce8cdf7260bd90fab16d8a8032ab9b86bf62be8253e02e0c2fc0a1396b1f48a9258818626dec32d5035b1c16463a7953b4a977915898b07d1129699dbd341742357f25bbb6099503dc59878f544a84eda8011d10d273e4af343b051036556c1d31327161f76a2670cef78917915d37d9e707865b0dc1881201958856a50694ebfb8a4b850a234278ea48db61f6e322512e317d5fd55627c60084da63a6ea6d0df272faf59f26d05a88d8b400d728b975e78ef53867a68e2b6bb85c3356f062449f8b1a17ec2adf0307c98aef35da9e0d235bc730fb79a6acfd187a32b6e5f915598009bf07b398069afc19e7d42e9c2666572bf68b7d1e21aa232da07df107a1eae11424f867a9228158456e58db9d87969a68ae7837c20a5a2166324a89a193be2cb43fc9a4896583839e96dc2d2c9317e3dd217c234406f7a1704f5a958469f8c55f7073920405b2ea60e8ee9209932aba2199eb1d4146cd7870805348c5ddebf374700d6969ea1d45a5695f70e63dbba7d5659c2ac527cf95f735530c23abd9c1db64ec66b174fbef5f26fe3963879f77f42abd1dd7eac962deb43f2aa0d4b61ba37b23ad99e30a0bcfd0af86c219170a025a357ed3e3b70b520bcb0cf507ac4241e4b545d306fdf4ca2d4fb48d751c6948392691ccb5dd5a8be9534a2684ae38fac7445dc3367e9a8d96cfdaced050092959cd434b4fcebf180fc313c8f2631dc6323544ab3315cbc1d72baf9239ef7ea1412816de7fa77b05c9a999e197949e5e8ee6536318ca7d5cf15dda41fee8429533a332c1a25ae4b2fd1bf1ededee9c3d740d1e6c98cc85309e3b6f10a7cb5c5e6e4b8772621ca50d1e38f25fd82ffa3c92578c0802b457f8b33bfecf75309a85d8603b7599aabe8f1078a81a0bb5d40a4341cf0fc882ebac3d7fdc6fd8455153340dacd3c2ae558d0c6b057b98f6b533ba245221a43440f222feb40848e5c33c75ef084cce1e1f1c06261ba4035b987c09b46bff92db4022e358f2d6dc0f229d4fa63d57d49c865b7f33e490790f67fe426c691aa6feb8bc72dc759b44b61b88c02d6c23d3bb590e24813ce8c1534afeb8709d9dd41872bfef287c89b07158463de8b37016fb71ff18d78de431c4f9869d6c0719d649325a3ba437a714f36bdf59f88cf0602134a003e746efab8ef201acf73b396c9e64cc971bb81844450a92b8f11b4006cbea25ae8f4300fb98df7146c5e4a9f3ca620355f9d679e66288a8b4da298662242a8a333cdd828d91f4da4f7ce991092d49455b3da53b31ff92f5866695d5f76a033af6d2f44658ad94c1c6c601a296bd0f3e6b9e64a89653285f2ed775a8ff2cb4d1557bc491f44c5a3349ef58e25a03c3787b770c596fab20fe08248993cf28c28575ff8caeb0adea9789b667b253c3ebbd49a8977c2ff0f382bb604453d419cd6cfbad7d5a41605996bc6db74f2ddf8b29bdbb4355ffdb65a53437548154df7a8e8aec1d7435f2b33d0b83bbca7e1bb59f4ecd5502f0ab0d32bd2f38bcf730d51bbd85cacc455dee2313b7cbc37efabecb7fdeb6273fa4a84bcee0427b081ba6649faae4aa8b521b4cc80dac5e65c28dc1514e218cf06a3a10a96da464517ec03bbcefdb7e1e84c1178f083d3240df711bd80d7edc7ad037387d824e9bfbedd036615d2b8329de3d1702a4c33e928caa916665e39c01a50c030d4e3873cf3bba2d675dfe3cc8909fcaa6aaef885d4725680d544b39d29ed232a37554e29d1882d3f12391181f33b5744fd7344216aad50005525f54e401f11e95268a2a50a940f8184f142062d524bdb70d91f898251bf06bafb5c630049cdf85c4ba756d4cfb814fc95f56a188476f699026e76ca4f26dd78dc2f983589002e348db9056f46734c3235dce0268995f9f2649dfbbbfed57e823211f7260e6be507fdb9f7ec808e34cacc7777a8a9350cc5c8e16938adb959d1c34951be3a849357b7db349d7c19698ef325341f9e0c78ca0777abd83c90bdff486f0617a541b001c089d63758f85032efd2a5b6cd1d42fb8bbab3a50ba775229756fd83460f6181de4d9fa8cb24920b966df24e12652d8f1f83c3e214f10174dd7e49f41494494c03151ac77d16894ead6c8dbd76921af9d065e1fd66dee01966ec317b2394bdad5ad3bbc19d5cbd2f998a80288c3c7d4a6d920e76fd7ac967ce7ba839b3443852ca681154cf6617c2041aa129a47e6beeeb7148920b577085c22bef1c2865f93e323e6103f3a685d542c73976df029b94afb3f5442a1a0dd5a9f8dbef5eb54cfe37a2df9891ce8f5658d728fcc07932c07cf097f09f1b69e9002b742e03fd78820ede2e60e095681aa906a97df20a3cce135fbdf0f770063ede222fe5f2cadf6b55d7eab829f86919ab0dc4e4fad77c2cbdf87981240ff63b9463ccf03b890c46233c3b6e0c54a1236c3f0c1e3812903b47c4aac784e0397423667396f01cfb07d6649ab0e5d0c0ff2bbe6795068d85cd1f282212d93b97613c75199130fe6a3ee28f24be01cdf4b2d2988a144c93be0ae043fb856bb4c21b695aa5d1e9bd1161d1a986c919d4efa84a9b04b1355dafe64a503d84ab4f3b5b76a1438e4cceb5c03d1442d1bf4a69a996431f2b736c626d8354a90e53f3fbaacb91075887c854043755bd8954ab9fff18b0262e3b3925251dc124305797888bb2bbd872c9b8d57d68d2c467a8b318ffde6a44f9a5f9967bf184a97d86be0e4449413c327d203fca8719ce046343a33c1bbe48b97becbc44095192e98da87a9b2ba234d250dfdf7ae6b5e5f91058dac2b20c0b7525484fd5278c74e8276625646dbdfd47a2cb6a48177b6226e1ee6e2c9a588512a269e6037e813cd741a2cf096f32d60cd7b68e4657f5607b0a296d8633e12be7ae72f9f6f895352f6676ef8b09d01bd024ae159c5780ecc6aafebf59895ca9b736164c30e5958b9aba1b49cc27949019467fa9b3fb6518ba9a359ee9c7035eba2066c786261e11a9b0a064cf96c8be43bf3119bc403e16476b112395354cba94950512c29646ccbb031d126e7ac1e9d972738bf08d2e15f3976e5a8ca653e57cf035a6c0eeb064cfbe1839da2bce876d5e9e37c9b952879c240c94510c82b71b3419b5ee7d7d5ef81f71194d34f6ada76ec8eaf4e6e9e924b71dffd273539ff44c82a05b6a7ea584157941daed273a0e739eca5db356ed547e9080ce6b163bef52df9a7ea7d56c5997e72d4c4fca3e77dc82d53cda693a66cfaabc7a163417d1e454e34c3ed177848b006501e900d16770bbb91d3234034284079a5bca16ee53e3b4e95c61014771a7e372e3bffdf399d4311d22957f46706b7b1a748b8e2a96a6cc4dc9db1e77f1f53196da5ee1948eb88aa5aa154add1376a453366820dd0bd77d3bfa003bc481fb2e2d8defda1da351a667e46b1c0fe58ff3c65d097f731f36225ad641cbb3c043d3cad02eeae1314ba5f6e4d53182241a28c2d01e4af9fad8c10bba1e6361db8f20b65fe214db3fe3891ded443a06b3a4be7132fd5a24e9e094ed08b50b1941bc40a9b18e4bc569ad22ff082e2ee54e382e791f443121df080a1abce25cd474128dd4ca10a749b80f91a9229875d9d09d3a24480a9883b96499c6df8d6d53c80f4a46e71d4b0767b1c3ceca0223cb87dc65c2180df575f7b0c090e1aaa61d2ba8aa6c0719c75d911e4dfc00d8c328295f150f0d3b450f9503bb359ca4d15788133a848aa7629b014d3413a4bf3b9a821b63b7cabc8ac84301b2819e3f4b7a4389652f5d0683f101b9ec1a937aec026e80bb88b6e9989253ba9dd64c79f7b7ca00d8c0edf29998ba9fe0d5563c59854df5e2bc92d38ca40298132b1c02e7da32c57ef85898dc8eb92cf17e4cf834aaccecb3b5ecac9da87044f64cb43310f50ad0b72debf3e733975c6c857b37cbfeb1b016cd4f0573c8b69e54e3eeb893fea4677109a4eecc9e7f7e3fd3d40e69f9f880a6dee14dc7c27ed2c57f269ff66ef841b787583fb83ff2814e8eacc877910be60e1db93bbc3f53e9511f3948a8a8e0011e40b03f4804e8967b1e443797fb9cbb2978d71e54b6af71b9cca3d6441dbf108c625ed779bcec18d9f70f06df382732d0b49bbebe347f563081527636c025828065a1ca8ef239febacfb3d2438efe4b23c1f973f5d7d4b5a3497b94c25ea951f29e48b3dd326685d8c06bccc06822451b4d4c7b1c2f3e86eda9b175b34b7b7e8cbc1b73681b5d8c3ebd4167dffa50d718b5607975e8653767eb7e87bcb6a6fb1940a4c6ca41f916acdab7d143f685fe9714366b66076abab743c646ea8c42847ae6fb3ae7a5145b9438b9203bb818cd294127efe7c776418afaf237704488193706c1f52807a608f0b2c361a6aa13b7b2e985b364a11f876f5644b7e2b84d4b90c0ab050126ec76e9594e682ef6e00f7a3e85e260280cf2b03700a00b0c0d2990f3897f670dc6401adb6419af14bafa35d56cf65b332086deb8857d59a7487179b7d2e6c525e54324fb837541be9d8b459872964086a3f98f9b795aef6e37a8b72bdbc1d087f622b2a4213fbcebbdbe6000da8dc3733522ba74653d23487c5dcaa5f4af161e7c73999168ed0f3566de365778a63cab1c100ddcfd8de12383b60676bce46a76a25251fb666b892b366183d02a3d591dfb97edf854af890ef65ebe8506d00420a64a900e7f20cc378224410cba88dee93e2787b13aa0fb6d7d97c582da047da1f367bfd6f226e13d303bce23b35e9d994c9d54a4e6d457b07bcae49edd6de6fcfe8b0ceb8d0fb693686319dfc61fceb7c5405ad812e266d35e51181e2c5180e0a64cc685466999048db40771405142e5e08cc0417a5b87a85672828d1425354db56f148b81fc0e648e578e33f38f26190f36635e432c1e21bfbbcbf5d8bb9b291d1e18d3d311558b2a60218f492f7880f8afee557a665d7cfc4a20bfd75449af8b0f19ca7b45764a7a4c116564b3e39674adf5eb079fad35b8e743d822079875aad7dfc1ae401bdf6ea77700e9b2bb3e2c459ccd8f28c9337c2900cb84076fc0a3d45858c51417ab5412ac0a00230043a793f44183326b47b60fe15c7f22a43c767ce5c8181a9a4c44964d26fc50ece3d85b533e5eafdd87384a7c73ea7da097b0f8770b7629caddaf12de1b0a447451b6b6ced331789bf917e24a1519aec5e2125a7913f84d9a7fa088933f0e1418f6223146b8bcb6ae221ec5bbc8666958e9edd03e83a320059b5f095b074078c755d524c6584363b55bb01e183a39f4b5138ff890b1c67222fe303af951d839e3a71cce561874df1e63b5ba53aa0fb13d3ec0138a526e297b1876311f8db632876a3669c79f47d4edbebcf403e44b29d8c8d999a87961485e4ac0fd7fb66f638d3b6f3973591b9eaf528726d352c2ba39b160deeabd0d4c1387f1dd29db58477aa5e25e48be96e95c93081eb7a1ba17417db741255d2f9368d226ed665a02bbcec14c8458e255f93d1e024b0c090a66c78f362956b9aae8db13e9bb1ba6b1439b9c2f9df0cbbbff37c03b6d97e5ec0f651b9c47c44df4fdaf1e1e58ee049df8970309990bb3b3f3bb1817660a6e438bb50b5ee10739df9df4df5eede96e270402a48641752558fad1806544a739742774c5e0e20f5468faf61dbfc9fede5a07ab7a54e9d0a2932d458050485925a2581a8af3e3539c820de4ab18bc2c94fb51961eca805405adf6d2d18af8be34b2eb803dda4af4499c56397b154b28f7737242e7ff3cf7eca57f6a1e068bf357710a8caa5a870c476b712ad9b2a9b51c823a3a32604f3464246ac90fd2129c012fa2f705b5fc28c3030c34d7df1a831c549dadb62bac2d2dfdddc821b96ac589619b3179982c45062270d9abc6794cf5bbc6a5f3d5d2f7e6e2741b573de9869fad21033e7088f6b6dfd2aa8bd3e7789809ec530caf908948806045652dffb56e2741340d7fef6223ce4e3f00ae648c07be306f8d67b22066e9bc252c2ada60d3ecc79cb29cfd4deb4e22d78092445fb27de9782b7cafb541cc04f30eff09de188c1fe9bed4cdfcc9f02eace508e488673abb4f3cbb399c0f5330300270d38492fd543a84ef0904f725b29131dae600ffac79415562a1a337ac51b1ea9a2d8561eb2885d2e08feebd5ec87e9b58ffdccb9155b2a978b0a0812789d4df930653c5cdc079fb45eba1a38e9f823f40f29f5234b70d2d6e7c9b7098f0caf0cbe3fecf452c66874fd3268f765b28881e382134eceed7a0b30c8661a4d1c361d299cc0eb0f57706d2bf900433f5fc0d3466c4dfe727c7e69cb8478c9f3c66b3a98b8932af4a6a0a4dd4eeb8dce9326c539459b82af5028192d7d1b81d0c6d424bba6e976e85c0a5b7bd6cca4ec4d00ee7458112178763cc4f8dc908ea86e313ee2a2a4cc1e204157240fdaa3f7c221166ee0d7c112422f357e081b0bdab46c34c1352ccf3efc7ae1ec3737bac470f8fef5942ac97fff8c1c6642e5cf2f733f776821f7527213f213772f60c31a26e71b4980cdf6896a3d9bcb13282eaa348cee4b2257f24abdfa58ccb4d238f0b34ec9bbf9a4f1764de447b9af04f9960700c38ff26523eb4f4e77863c538c6d26ce03bf4da7241881465c447c0cb0fe1792e141290923f79993228c053f1d2cfab750a87b64f48ea27d8550623b46ffc04ce1fd168f481de2d7ce2c57c4a98d31346ce2da7ddd05d0195b77b02eb95a50aecd6181dbb545b6f9badd7def429f7b833bc98b0295e13799577aea34e3f691b0df86ee42e331bc6d3554543a9db9512b6fb67c2333814efb4a6fb897e0a85e150111b5d34be4532a1e2ba044ffefdabf428d91b10fd627d2e613f295c38d274396a502d2e7334b295be14507d7fca78c53bd5359c5ea04cbbd1edb3c31025b06e7a93b198ff525478a6b87a22b1978951b26c19603a74e79bdf29daa153bf0ea5c0205298a352e9cd4d809115012b924bf338ffd3cc800a57891b9a728978bc060dc155c69ac65af5f4b3051e938d7cd22ef1de21e8f12311e3c8417b7ba7ae3f7c5d4d840fc2e56dc3f7a9b253f13b45c0bf249cab8e0b9bf97d36153b63c3df2acdfcec0a36e45069dd0a7947bd2e2925f74d0aaa2bfc22a8333883c6ec588acd89a6601fd61a4b5407b3d6443b765074bd4dcc56fa01638c9cd2e2e54249bc41849a727ea31f3d8994b365673df134e46bd3872ac1c7c479b472215c6b3ff7af96708996bd0735ebcd0a772008e05b7feb6344b6d6010222881d3b0462dd67f06522f77f63b5bffcce98f33f3337175d880fc2bd2145ac58286938cdf75bd56504390c500123065e53a487e9634ffefe03ccea989b13af327cdd840d342308ce12ad26f40ca242c97f28cc15f8e9709e19a0be5c3ea016a62735efc2dc5c6184547003cdc897afdd30ebd086af9449ff17ad64e9ee066107b3464313c4fe7344e6126351a07683ffbfb5fde7a743ffd3053f3e751e9ba89729a9195ac0ec423cb58a8c83435e24e2fb250b527162621284d8ef4b47ae6f5278bc22d248099622dcb1cfaa8376e32908e76bb6f88818e9e9616acf7f38d7b88b80490a7229c74d012627e3995c749b57a89b18149ffc8f60c0cf9c0f527fe48e1c49e13b15d8ca641a96607ca956486631f8d01618d9cfb2985b0c6e175bba854da27821834833babcce08efc328675c78673579ec83ae8015366ecd2f844587afdc595d9dba4f2c313f1f4a31d2c482fa5c4f86fa5ede03af0cc641c873307c4239f1c66764034fb29f10b1b746cf2149e7874b2e0ece9db4aa78b46377d9b7d13f8f9555546a51af50b6d3bc54e298c9486ba50ff1ac43b9dfe35bf7ff9f99313f76a3ad51c029cbda04cf13905b9c483ca6d7921a331ad7727ea65441ed2376a0b200b0dec05f09e8b231b47166fc2b0f140e8ec95646785d5db61f6f615f1d22cf7ad7b3e5e6d56ba0b3d0a2b4c205c707399c4ebe9b0cd053e0bc04a8d4da6f88719e6d8536c1dfa5b75ba78797656084588c8a951730709161df35f21a49163b1ad35a5d692517fe2baba0f06eebb5e0695668b40742e78fcfb33cdcd97ed4d375709c191e09abf376031a514ffecfe53ab81da5b270e816204d535ae1bdffbe2cedeac400fb2e707c01c442c86f816d28ddc4ec13116fc1555d0f6f385917dee220931307aa04ab9bbbc1ca7d3fbaa3df935457363c48ecc982efd0bf1dd77d92aede03596aaeeb859ec07fc866463860134c6b61e72719a4e6bab7918c0a190339176fa31ea43b15563171d9f3fd50474aaff66dc3f2d7b893bb25ad3f3ed41282d2b068aac9fed43a1e2e175d05ca1279abb824244a8a3c5c67cc5edc6088f37bd90449278f14b1059e00cde02ce0ead4b0f15d260d275326ad2043ba38a88eeeae6647e7daf30845083ed986ff0fc432bd43bfd4f4963702632c70b8f6270930a36adb2e2681eb444f93847597e8727100fcd9eea6bb46f5e7a96e98df0bfa128381bf48d164bf7695ba8bda8e15d706bc9d5d5b079d87d8bb4a8f6be7a3f171107fa9e11a5e847dc46ce7a08f90cb66ce14293d19d2db1f0048795a99184199e28089765b931d9b4771cb1c6c5d77f18de2b36631f0b3f9ce3dc201570c9fc4179c1d01f8d9d0ebb6db01781455471107b4234e96599e8c2fe943198393a59bb401a6be7ac5930c7554eff5", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x90, 0x0, 0x100000005, {0x1, 0x3, 0x34, 0x8, 0x8, 0xffff672b, {0x2, 0x7, 0x101, 0xfffd, 0xfffffffffdffffff, 0x8, 0x7, 0xce90cbb, 0xffffff4d, 0x1000, 0x0, r2, 0xee01, 0x7fff, 0xfff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.385444891s ago: executing program 0 (id=828): fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 28.080104248s ago: executing program 37 (id=828): fsopen(&(0x7f0000000140)='sysfs\x00', 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) semtimedop(0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x5, r0, &(0x7f0000000200), 0x0) 11.937702184s ago: executing program 3 (id=891): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r0 = io_uring_setup(0x4a86, &(0x7f0000000140)={0x0, 0x4178, 0x40, 0x2, 0x3d7}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) preadv(r2, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 11.835990091s ago: executing program 7 (id=892): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.413807786s ago: executing program 3 (id=896): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000003c0)={0xc80, 0x0, 0x2}, 0x18, 0x3) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000440)={0x0, r2}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000001cc0)={{0x12, 0x1, 0x310, 0xd3, 0xf7, 0xa3, 0x10, 0x40b, 0x6521, 0xdede, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x9, 0x9, 0xc0, 0x6, "", [{{0x9, 0x4, 0x7, 0x6, 0x2, 0xb1, 0xb0, 0xbd, 0x4, [], [{{0x9, 0x5, 0x6, 0xc, 0x0, 0x3, 0x0, 0xc}}, {{0x9, 0x5, 0xc, 0x1, 0x8, 0x4, 0x5, 0x8}}]}}]}}]}}, &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, 0x0, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x230140, 0x103) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000340)={0x100, r4}, 0x0) landlock_restrict_self(r1, 0x0) r5 = openat(r3, &(0x7f0000000040)='.\x00', 0x0, 0x1ce) r6 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, &(0x7f0000000000)={0x2108, r5}, 0x0) landlock_restrict_self(r5, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) r8 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff) keyctl$set_timeout(0xf, r8, 0x1c4e) read$FUSE(r7, &(0x7f0000001580)={0x2020}, 0x2020) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) 7.465197661s ago: executing program 8 (id=901): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) close_range(r1, 0xffffffffffffffff, 0x0) 6.78482875s ago: executing program 7 (id=903): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000001e40)=""/104, 0x68}], 0x1}, 0x2}], 0x1, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)='3', 0x1}, {&(0x7f0000000100)="127d589163267e4b0eda2e4186729989fdd2e24baac09a37b374a16c27a136d37e08121d3864d6559759e5bfba0a1c8b2c7d20228827e09902302ddc29760ee36ce64699", 0x44}], 0x2}}], 0x1, 0x20e8086) 6.481333868s ago: executing program 1 (id=904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00602fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 6.197270494s ago: executing program 3 (id=905): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x4, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) r0 = io_uring_setup(0x4a86, &(0x7f0000000140)={0x0, 0x4178, 0x40, 0x2, 0x3d7}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r1, 0x1000) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x7, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) 5.687881213s ago: executing program 7 (id=906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0xc, 0xb}, {0x8, 0x8}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff86ddee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.57926822s ago: executing program 8 (id=907): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) 5.185440222s ago: executing program 8 (id=910): syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 4.370070179s ago: executing program 9 (id=911): r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480), 0x0, 0xfffffffffffffffe) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x0, @mcast2, 0xffffff80}], 0x1c) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r1, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 4.223901177s ago: executing program 9 (id=912): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6d", 0x5}], 0x1}}], 0x1, 0x40) recvmmsg(r1, &(0x7f0000004140)=[{{&(0x7f0000000280)=@x25={0x9, @remote}, 0x80, 0x0}, 0x4e6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)=""/60, 0x3c}, 0x5}], 0x2, 0x22, 0x0) 3.229352654s ago: executing program 9 (id=913): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="80fd02000040", 0x6}], 0x1, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.43217896s ago: executing program 1 (id=914): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="0309", 0x2, 0x4044844, 0x0, 0x0) 2.380506723s ago: executing program 3 (id=915): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) preadv(0xffffffffffffffff, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) 2.313195937s ago: executing program 7 (id=916): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r2, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000180)={r2, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002e40)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') close_range(r1, 0xffffffffffffffff, 0x0) 2.197954163s ago: executing program 8 (id=917): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f0000002080)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r1, 0x0, 0x0, 0x5a00, 0x0, 0x3) 2.187415344s ago: executing program 1 (id=918): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.817444585s ago: executing program 1 (id=919): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xb01}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000180)=@x86={0x8, 0x9, 0x40, 0x0, 0xf2f, 0x40, 0x8, 0x3, 0x9, 0xf, 0x0, 0x5b, 0x0, 0x3ce, 0x7, 0x6, 0x9, 0x1c, 0x7, '\x00', 0xf7, 0x6}) 1.752177619s ago: executing program 9 (id=920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd27, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x6, 0x3ff, 0x10001}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x800) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, 0x0, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 1.703060432s ago: executing program 8 (id=921): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @private0={0xfc, 0x0, '\x00', 0x20}, 0x3}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000002240)='./file0\x00', 0x2, &(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x2c8, &(0x7f0000000780)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x2c, r3, 0xa11, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004800}, 0x24048044) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) getsockopt$inet6_mreq(r6, 0x88, 0x66, 0x0, &(0x7f00000004c0)) getsockopt$inet6_mreq(r6, 0x29, 0x1c, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d08030700000004000000000000000600142603600e120800110000810401110016000a00104005000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ed2f31b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffec", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000a80)=[{{&(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES64=r8, @ANYRES64=r5], 0x38}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="9f65710ea2f7b1380d57dd816e9bcd933084a9e23d6fb42a195a3cdf2e2a9fd146d1990cd0dcf3b214386b5a177b60c4b2746cfe4de630a18775ed8be59e8f82468d081481c89b5f8a26ef", 0x4b}, {&(0x7f0000000400)}], 0x2, &(0x7f0000000580)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @local}}}], 0x38}}], 0x2, 0x6046804) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xc, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) shutdown(0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) 1.060998679s ago: executing program 1 (id=922): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000600)="6459df536e39", 0x6, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xdfff, @empty, 0xfffffffc}, 0x1c) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x3, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x5, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno', 0x4) shutdown(r0, 0x1) 939.116336ms ago: executing program 9 (id=923): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r3, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 872.308089ms ago: executing program 8 (id=924): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5a79, 0x200, 0x0, 0x0}, {0x5, 0x200, 0x0, 0x0}], 0x2}) 320.769171ms ago: executing program 38 (id=924): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x5a79, 0x200, 0x0, 0x0}, {0x5, 0x200, 0x0, 0x0}], 0x2}) 305.849542ms ago: executing program 7 (id=926): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "3da2d199", "72392a24199b5903"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 305.655812ms ago: executing program 3 (id=927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000014}, 0x480f0) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0}, 0x0) 305.443582ms ago: executing program 9 (id=928): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101e42, 0x33) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000340)=0x4000) pwritev2(r0, 0x0, 0x0, 0xfff, 0xc, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 88.245665ms ago: executing program 3 (id=929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0x0, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) 38.183818ms ago: executing program 7 (id=930): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0xd8267bb9eeaf7cee, 0x4, 0x3, 0x3123764b, 0x6, 0x2, 0x8}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 0s ago: executing program 1 (id=931): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x566, &(0x7f00000015c0)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x9000) fallocate(r0, 0x0, 0x0, 0x8800000) r1 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r1, 0x4004550d, &(0x7f0000001080)) kernel console output (not intermixed with test programs): 136.291136][ T5535] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 136.445388][ T5538] loop4: detected capacity change from 0 to 2048 [ 136.769249][ T5538] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.779252][ T5538] ext4 filesystem being mounted at /72/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.992693][ T26] audit: type=1800 audit(2000000051.460:27): pid=5538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.343" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 138.845354][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 139.228980][ T5556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.348'. [ 140.354797][ T5586] loop2: detected capacity change from 0 to 512 [ 140.428609][ T5586] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 140.446963][ T5586] System zones: 1-12 [ 140.467178][ T5586] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.359: missing EA_INODE flag [ 140.559056][ T5586] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.359: error while reading EA inode 12 err=-117 [ 140.615430][ T5590] tipc: Started in network mode [ 140.619190][ T5586] EXT4-fs (loop2): 1 orphan inode deleted [ 140.634052][ T5586] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.643079][ T5590] tipc: Node identity dec67bcadf8b, cluster identity 4711 [ 140.669720][ T5590] tipc: Enabled bearer , priority 0 [ 140.687269][ T5592] device syzkaller0 entered promiscuous mode [ 140.744851][ T5590] tipc: Resetting bearer [ 141.287485][ T5605] loop5: detected capacity change from 0 to 512 [ 141.304081][ T5605] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.363: inode has both inline data and extents flags [ 141.331527][ T5605] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.363: couldn't read orphan inode 15 (err -117) [ 141.343979][ T5605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 141.361324][ T26] audit: type=1800 audit(2000000055.960:28): pid=5605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.363" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 141.476788][ T5589] tipc: Resetting bearer [ 141.494108][ T4539] EXT4-fs (loop5): unmounting filesystem. [ 141.686859][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 141.796287][ T5589] tipc: Disabling bearer [ 141.818006][ T4318] tipc: Node number set to 21855178 [ 142.573351][ T5644] IPVS: nq: FWM 3 0x00000003 - no destination available [ 143.023775][ T5654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 143.214538][ T5654] loop4: detected capacity change from 0 to 512 [ 143.248879][ T5654] ext4: Unknown parameter 'euid>00000000000000000000' [ 144.055253][ T5672] tipc: Started in network mode [ 144.067110][ T5672] tipc: Node identity 36cfd14c2e8e, cluster identity 4711 [ 144.107415][ T5672] tipc: Enabled bearer , priority 0 [ 144.190859][ T5675] device syzkaller0 entered promiscuous mode [ 144.248619][ T5672] tipc: Resetting bearer [ 144.317175][ T5670] tipc: Resetting bearer [ 144.409017][ T5670] tipc: Disabling bearer [ 144.705025][ T5689] loop4: detected capacity change from 0 to 1024 [ 144.793133][ T5693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 144.853778][ T5693] netlink: 'syz.2.386': attribute type 13 has an invalid length. [ 144.880418][ T5689] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 144.936850][ T5693] netlink: 'syz.2.386': attribute type 17 has an invalid length. [ 145.303943][ T5693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.429968][ T5693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.578994][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 145.606922][ T5720] netlink: 32 bytes leftover after parsing attributes in process `syz.5.393'. [ 146.024779][ T5727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.395'. [ 146.062322][ T4939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.182553][ T4939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.388086][ T4939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.525157][ T4939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.585367][ T5513] Set syz1 is full, maxelem 65536 reached [ 146.586448][ T5737] tipc: Started in network mode [ 146.634524][ T5737] tipc: Node identity aacc5bb2c963, cluster identity 4711 [ 146.663668][ T5737] tipc: Enabled bearer , priority 0 [ 146.700991][ T5739] device syzkaller0 entered promiscuous mode [ 146.770671][ T5737] tipc: Resetting bearer [ 146.860411][ T5736] tipc: Resetting bearer [ 146.928864][ T5736] tipc: Disabling bearer [ 147.156608][ T4939] tipc: Left network mode [ 147.937828][ T5766] IPVS: nq: FWM 3 0x00000003 - no destination available [ 148.869633][ T5777] loop3: detected capacity change from 0 to 2048 [ 149.155448][ T5777] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 149.164910][ T5777] ext4 filesystem being mounted at /77/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.316686][ T26] audit: type=1800 audit(2000000063.840:29): pid=5777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.408" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 150.133323][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.142389][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.154295][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.162555][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.171279][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.179442][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.254289][ T5785] loop5: detected capacity change from 0 to 512 [ 150.356835][ T5785] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.409: inode has both inline data and extents flags [ 150.468656][ T5785] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.409: couldn't read orphan inode 15 (err -117) [ 150.534537][ T5785] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 150.646830][ T26] audit: type=1800 audit(2000000065.240:30): pid=5783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.409" name="file1" dev="loop5" ino=18 res=0 errno=0 [ 151.159107][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 151.165988][ T4539] EXT4-fs (loop5): unmounting filesystem. [ 152.258044][ T4283] Bluetooth: hci0: command 0x0409 tx timeout [ 152.740667][ T4939] device hsr_slave_0 left promiscuous mode [ 152.776066][ T4939] device hsr_slave_1 left promiscuous mode [ 152.778312][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.417'. [ 152.820372][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.833610][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.870329][ T4939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.888675][ T4939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.964339][ T4939] device bridge_slave_1 left promiscuous mode [ 152.971014][ T4939] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.000670][ T4939] device bridge_slave_0 left promiscuous mode [ 153.009448][ T4939] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.096209][ T4939] device veth1_macvtap left promiscuous mode [ 153.119984][ T4939] device veth0_macvtap left promiscuous mode [ 153.143922][ T4939] device veth1_vlan left promiscuous mode [ 153.161307][ T4939] device veth0_vlan left promiscuous mode [ 153.284961][ T5824] loop3: detected capacity change from 0 to 512 [ 153.349254][ T5824] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 153.397373][ T5824] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 153.431374][ T5824] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 153.474526][ T5824] System zones: 0-2, 18-18, 34-34 [ 153.544765][ T5824] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.420: bad orphan inode 15 [ 153.576733][ T5824] ext4_test_bit(bit=14, block=18) = 1 [ 153.583167][ T5824] is_bad_inode(inode)=0 [ 153.587487][ T5824] NEXT_ORPHAN(inode)=2264924160 [ 153.592915][ T5824] max_ino=32 [ 153.600740][ T5824] i_nlink=0 [ 153.606699][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.420: corrupted inode contents [ 153.639757][ T5824] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #15: comm syz.3.420: mark_inode_dirty error [ 153.683675][ T5824] EXT4-fs error (device loop3): ext4_do_update_inode:5279: inode #15: comm syz.3.420: corrupted inode contents [ 153.724397][ T5824] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2945: inode #15: comm syz.3.420: mark_inode_dirty error [ 153.747992][ T5824] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2948: inode #15: comm syz.3.420: mark inode dirty (error -117) [ 153.782024][ T5824] EXT4-fs warning (device loop3): ext4_evict_inode:301: xattr delete (err -117) [ 153.798089][ T5824] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 153.885630][ T5824] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 154.013750][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 154.255226][ T5832] loop5: detected capacity change from 0 to 1024 [ 154.341828][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 154.390193][ T5832] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 154.542717][ T5705] Set syz1 is full, maxelem 65536 reached [ 154.687488][ T4539] EXT4-fs (loop5): unmounting filesystem. [ 154.807419][ T5845] loop5: detected capacity change from 0 to 256 [ 154.816173][ T5845] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 154.846789][ T5845] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 154.949178][ T4939] team0 (unregistering): Port device team_slave_1 removed [ 155.035047][ T4939] team0 (unregistering): Port device team_slave_0 removed [ 155.079698][ T4939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.123425][ T4939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.402214][ T4939] bond0 (unregistering): Released all slaves [ 155.743144][ T5855] netlink: 4 bytes leftover after parsing attributes in process `syz.5.428'. [ 156.244760][ T5780] chnl_net:caif_netlink_parms(): no params data found [ 156.418228][ T4283] Bluetooth: hci0: command 0x040f tx timeout [ 156.565127][ T5780] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.603605][ T5780] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.623372][ T5779] Bluetooth: hci5: Frame reassembly failed (-84) [ 156.639452][ T5780] device bridge_slave_0 entered promiscuous mode [ 156.661015][ T5780] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.669042][ T5780] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.677741][ T5780] device bridge_slave_1 entered promiscuous mode [ 156.704444][ T5780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.717273][ T5780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.810905][ T5885] loop5: detected capacity change from 0 to 256 [ 156.830619][ T5780] team0: Port device team_slave_0 added [ 156.839483][ T5885] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.852826][ T5780] team0: Port device team_slave_1 added [ 156.903763][ T5885] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 156.923564][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.968096][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.044863][ T5780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.114705][ T5780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.142429][ T5780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.208145][ T5780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.432270][ T5780] device hsr_slave_0 entered promiscuous mode [ 157.451480][ T5780] device hsr_slave_1 entered promiscuous mode [ 157.665049][ T5780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.789502][ T5780] Cannot create hsr debugfs directory [ 158.433733][ T5910] loop2: detected capacity change from 0 to 512 [ 158.500735][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 158.569204][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.445: inode has both inline data and extents flags [ 158.587705][ T5910] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.445: couldn't read orphan inode 15 (err -117) [ 158.618102][ T5917] Zero length message leads to an empty skb [ 158.624577][ T5910] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 158.658191][ T4284] Bluetooth: hci5: command 0x1003 tx timeout [ 158.665711][ T4283] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 158.704623][ T26] audit: type=1800 audit(2000000073.300:31): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.445" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 158.905952][ T5780] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 158.916798][ T5780] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 158.957268][ T5780] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 158.958202][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 158.990445][ T5780] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 159.235694][ T5935] device syzkaller0 entered promiscuous mode [ 159.249879][ T5933] loop0: detected capacity change from 0 to 256 [ 159.283236][ T5933] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 159.346338][ T5933] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 159.424973][ T5780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.478539][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 159.492525][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 159.548172][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.567455][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 159.589527][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 159.617390][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.624693][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.695595][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 159.883167][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 159.928947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 159.945260][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.952550][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.317056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 160.900471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 160.968633][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.070053][ T5960] loop0: detected capacity change from 0 to 2048 [ 161.238285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.474388][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.497652][ T5960] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 161.507204][ T5960] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.752008][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.841848][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.855451][ T5964] loop2: detected capacity change from 0 to 1024 [ 161.911677][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.996334][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 162.042193][ T5964] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.078105][ T5964] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.090151][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 162.164974][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.216421][ T5964] EXT4-fs error (device loop2): ext4_free_blocks:6220: comm syz.2.457: Freeing blocks not in datazone - block = 0, count = 16 [ 162.507185][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 162.778485][ T5978] netlink: 40 bytes leftover after parsing attributes in process `syz.3.461'. [ 162.787427][ T5978] netlink: 28 bytes leftover after parsing attributes in process `syz.3.461'. [ 163.147362][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 163.293911][ T5988] loop2: detected capacity change from 0 to 512 [ 163.313850][ T5986] loop3: detected capacity change from 0 to 256 [ 163.353606][ T5986] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.381663][ T5988] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.460: inode has both inline data and extents flags [ 163.414594][ T5986] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.508467][ T5988] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.460: couldn't read orphan inode 15 (err -117) [ 163.601616][ T5988] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 164.113909][ T26] audit: type=1800 audit(2000000078.660:32): pid=5988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.460" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 164.595909][ T6005] loop3: detected capacity change from 0 to 512 [ 164.604250][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 164.735499][ T6005] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 164.778317][ T6005] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.042026][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.065160][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.096685][ T5780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.143414][ T6023] device syzkaller0 entered promiscuous mode [ 165.453032][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 166.061873][ T6044] loop3: detected capacity change from 0 to 2048 [ 166.237546][ T6044] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 166.246988][ T6044] ext4 filesystem being mounted at /93/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.122813][ T6052] loop0: detected capacity change from 0 to 256 [ 167.188982][ T6052] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 167.233589][ T6052] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 168.035920][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.054963][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 168.154397][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.327999][ T6064] loop0: detected capacity change from 0 to 512 [ 168.687313][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1405: inode #15: comm syz.0.478: inode has both inline data and extents flags [ 168.709004][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.774080][ T6064] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.478: couldn't read orphan inode 15 (err -117) [ 168.796933][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.829220][ T6064] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 168.852653][ T6069] loop3: detected capacity change from 0 to 1024 [ 168.881358][ T26] audit: type=1800 audit(2000000083.480:33): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.478" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 168.936192][ T5780] device veth0_vlan entered promiscuous mode [ 168.990585][ T6069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 169.016852][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 169.028283][ T6069] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.040077][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.089546][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.112012][ T5780] device veth1_vlan entered promiscuous mode [ 169.125755][ T6073] loop5: detected capacity change from 0 to 1024 [ 169.147695][ T6069] EXT4-fs error (device loop3): ext4_free_blocks:6220: comm syz.3.480: Freeing blocks not in datazone - block = 0, count = 16 [ 169.159038][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.180359][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.189605][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.483'. [ 169.207117][ T5780] device veth0_macvtap entered promiscuous mode [ 169.227705][ T5780] device veth1_macvtap entered promiscuous mode [ 169.273657][ T6073] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 169.386985][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.447906][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.493745][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.547115][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.575096][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.617518][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.636432][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.659770][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.683767][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 169.688939][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.702168][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.745506][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.789134][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.810029][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.870160][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.913109][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.931137][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.951568][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.970716][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.019521][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.039146][ T5780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.061171][ T5780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.092646][ T5210] EXT4-fs (loop5): unmounting filesystem. [ 170.109374][ T5780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.158779][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.167547][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.224752][ T5780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.270209][ T5780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.307953][ T5780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.316814][ T5780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.372995][ T6106] loop2: detected capacity change from 0 to 512 [ 170.569034][ T6106] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.491: inode has both inline data and extents flags [ 170.651403][ T6106] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.491: couldn't read orphan inode 15 (err -117) [ 170.776784][ T6106] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 171.148588][ T26] audit: type=1800 audit(2000000085.670:34): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.491" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 171.443951][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 171.459105][ T5779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.477364][ T5779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.608624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.721545][ T40] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.785683][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.800468][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.872099][ T40] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.897635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.988949][ T40] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.155367][ T40] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.498146][ T4283] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 172.498576][ T4284] Bluetooth: hci3: command 0x1003 tx timeout [ 172.649919][ T40] tipc: Left network mode [ 172.844648][ T6146] loop3: detected capacity change from 0 to 512 [ 172.887768][ T6146] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.502: inode has both inline data and extents flags [ 172.911573][ T6146] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.502: couldn't read orphan inode 15 (err -117) [ 172.943312][ T6146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.044492][ T4284] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.058317][ T4284] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.066690][ T4284] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.076813][ T4284] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.086684][ T26] audit: type=1800 audit(2000000087.680:35): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.502" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 173.300302][ T4284] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.313415][ T4284] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.963480][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 174.122184][ T6159] loop2: detected capacity change from 0 to 1024 [ 174.201248][ T6159] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 174.397949][ T6159] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 174.468724][ T6159] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 174.707074][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 174.720917][ T4316] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 174.948007][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 174.958600][ T4316] usb 1-1: no configurations [ 174.985216][ T4316] usb 1-1: can't read configurations, error -22 [ 175.146139][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 175.153141][ T4316] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.458249][ T4284] Bluetooth: hci3: command 0x0409 tx timeout [ 175.508042][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 175.514436][ T4316] usb 1-1: no configurations [ 175.528621][ T4316] usb 1-1: can't read configurations, error -22 [ 175.542775][ T4316] usb usb1-port1: attempt power cycle [ 175.760852][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.774038][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.800504][ T6152] device bridge_slave_0 entered promiscuous mode [ 175.826230][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.856856][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.884310][ T6152] device bridge_slave_1 entered promiscuous mode [ 175.911723][ T40] device hsr_slave_0 left promiscuous mode [ 175.935639][ T40] device hsr_slave_1 left promiscuous mode [ 175.968324][ T4316] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 175.978399][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.985981][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.008898][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 176.015765][ T4316] usb 1-1: no configurations [ 176.039583][ T4316] usb 1-1: can't read configurations, error -22 [ 176.101967][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.110743][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.149602][ T40] device bridge_slave_1 left promiscuous mode [ 176.155900][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.176651][ T40] device bridge_slave_0 left promiscuous mode [ 176.198026][ T4316] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 176.201796][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.258896][ T4316] usb 1-1: Using ep0 maxpacket: 16 [ 176.264759][ T4316] usb 1-1: no configurations [ 176.289026][ T4316] usb 1-1: can't read configurations, error -22 [ 176.295718][ T4316] usb usb1-port1: unable to enumerate USB device [ 176.422741][ T6220] loop3: detected capacity change from 0 to 1024 [ 176.429928][ T40] device veth1_macvtap left promiscuous mode [ 176.437726][ T40] device veth0_macvtap left promiscuous mode [ 176.460685][ T40] device veth1_vlan left promiscuous mode [ 176.466615][ T40] device veth0_vlan left promiscuous mode [ 176.550208][ T6218] loop6: detected capacity change from 0 to 8192 [ 176.561820][ T6220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 176.614152][ T6218] loop6: p1 p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p [ 176.614916][ T6218] loop6: p1 start 67109111 is beyond EOD, truncated [ 176.815617][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 176.865584][ T6218] loop6: p3 start 100859904 is beyond EOD, truncated [ 176.874793][ T6218] loop6: p5 start 67109111 is beyond EOD, truncated [ 176.893141][ T6218] loop6: p7 start 67109111 is beyond EOD, truncated [ 176.935691][ T6218] loop6: p9 start 67109111 is beyond EOD, truncated [ 176.953135][ T6218] loop6: p11 start 67109111 is beyond EOD, truncated [ 176.965922][ T6218] loop6: p13 start 67109111 is beyond EOD, truncated [ 176.991903][ T6218] loop6: p15 start 67109111 is beyond EOD, truncated [ 177.013263][ T6218] loop6: p17 start 67109111 is beyond EOD, truncated [ 177.025891][ T6218] loop6: p19 start 67109111 is beyond EOD, truncated [ 177.064937][ T6218] loop6: p21 start 67109111 is beyond EOD, truncated [ 177.083200][ T6218] loop6: p23 start 67109111 is beyond EOD, truncated [ 177.092822][ T6218] loop6: p25 start 67109111 is beyond EOD, truncated [ 177.118169][ T6218] loop6: p27 start 67109111 is beyond EOD, truncated [ 177.140004][ T6218] loop6: p29 start 67109111 is beyond EOD, truncated [ 177.152958][ T6218] loop6: p31 start 67109111 is beyond EOD, truncated [ 177.183883][ T6218] loop6: p33 start 67109111 is beyond EOD, truncated [ 177.234482][ T6218] loop6: p35 start 67109111 is beyond EOD, truncated [ 177.262880][ T6218] loop6: p37 start 67109111 is beyond EOD, truncated [ 177.282846][ T6218] loop6: p39 start 67109111 is beyond EOD, truncated [ 177.298805][ T6218] loop6: p41 start 67109111 is beyond EOD, truncated [ 177.333432][ T6218] loop6: p43 start 67109111 is beyond EOD, truncated [ 177.359800][ T6218] loop6: p45 start 67109111 is beyond EOD, truncated [ 177.433287][ T6218] loop6: p47 start 67109111 is beyond EOD, truncated [ 177.456861][ T6218] loop6: p49 start 67109111 is beyond EOD, truncated [ 177.489016][ T6218] loop6: p51 start 67109111 is beyond EOD, truncated [ 177.536598][ T6218] loop6: p53 start 67109111 is beyond EOD, truncated [ 177.543918][ T4284] Bluetooth: hci3: command 0x041b tx timeout [ 177.559462][ T6218] loop6: p55 start 67109111 is beyond EOD, truncated [ 177.576829][ T6218] loop6: p57 start 67109111 is beyond EOD, truncated [ 177.599150][ T6218] loop6: p59 start 67109111 is beyond EOD, truncated [ 177.630519][ T6218] loop6: p61 start 67109111 is beyond EOD, truncated [ 177.653706][ T6218] loop6: p63 start 67109111 is beyond EOD, truncated [ 177.681066][ T6218] loop6: p65 start 67109111 is beyond EOD, truncated [ 177.696806][ T6218] loop6: p67 start 67109111 is beyond EOD, truncated [ 177.706052][ T6218] loop6: p69 start 67109111 is beyond EOD, truncated [ 177.717245][ T6218] loop6: p71 start 67109111 is beyond EOD, truncated [ 177.741119][ T6218] loop6: p73 start 67109111 is beyond EOD, truncated [ 177.749428][ T6218] loop6: p75 start 67109111 is beyond EOD, truncated [ 177.765582][ T6218] loop6: p77 start 67109111 is beyond EOD, truncated [ 177.785202][ T6218] loop6: p79 start 67109111 is beyond EOD, truncated [ 177.803677][ T6218] loop6: p81 start 67109111 is beyond EOD, truncated [ 177.828382][ T6218] loop6: p83 start 67109111 is beyond EOD, truncated [ 177.843390][ T6218] loop6: p85 start 67109111 is beyond EOD, truncated [ 177.860872][ T6218] loop6: p87 start 67109111 is beyond EOD, truncated [ 177.881914][ T6218] loop6: p89 start 67109111 is beyond EOD, truncated [ 177.891300][ T6218] loop6: p91 start 67109111 is beyond EOD, truncated [ 177.910963][ T6218] loop6: p93 start 67109111 is beyond EOD, truncated [ 177.919517][ T6218] loop6: p95 start 67109111 is beyond EOD, truncated [ 177.934581][ T6218] loop6: p97 start 67109111 is beyond EOD, truncated [ 177.945670][ T6218] loop6: p99 start 67109111 is beyond EOD, truncated [ 177.955292][ T6218] loop6: p101 start 67109111 is beyond EOD, truncated [ 177.974254][ T6218] loop6: p103 start 67109111 is beyond EOD, truncated [ 177.982851][ T6218] loop6: p105 start 67109111 is beyond EOD, truncated [ 177.991135][ T40] team0 (unregistering): Port device team_slave_1 removed [ 177.991623][ T6218] loop6: p107 start 67109111 is beyond EOD, truncated [ 178.007774][ T6218] loop6: p109 start 67109111 is beyond EOD, truncated [ 178.016836][ T6218] loop6: p111 start 67109111 is beyond EOD, truncated [ 178.033361][ T6218] loop6: p113 start 67109111 is beyond EOD, truncated [ 178.044542][ T6218] loop6: p115 start 67109111 is beyond EOD, truncated [ 178.061408][ T40] team0 (unregistering): Port device team_slave_0 removed [ 178.064316][ T6218] loop6: p117 start 67109111 is beyond EOD, truncated [ 178.094686][ T6218] loop6: p119 start 67109111 is beyond EOD, truncated [ 178.112377][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.116004][ T6218] loop6: p121 start 67109111 is beyond EOD, truncated [ 178.146324][ T6218] loop6: p123 start 67109111 is beyond EOD, truncated [ 178.165812][ T6218] loop6: p125 start 67109111 is beyond EOD, truncated [ 178.174675][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.174905][ T6218] loop6: p127 start 67109111 is beyond EOD, truncated [ 178.225796][ T6218] loop6: p129 start 67109111 is beyond EOD, truncated [ 178.239500][ T6218] loop6: p131 start 67109111 is beyond EOD, truncated [ 178.251756][ T6218] loop6: p133 start 67109111 is beyond EOD, truncated [ 178.265155][ T6218] loop6: p135 start 67109111 is beyond EOD, truncated [ 178.286537][ T6218] loop6: p137 start 67109111 is beyond EOD, truncated [ 178.304461][ T6218] loop6: p139 start 67109111 is beyond EOD, truncated [ 178.323979][ T6218] loop6: p141 start 67109111 is beyond EOD, truncated [ 178.346011][ T6218] loop6: p143 start 67109111 is beyond EOD, truncated [ 178.361618][ T6218] loop6: p145 start 67109111 is beyond EOD, truncated [ 178.385576][ T6218] loop6: p147 start 67109111 is beyond EOD, truncated [ 178.407512][ T6218] loop6: p149 start 67109111 is beyond EOD, truncated [ 178.437216][ T6218] loop6: p151 start 67109111 is beyond EOD, truncated [ 178.461377][ T6218] loop6: p153 start 67109111 is beyond EOD, truncated [ 178.479827][ T6218] loop6: p155 start 67109111 is beyond EOD, truncated [ 178.495608][ T6218] loop6: p157 start 67109111 is beyond EOD, truncated [ 178.610163][ T6218] loop6: p159 start 67109111 is beyond EOD, truncated [ 178.636156][ T6218] loop6: p161 start 67109111 is beyond EOD, truncated [ 178.669859][ T6218] loop6: p163 start 67109111 is beyond EOD, truncated [ 178.677789][ T6218] loop6: p165 start 67109111 is beyond EOD, truncated [ 178.713392][ T6218] loop6: p167 start 67109111 is beyond EOD, truncated [ 178.731402][ T6218] loop6: p169 start 67109111 is beyond EOD, truncated [ 178.756774][ T6218] loop6: p171 start 67109111 is beyond EOD, truncated [ 178.765682][ T6218] loop6: p173 start 67109111 is beyond EOD, truncated [ 178.774310][ T6218] loop6: p175 start 67109111 is beyond EOD, truncated [ 178.783654][ T6218] loop6: p177 start 67109111 is beyond EOD, truncated [ 178.802720][ T6218] loop6: p179 start 67109111 is beyond EOD, truncated [ 178.811566][ T6218] loop6: p181 start 67109111 is beyond EOD, truncated [ 178.827447][ T6218] loop6: p183 start 67109111 is beyond EOD, truncated [ 178.853157][ T6218] loop6: p185 start 67109111 is beyond EOD, truncated [ 178.853991][ T40] bond0 (unregistering): Released all slaves [ 178.865377][ T6218] loop6: p187 start 67109111 is beyond EOD, truncated [ 178.884897][ T6218] loop6: p189 start 67109111 is beyond EOD, truncated [ 178.896837][ T6218] loop6: p191 start 67109111 is beyond EOD, truncated [ 178.907428][ T6218] loop6: p193 start 67109111 is beyond EOD, truncated [ 178.916854][ T6218] loop6: p195 start 67109111 is beyond EOD, truncated [ 178.925232][ T6218] loop6: p197 start 67109111 is beyond EOD, truncated [ 178.945931][ T6218] loop6: p199 start 67109111 is beyond EOD, truncated [ 178.957263][ T6218] loop6: p201 start 67109111 is beyond EOD, truncated [ 178.977408][ T6218] loop6: p203 start 67109111 is beyond EOD, truncated [ 178.993002][ T6218] loop6: p205 start 67109111 is beyond EOD, truncated [ 179.016120][ T6218] loop6: p207 start 67109111 is beyond EOD, truncated [ 179.032072][ T6218] loop6: p209 start 67109111 is beyond EOD, truncated [ 179.060657][ T6218] loop6: p211 start 67109111 is beyond EOD, truncated [ 179.076090][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.092342][ T6218] loop6: p213 start 67109111 is beyond EOD, truncated [ 179.109795][ T6253] device syzkaller0 entered promiscuous mode [ 179.131165][ T6218] loop6: p215 start 67109111 is beyond EOD, truncated [ 179.139068][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.157056][ T6218] loop6: p217 start 67109111 is beyond EOD, truncated [ 179.168810][ T6218] loop6: p219 start 67109111 is beyond EOD, truncated [ 179.209214][ T6218] loop6: p221 start 67109111 is beyond EOD, truncated [ 179.221067][ T6218] loop6: p223 start 67109111 is beyond EOD, truncated [ 179.258433][ T6218] loop6: p225 start 67109111 is beyond EOD, truncated [ 179.275225][ T6218] loop6: p227 start 67109111 is beyond EOD, truncated [ 179.308996][ T6218] loop6: p229 start 67109111 is beyond EOD, truncated [ 179.320772][ T6218] loop6: p231 start 67109111 is beyond EOD, truncated [ 179.330751][ T6218] loop6: p233 start 67109111 is beyond EOD, truncated [ 179.340063][ T6218] loop6: p235 start 67109111 is beyond EOD, truncated [ 179.349647][ T6218] loop6: p237 start 67109111 is beyond EOD, truncated [ 179.360821][ T6218] loop6: p239 start 67109111 is beyond EOD, truncated [ 179.399858][ T6218] loop6: p241 start 67109111 is beyond EOD, truncated [ 179.411665][ T6218] loop6: p243 start 67109111 is beyond EOD, truncated [ 179.420305][ T6218] loop6: p245 start 67109111 is beyond EOD, truncated [ 179.439105][ T6152] team0: Port device team_slave_0 added [ 179.469593][ T6218] loop6: p247 start 67109111 is beyond EOD, truncated [ 179.488549][ T6152] team0: Port device team_slave_1 added [ 179.513760][ T6218] loop6: p249 start 67109111 is beyond EOD, truncated [ 179.539274][ T6218] loop6: p251 start 67109111 is beyond EOD, truncated [ 179.567418][ T6218] loop6: p253 start 67109111 is beyond EOD, truncated [ 179.586763][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.605882][ T6218] loop6: p255 start 67109111 is beyond EOD, truncated [ 179.614133][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.640716][ T4284] Bluetooth: hci3: command 0x040f tx timeout [ 179.680562][ T6267] capability: warning: `syz.3.533' uses deprecated v2 capabilities in a way that may be insecure [ 179.758182][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.801122][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.818362][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.935941][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.051921][ T6152] device hsr_slave_0 entered promiscuous mode [ 180.067466][ T6152] device hsr_slave_1 entered promiscuous mode [ 180.775692][ T6152] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 180.869219][ T6152] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 180.880910][ T4419] udevd[4419]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 180.895514][ T4415] udevd[4415]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 180.931677][ T4417] udevd[4417]: inotify_add_watch(7, /dev/loop6p10, 10) failed: No such file or directory [ 180.967148][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop6p8, 10) failed: No such file or directory [ 180.991216][ T4353] udevd[4353]: inotify_add_watch(7, /dev/loop6p6, 10) failed: No such file or directory [ 180.992139][ T6152] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 181.436393][ T6152] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 181.697977][ T4284] Bluetooth: hci3: command 0x0419 tx timeout [ 181.789236][ T6295] udevd[6295]: inotify_add_watch(7, /dev/loop6p12, 10) failed: No such file or directory [ 181.870853][ T6304] udevd[6304]: inotify_add_watch(7, /dev/loop6p14, 10) failed: No such file or directory [ 182.056124][ T6306] udevd[6306]: inotify_add_watch(7, /dev/loop6p16, 10) failed: No such file or directory [ 182.057392][ T6310] udevd[6310]: inotify_add_watch(7, /dev/loop6p18, 10) failed: No such file or directory [ 182.159862][ T4419] udevd[4419]: inotify_add_watch(7, /dev/loop6p26, 10) failed: No such file or directory [ 182.269216][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.378119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.396064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.453984][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.501810][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.538888][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.588139][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.595310][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.709680][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 182.791993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 182.825945][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 182.881272][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.888626][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.965564][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 182.997232][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.048101][ T6335] tipc: Started in network mode [ 183.077205][ T6335] tipc: Node identity 16004ed5b2e9, cluster identity 4711 [ 183.134404][ T6335] tipc: Enabled bearer , priority 0 [ 183.187826][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.272561][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.345772][ T6337] tipc: Resetting bearer [ 183.469599][ T6331] tipc: Disabling bearer [ 183.567433][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.608154][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.657516][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.734123][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.757770][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.876376][ T6152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.907612][ T6152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 184.042122][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 184.078718][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 184.173155][ T6358] loop6: detected capacity change from 0 to 2048 [ 184.904303][ T6358] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 185.118122][ T6371] loop2: detected capacity change from 0 to 512 [ 185.169151][ T6371] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.559: inode has both inline data and extents flags [ 185.199743][ T5780] EXT4-fs (loop6): unmounting filesystem. [ 185.264907][ T6371] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.559: couldn't read orphan inode 15 (err -117) [ 185.324245][ T6371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.421898][ T26] audit: type=1800 audit(2000000100.020:36): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.559" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 185.567271][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 185.763899][ T6388] device syzkaller0 entered promiscuous mode [ 185.846180][ T4358] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 185.905827][ T4358] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 185.987044][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 186.000459][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 186.155897][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.440565][ T6406] loop0: detected capacity change from 0 to 512 [ 186.485177][ T6406] EXT4-fs (loop0): Unsupported blocksize for fs-verity [ 187.789704][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 187.811525][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.910004][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 187.931053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 187.971375][ T6152] device veth0_vlan entered promiscuous mode [ 187.979172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 187.997491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.022676][ T6152] device veth1_vlan entered promiscuous mode [ 188.170928][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 188.189850][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 188.276716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.308227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.325836][ T6152] device veth0_macvtap entered promiscuous mode [ 188.365361][ T6152] device veth1_macvtap entered promiscuous mode [ 188.447685][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.482136][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.501736][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.508314][ T6452] loop6: detected capacity change from 0 to 512 [ 188.537655][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.559441][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.581830][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.643427][ T6452] EXT4-fs error (device loop6): ext4_orphan_get:1405: inode #15: comm syz.6.582: inode has both inline data and extents flags [ 188.676692][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.707937][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.724514][ T6452] EXT4-fs error (device loop6): ext4_orphan_get:1410: comm syz.6.582: couldn't read orphan inode 15 (err -117) [ 188.735450][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.746300][ T6452] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 188.795176][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 188.814901][ T26] audit: type=1800 audit(2000000103.410:37): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.582" name="file1" dev="loop6" ino=18 res=0 errno=0 [ 188.822654][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.902812][ T5780] EXT4-fs (loop6): unmounting filesystem. [ 188.909741][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.929045][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.011975][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.042004][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.086794][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.150284][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.195831][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.228061][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.256174][ T6152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.282637][ T6152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.333712][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.425636][ T6152] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.456718][ T6152] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.496099][ T6152] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.533055][ T6152] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.567306][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.611793][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.836022][ T5540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.882255][ T5540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.909975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 189.980778][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.994269][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.030042][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 190.156415][ T6496] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 190.163365][ T6496] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 190.244301][ T6496] vhci_hcd vhci_hcd.0: Device attached [ 190.343207][ T6497] vhci_hcd: connection closed [ 190.354504][ T9] vhci_hcd: stop threads [ 190.382564][ T9] vhci_hcd: release socket [ 190.412655][ T9] vhci_hcd: disconnect device [ 190.448106][ T129] vhci_hcd: vhci_device speed not set [ 190.711764][ T6514] loop6: detected capacity change from 0 to 2048 [ 190.783240][ T6513] device syzkaller0 entered promiscuous mode [ 190.809634][ T6514] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 190.819014][ T6514] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.835967][ T26] audit: type=1800 audit(2000000105.430:38): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.598" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 191.451529][ T5780] EXT4-fs (loop6): unmounting filesystem. [ 192.142251][ T6548] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 192.364918][ T6550] process 'syz.6.604' launched './file2' with NULL argv: empty string added [ 194.341328][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347901][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.723549][ T26] audit: type=1326 audit(2000000109.320:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 194.820289][ T26] audit: type=1326 audit(2000000109.320:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 194.854305][ T26] audit: type=1326 audit(2000000109.320:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 194.975448][ T26] audit: type=1326 audit(2000000109.320:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 195.002920][ T26] audit: type=1326 audit(2000000109.320:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 195.053606][ T26] audit: type=1326 audit(2000000109.320:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 195.105747][ T26] audit: type=1326 audit(2000000109.320:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 195.207593][ T26] audit: type=1326 audit(2000000109.320:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 195.276081][ T26] audit: type=1326 audit(2000000109.320:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6575 comm="syz.6.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe78299cdd9 code=0x7ffc0000 [ 195.298341][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.660226][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.602'. [ 196.676173][ T6528] device syz_tun entered promiscuous mode [ 196.688087][ T6528] device syz_tun left promiscuous mode [ 196.754527][ T6532] device syzkaller0 entered promiscuous mode [ 197.172915][ T126] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 197.229253][ T126] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.903316][ T6616] loop7: detected capacity change from 0 to 2048 [ 197.952487][ T6618] device syzkaller0 entered promiscuous mode [ 197.991123][ T6616] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 198.000892][ T6616] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.015355][ T26] kauditd_printk_skb: 19 callbacks suppressed [ 198.015371][ T26] audit: type=1800 audit(2000000112.610:67): pid=6616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.617" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 198.567890][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 198.705471][ T6152] EXT4-fs (loop7): unmounting filesystem. [ 198.713021][ T6632] program syz.2.625 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.231352][ T4312] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 199.441833][ T4312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.490316][ T4312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.532633][ T4312] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 199.566387][ T4312] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.660042][ T4312] usb 8-1: config 0 descriptor?? [ 200.117898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 200.137886][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 200.147883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 200.157887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 200.177895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 200.187892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 200.197882][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 200.207891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 200.244845][ T4312] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 200.264277][ T4312] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.7-1/input0 [ 201.171357][ T4312] cp2112 0003:10C4:EA90.0003: error requesting version [ 201.199537][ T4312] cp2112: probe of 0003:10C4:EA90.0003 failed with error -32 [ 201.269466][ T6677] IPVS: nq: FWM 3 0x00000003 - no destination available [ 201.278125][ T4312] usb 8-1: USB disconnect, device number 2 [ 201.367176][ T6670] input: syz1 as /devices/virtual/input/input5 [ 201.538010][ T4284] Bluetooth: hci1: command 0x0406 tx timeout [ 201.544168][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 201.550326][ T4283] Bluetooth: hci2: command 0x0406 tx timeout [ 201.886751][ T6679] fido_id[6679]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 202.464684][ T6700] device syzkaller0 entered promiscuous mode [ 202.870294][ T6713] loop0: detected capacity change from 0 to 2048 [ 203.532863][ T6713] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 203.542138][ T6713] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.557045][ T26] audit: type=1800 audit(2000000118.150:68): pid=6713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.647" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 203.861424][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 204.568174][ T4315] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.815314][ T2185] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 204.929112][ T4315] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 204.942525][ T4315] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 204.951744][ T4315] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.972279][ T4315] usb 7-1: config 0 descriptor?? [ 205.819575][ T2185] usb 8-1: config 0 has no interfaces? [ 205.830168][ T2185] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 205.839506][ T2185] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 205.847547][ T2185] usb 8-1: SerialNumber: syz [ 205.854291][ T2185] usb 8-1: config 0 descriptor?? [ 206.148678][ T6760] device syzkaller0 entered promiscuous mode [ 206.235100][ T6766] loop3: detected capacity change from 0 to 2048 [ 206.442122][ T6766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 206.451403][ T6766] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.820963][ T26] audit: type=1800 audit(2000000121.060:69): pid=6766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.661" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 206.845618][ T6772] IPVS: nq: FWM 3 0x00000003 - no destination available [ 206.988572][ T4315] usb 7-1: USB disconnect, device number 2 [ 207.742780][ T4315] usb 8-1: USB disconnect, device number 3 [ 207.929899][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 207.988182][ T6785] device syzkaller0 entered promiscuous mode [ 208.254711][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.670'. [ 208.276075][ T6798] netlink: 'syz.3.670': attribute type 13 has an invalid length. [ 208.316017][ T6798] netlink: 'syz.3.670': attribute type 17 has an invalid length. [ 208.364883][ T6798] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 208.440903][ T6798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 208.872491][ T6816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.677'. [ 209.158687][ T6820] tipc: Started in network mode [ 209.222372][ T6824] IPVS: nq: FWM 3 0x00000003 - no destination available [ 209.240669][ T6820] tipc: Node identity a6c48f0692fc, cluster identity 4711 [ 209.338210][ T6820] tipc: Enabled bearer , priority 0 [ 209.550751][ T6820] tipc: Resetting bearer [ 209.630386][ T6833] loop3: detected capacity change from 0 to 2048 [ 210.511180][ T4315] tipc: Node number set to 876121862 [ 210.556579][ T6833] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 210.565806][ T6833] ext4 filesystem being mounted at /145/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.597416][ T26] audit: type=1800 audit(2000000125.190:70): pid=6830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.681" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 210.787977][ T4358] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 210.817556][ T6819] tipc: Disabling bearer [ 210.846612][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 211.027966][ T4358] usb 7-1: Using ep0 maxpacket: 16 [ 211.044318][ T4358] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 211.091913][ T4358] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 211.122439][ T4358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.147434][ T4358] usb 7-1: Product: syz [ 211.153129][ T4358] usb 7-1: Manufacturer: syz [ 211.157770][ T4358] usb 7-1: SerialNumber: syz [ 211.174145][ T4358] usb 7-1: config 0 descriptor?? [ 211.569572][ T4358] hub 7-1:0.0: bad descriptor, ignoring hub [ 211.577023][ T4358] hub: probe of 7-1:0.0 failed with error -5 [ 212.258562][ T14] usb 7-1: USB disconnect, device number 3 [ 213.126495][ T6870] netlink: 8 bytes leftover after parsing attributes in process `syz.6.689'. [ 213.167354][ T6870] netlink: 'syz.6.689': attribute type 13 has an invalid length. [ 213.188664][ T6870] netlink: 'syz.6.689': attribute type 17 has an invalid length. [ 213.300001][ T26] audit: type=1326 audit(2000000127.900:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6841 comm="syz.7.684" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb68d99cdd9 code=0x0 [ 213.490104][ T6870] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.585278][ T6870] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 213.610802][ T6880] loop2: detected capacity change from 0 to 256 [ 213.653464][ T6880] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 213.730689][ T6880] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 213.746567][ T6883] IPVS: nq: FWM 3 0x00000003 - no destination available [ 214.428784][ T6896] tipc: Enabled bearer , priority 0 [ 214.475187][ T6896] tipc: Resetting bearer [ 214.530693][ T6895] tipc: Disabling bearer [ 214.880022][ T6902] netlink: 14 bytes leftover after parsing attributes in process `syz.2.699'. [ 215.497297][ T6925] loop7: detected capacity change from 0 to 256 [ 215.575733][ T6925] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 215.679389][ T6925] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 216.647943][ T2185] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 216.802834][ T6947] tipc: Enabled bearer , priority 0 [ 216.837974][ T2185] usb 8-1: Using ep0 maxpacket: 16 [ 216.850141][ T2185] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 216.880276][ T6947] tipc: Resetting bearer [ 216.890576][ T2185] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 216.923394][ T2185] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.941884][ T2185] usb 8-1: Product: syz [ 216.956134][ T2185] usb 8-1: Manufacturer: syz [ 216.975091][ T2185] usb 8-1: SerialNumber: syz [ 216.982294][ T6945] tipc: Disabling bearer [ 216.994737][ T2185] usb 8-1: config 0 descriptor?? [ 217.037003][ T2185] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 217.080626][ T2185] em28xx 8-1:0.0: DVB interface 0 found: bulk [ 217.639865][ T2185] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 217.796754][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.719'. [ 218.059726][ T2185] em28xx 8-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 218.098305][ T2185] em28xx 8-1:0.0: board has no eeprom [ 218.518006][ T2185] em28xx 8-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 218.540825][ T2185] em28xx 8-1:0.0: dvb set to bulk mode. [ 218.626992][ T2185] em28xx 8-1:0.0: Binding DVB extension [ 218.964949][ T6998] device syzkaller0 entered promiscuous mode [ 219.097753][ T7002] loop2: detected capacity change from 0 to 1024 [ 219.214786][ T7002] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 219.459797][ T6940] em28xx 8-1:0.0: reading from i2c device at 0x482c failed (error=-5) [ 219.544673][ T126] usb 8-1: USB disconnect, device number 4 [ 219.577610][ T126] em28xx 8-1:0.0: Disconnecting em28xx [ 219.770459][ T2185] em28xx 8-1:0.0: Registering input extension [ 219.777351][ T126] em28xx 8-1:0.0: Closing input extension [ 219.879517][ T4987] EXT4-fs (loop2): unmounting filesystem. [ 219.898089][ T126] em28xx 8-1:0.0: Freeing device [ 220.212710][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.733'. [ 220.406203][ T6876] Set syz1 is full, maxelem 65536 reached [ 220.578311][ T2185] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 220.802609][ T2185] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.848030][ T2185] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.878943][ T2185] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.928019][ T2185] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.954494][ T2185] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.998878][ T2185] usb 8-1: config 0 descriptor?? [ 221.119162][ T7044] x_tables: duplicate underflow at hook 4 [ 221.417680][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.451191][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.494853][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.515220][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.535508][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.564109][ T7049] loop6: detected capacity change from 0 to 1024 [ 221.570676][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.577947][ T4315] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 221.589939][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.600288][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.614496][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.655863][ T7049] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 221.694825][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.712921][ T26] audit: type=1800 audit(2000000136.310:72): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.741" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 221.720468][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.798026][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.828937][ T4315] usb 4-1: Using ep0 maxpacket: 16 [ 221.839986][ T4315] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.859246][ T4315] usb 4-1: config 128 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.873008][ T4315] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.882544][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.892869][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.908002][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.937053][ T2185] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 221.985769][ T2185] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 222.145992][ T2185] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 222.298211][ T2185] usb 8-1: USB disconnect, device number 5 [ 222.363539][ T4315] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 222.427887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 222.524464][ T7062] fido_id[7062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 222.584854][ T7044] i2c i2c-1: unsupported multi-msg i2c transaction [ 222.644864][ T5540] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.836055][ T7061] netlink: 20 bytes leftover after parsing attributes in process `syz.7.744'. [ 222.999928][ T5540] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.073585][ T7054] EXT4-fs (loop6): unmounting filesystem. [ 223.208265][ T4278] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 223.257521][ T5540] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.332639][ T4315] usb 4-1: USB disconnect, device number 2 [ 223.339220][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.7.747'. [ 223.360697][ T7072] netlink: 'syz.7.747': attribute type 13 has an invalid length. [ 223.415731][ T7072] netlink: 'syz.7.747': attribute type 17 has an invalid length. [ 223.419516][ T4278] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 223.497745][ T4283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.507586][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.516197][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.524699][ T4283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.533350][ T4283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.541752][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.549266][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.571883][ T4278] usb 1-1: config 0 descriptor?? [ 223.581592][ T4278] cp210x 1-1:0.0: cp210x converter detected [ 223.796179][ T7072] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.865251][ T7072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 224.006435][ T5540] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.742519][ T4278] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 224.799224][ T4278] cp210x 1-1:0.0: querying part number failed [ 224.878817][ T4278] usb 1-1: cp210x converter now attached to ttyUSB0 [ 224.891795][ T7093] device syzkaller0 entered promiscuous mode [ 224.923603][ T4278] usb 1-1: USB disconnect, device number 6 [ 224.961376][ T4278] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 224.969869][ T5540] tipc: Left network mode [ 225.019804][ T4278] cp210x 1-1:0.0: device disconnected [ 225.190956][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 225.506586][ T4283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.517325][ T4283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.526171][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.549499][ T4283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.557290][ T4283] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 225.565122][ T4283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.591748][ T7110] loop7: detected capacity change from 0 to 512 [ 225.618360][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 225.791327][ T7110] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 225.850430][ T7110] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.968926][ T7112] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x16c800000000 [ 226.009885][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.010823][ T7112] kvm [7111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x16c800000001 [ 226.017402][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.042670][ T7079] device bridge_slave_0 entered promiscuous mode [ 226.079741][ T6152] EXT4-fs (loop7): unmounting filesystem. [ 226.096504][ T7112] kvm [7111]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd52200000000 [ 226.096584][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.131771][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.168128][ T7112] kvm [7111]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xd52200000001 [ 226.187622][ T7079] device bridge_slave_1 entered promiscuous mode [ 226.472859][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.640371][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.876111][ T7079] team0: Port device team_slave_0 added [ 226.950220][ T7146] device syzkaller0 entered promiscuous mode [ 227.071300][ T7079] team0: Port device team_slave_1 added [ 227.479198][ T4312] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 227.545276][ T4312] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 227.618877][ T4284] Bluetooth: hci2: command 0x0409 tx timeout [ 227.629665][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.636956][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.698447][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 227.746503][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.759056][ T7103] chnl_net:caif_netlink_parms(): no params data found [ 227.845043][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.866876][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.946483][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.205470][ T7177] device syzkaller0 entered promiscuous mode [ 228.407442][ T5540] device hsr_slave_0 left promiscuous mode [ 228.422118][ T5540] device hsr_slave_1 left promiscuous mode [ 228.468111][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.475677][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.500831][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.509426][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.517519][ T5540] device bridge_slave_1 left promiscuous mode [ 228.525214][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.551480][ T5540] device bridge_slave_0 left promiscuous mode [ 228.566100][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.653561][ T5540] device veth1_macvtap left promiscuous mode [ 228.670771][ T5540] device veth0_macvtap left promiscuous mode [ 228.676991][ T5540] device veth1_vlan left promiscuous mode [ 228.691816][ T5540] device veth0_vlan left promiscuous mode [ 229.017484][ T5540] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 229.646067][ T5540] team0 (unregistering): Port device team_slave_1 removed [ 229.693484][ T5540] team0 (unregistering): Port device team_slave_0 removed [ 229.708002][ T4284] Bluetooth: hci2: command 0x041b tx timeout [ 229.746010][ T5540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.785343][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 229.801792][ T5540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.082927][ T5540] bond0 (unregistering): Released all slaves [ 231.788121][ T4284] Bluetooth: hci2: command 0x040f tx timeout [ 231.875244][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 232.300046][ T7079] device hsr_slave_0 entered promiscuous mode [ 232.307346][ T7079] device hsr_slave_1 entered promiscuous mode [ 232.314124][ T7079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.322157][ T7079] Cannot create hsr debugfs directory [ 232.474448][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.529104][ T7103] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.537435][ T7103] device bridge_slave_0 entered promiscuous mode [ 232.578044][ T7103] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.588144][ T7103] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.596559][ T7103] device bridge_slave_1 entered promiscuous mode [ 232.816100][ T7103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.860935][ T7103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.021421][ T7103] team0: Port device team_slave_0 added [ 233.069008][ T7103] team0: Port device team_slave_1 added [ 233.173598][ T7079] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 233.226828][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.237801][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.291673][ T7103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.315585][ T7079] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 233.338834][ T7103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.346343][ T7103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.438444][ T7103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.468801][ T7079] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 233.490070][ T7234] device syzkaller0 entered promiscuous mode [ 233.535640][ T7079] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 233.776294][ T7103] device hsr_slave_0 entered promiscuous mode [ 233.843382][ T7103] device hsr_slave_1 entered promiscuous mode [ 233.858124][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 233.866831][ T7103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.912640][ T7103] Cannot create hsr debugfs directory [ 234.401346][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 234.507032][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 234.602092][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 234.648567][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 234.738397][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 234.819659][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 234.838713][ T4939] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.845924][ T4939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.874408][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 234.888960][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 234.914473][ T4939] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.921861][ T4939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.947197][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 235.008144][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 235.038802][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 235.088066][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 235.143121][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 235.204859][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 235.257264][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 235.341111][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 235.359172][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 235.388984][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 235.426696][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 235.451386][ T5553] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 235.503196][ T7079] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 235.597035][ T5540] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.800127][ T5540] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.876220][ T7103] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 235.919235][ T7103] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 236.055875][ T5540] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.117027][ T7103] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 236.161771][ T7103] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 236.271937][ T5540] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.458766][ T7271] device syzkaller0 entered promiscuous mode [ 236.922494][ T26] audit: type=1326 audit(2000000151.510:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.3.789" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f240e99cdd9 code=0x0 [ 237.262083][ T4312] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 237.477982][ T4312] usb 8-1: Using ep0 maxpacket: 16 [ 237.487123][ T4312] usb 8-1: unable to get BOS descriptor or descriptor too short [ 237.496540][ T4312] usb 8-1: config 9 has an invalid interface number: 7 but max is 0 [ 237.504977][ T4312] usb 8-1: config 9 has no interface number 0 [ 237.512330][ T4312] usb 8-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 237.524864][ T4312] usb 8-1: config 9 interface 7 has no altsetting 0 [ 237.542471][ T4312] usb 8-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 237.552039][ T4312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.560633][ T4312] usb 8-1: Product: syz [ 237.565592][ T4312] usb 8-1: Manufacturer: syz [ 237.570356][ T4312] usb 8-1: SerialNumber: syz [ 239.559827][ T7103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.613855][ T4312] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 239.668567][ T4312] usb 8-1: USB disconnect, device number 6 [ 239.735338][ T7103] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.759375][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 239.768786][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 239.777599][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 239.803090][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 239.831132][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.858522][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 239.874138][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 239.894450][ T4295] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.901764][ T4295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.917119][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.946309][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 239.988446][ T4295] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.995614][ T4295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.269818][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 240.286239][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 240.393744][ T4314] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 240.428983][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 240.449051][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 240.496864][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 240.547396][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 240.741601][ T4314] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 240.783969][ T4314] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 240.807575][ T4314] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 240.842263][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.878439][ T7317] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 241.224462][ T4314] usb 4-1: USB disconnect, device number 3 [ 242.276372][ T7340] input: syz1 as /devices/virtual/input/input7 [ 244.008669][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 244.017617][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 244.048764][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 244.062650][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 244.071511][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 244.080855][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 244.107008][ T7352] device syzkaller0 entered promiscuous mode [ 244.147075][ T7103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 244.721983][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 244.738952][ T4338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 244.988331][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 245.000394][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 245.108525][ T7079] device veth0_vlan entered promiscuous mode [ 245.120719][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 245.148909][ T2185] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 245.158934][ T4939] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 245.266982][ T7079] device veth1_vlan entered promiscuous mode [ 245.333463][ T7390] input: syz1 as /devices/virtual/input/input8 [ 245.350984][ T2185] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 245.391317][ T2185] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 245.413512][ T2185] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 245.432913][ T2185] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 245.446629][ T2185] usb 1-1: SerialNumber: syz [ 245.535428][ T7103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.571222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 245.602583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 245.647860][ T7079] device veth0_macvtap entered promiscuous mode [ 245.667657][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.682040][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.925790][ T7079] device veth1_macvtap entered promiscuous mode [ 245.944563][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 245.961178][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 246.040466][ T5540] device hsr_slave_0 left promiscuous mode [ 246.062075][ T5540] device hsr_slave_1 left promiscuous mode [ 246.082133][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.104683][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.184272][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.207991][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.280807][ T5540] device bridge_slave_1 left promiscuous mode [ 246.307518][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.387021][ T7414] mmap: syz.0.804 (7414) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.415779][ T5540] device bridge_slave_0 left promiscuous mode [ 246.428102][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.624046][ T5540] device veth1_macvtap left promiscuous mode [ 246.645636][ T5540] device veth0_macvtap left promiscuous mode [ 246.681851][ T5540] device veth1_vlan left promiscuous mode [ 246.718236][ T5540] device veth0_vlan left promiscuous mode [ 247.220500][ T4314] usb 1-1: USB disconnect, device number 7 [ 248.114793][ T7448] loop0: detected capacity change from 0 to 1024 [ 248.223138][ T7448] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 248.886998][ T4315] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 248.928525][ T5540] team0 (unregistering): Port device team_slave_1 removed [ 249.012477][ T5540] team0 (unregistering): Port device team_slave_0 removed [ 249.090481][ T4315] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 249.103307][ T4315] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 249.125631][ T4315] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 249.135470][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.148492][ T7456] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 249.272659][ T5540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.383310][ T4315] usb 4-1: USB disconnect, device number 4 [ 249.495201][ T5540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.299738][ T4315] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 250.316222][ T5540] bond0 (unregistering): Released all slaves [ 250.609448][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.646258][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.718185][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.756536][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.791036][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.818501][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.878930][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.891698][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 250.911828][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 250.966326][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.996700][ T7453] EXT4-fs (loop0): unmounting filesystem. [ 251.018269][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.028429][ T7473] input: syz0 as /devices/virtual/input/input9 [ 251.036468][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.092930][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.141892][ T7079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.167908][ T7079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.184596][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.198704][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.827'. [ 251.245696][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 251.268869][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 251.318151][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 251.338513][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 251.363392][ T7079] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.393894][ T7079] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.410284][ T7079] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.429897][ T7079] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.445820][ T7476] netlink: 'syz.3.827': attribute type 13 has an invalid length. [ 251.475195][ T7476] netlink: 'syz.3.827': attribute type 17 has an invalid length. [ 251.506078][ T7476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 251.554643][ T7476] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.691243][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 251.718448][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 251.773846][ T7103] device veth0_vlan entered promiscuous mode [ 251.820389][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 251.834991][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 251.873880][ T7103] device veth1_vlan entered promiscuous mode [ 251.987288][ T4295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.008190][ T4314] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 252.020742][ T4295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.044342][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 252.072106][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 252.116568][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 252.166066][ T7103] device veth0_macvtap entered promiscuous mode [ 252.185220][ T7103] device veth1_macvtap entered promiscuous mode [ 252.210314][ T4314] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 252.243024][ T4939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.246779][ T4314] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 252.262496][ T4939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.278401][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.305014][ T4314] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 252.318094][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.350464][ T4314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.356789][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.388307][ T7489] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 252.397616][ T4284] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 252.408517][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 252.415847][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.426341][ T4284] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 252.439283][ T4284] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 252.448322][ T4284] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 252.456159][ T4284] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 252.489597][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.587877][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.650904][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.673891][ T4354] usb 8-1: USB disconnect, device number 8 [ 252.723678][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.765315][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.785376][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 252.798588][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 252.817263][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 252.846078][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 252.868983][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 252.911248][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.940498][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.955034][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.973241][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.984806][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.996489][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.009613][ T7103] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.024108][ T7103] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.053644][ T7103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.077993][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 253.089744][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 253.130162][ T7103] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.158156][ T7103] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.235978][ T7103] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.285993][ T7103] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.608241][ T5540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.808221][ T5540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.999197][ T4939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.027339][ T4939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.053242][ T5540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.096969][ T5542] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 254.223278][ T5540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.290135][ T5779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.339443][ T5779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.383545][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 254.498303][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 254.664980][ T7497] chnl_net:caif_netlink_parms(): no params data found [ 255.034934][ T5540] tipc: Left network mode [ 255.231519][ T4318] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 255.371249][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.384473][ T7497] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.403043][ T7497] device bridge_slave_0 entered promiscuous mode [ 255.465718][ T4318] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 255.506905][ T4318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.547976][ T4318] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.585867][ T7497] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.591218][ T4318] usb 9-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 255.603130][ T7497] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.619570][ T7497] device bridge_slave_1 entered promiscuous mode [ 255.799651][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.806111][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.806457][ T4318] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.823548][ T4318] usb 9-1: config 0 descriptor?? [ 256.341298][ T4318] wacom 0003:056A:0010.0007: Unknown device_type for 'HID 056a:0010'. Assuming pen. [ 256.578225][ T4284] Bluetooth: hci4: command 0x041b tx timeout [ 256.579435][ T4318] wacom 0003:056A:0010.0007: hidraw0: USB HID v0.00 Device [HID 056a:0010] on usb-dummy_hcd.8-1/input0 [ 256.597349][ T7497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.611262][ T7497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.644618][ T7497] team0: Port device team_slave_0 added [ 256.654384][ T7497] team0: Port device team_slave_1 added [ 256.755112][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.758816][ T4318] input: Wacom Graphire Pen as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:056A:0010.0007/input/input10 [ 256.790643][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.816842][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.832541][ T7497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.948128][ T4354] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 256.995884][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.055367][ T7497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.091838][ T7497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.126685][ T7497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.148122][ T4354] usb 4-1: Using ep0 maxpacket: 16 [ 257.157048][ T4354] usb 4-1: unable to get BOS descriptor or descriptor too short [ 257.174437][ T4354] usb 4-1: config 9 has an invalid interface number: 7 but max is 0 [ 257.193119][ T4354] usb 4-1: config 9 has no interface number 0 [ 257.208545][ T4354] usb 4-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 257.231628][ T4354] usb 4-1: config 9 interface 7 has no altsetting 0 [ 257.274304][ T4354] usb 4-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 257.328465][ T4354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.336717][ T4354] usb 4-1: Product: syz [ 257.373239][ T4354] usb 4-1: Manufacturer: syz [ 257.385035][ T4354] usb 4-1: SerialNumber: syz [ 257.507471][ T7497] device hsr_slave_0 entered promiscuous mode [ 257.515015][ T7497] device hsr_slave_1 entered promiscuous mode [ 257.525326][ T7497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.534135][ T7497] Cannot create hsr debugfs directory [ 257.729312][ T4354] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 257.758828][ T4354] usb 4-1: USB disconnect, device number 5 [ 258.202146][ T4314] usb 9-1: USB disconnect, device number 2 [ 258.487236][ T5540] device hsr_slave_0 left promiscuous mode [ 258.509877][ T5540] device hsr_slave_1 left promiscuous mode [ 258.660144][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.677910][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 258.707716][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.717377][ T5540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.725109][ T5540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.736160][ T5540] device bridge_slave_1 left promiscuous mode [ 258.758180][ T5540] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.571039][ T5540] device bridge_slave_0 left promiscuous mode [ 259.588086][ T5540] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.663843][ T7630] program syz.8.864 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 259.673901][ T5540] device veth1_macvtap left promiscuous mode [ 259.682667][ T5540] device veth0_macvtap left promiscuous mode [ 259.703108][ T5540] device veth1_vlan left promiscuous mode [ 259.709281][ T5540] device veth0_vlan left promiscuous mode [ 259.978034][ T4354] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 260.184248][ T4354] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 260.213802][ T4354] usb 10-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 260.244586][ T4354] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 260.297993][ T4354] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.340821][ T7627] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 260.596587][ T4354] usb 10-1: USB disconnect, device number 2 [ 260.738019][ T4283] Bluetooth: hci4: command 0x0419 tx timeout [ 261.111327][ T5540] team0 (unregistering): Port device team_slave_1 removed [ 261.154702][ T5540] team0 (unregistering): Port device team_slave_0 removed [ 261.200160][ T5540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.246969][ T5540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.570504][ T26] audit: type=1326 audit(2000000176.170:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060959cdd9 code=0x7ffc0000 [ 261.617104][ T26] audit: type=1326 audit(2000000176.170:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f060959cdd9 code=0x7ffc0000 [ 261.684932][ T26] audit: type=1326 audit(2000000176.170:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7660 comm="syz.9.869" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f060959cdd9 code=0x7ffc0000 [ 261.814745][ T5540] bond0 (unregistering): Released all slaves [ 262.247876][ T7641] device syzkaller0 entered promiscuous mode [ 262.271421][ T7668] netlink: 20 bytes leftover after parsing attributes in process `syz.9.872'. [ 262.286907][ T7671] loop3: detected capacity change from 0 to 512 [ 262.401566][ T7671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 262.486473][ T7671] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.791236][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 263.650471][ T4278] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 263.847925][ T4278] usb 8-1: Using ep0 maxpacket: 16 [ 263.855495][ T4278] usb 8-1: unable to get BOS descriptor or descriptor too short [ 263.862575][ T7497] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 263.878082][ T26] audit: type=1326 audit(2000000178.470:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7678 comm="syz.8.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc12619cdd9 code=0x0 [ 263.911970][ T7497] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 263.929468][ T4278] usb 8-1: config 9 has an invalid interface number: 7 but max is 0 [ 263.937641][ T4278] usb 8-1: config 9 has no interface number 0 [ 263.980685][ T7497] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 264.001886][ T4278] usb 8-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 264.006517][ T7497] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 264.047899][ T4278] usb 8-1: config 9 interface 7 has no altsetting 0 [ 264.070775][ T4278] usb 8-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 264.117909][ T4278] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.126371][ T4278] usb 8-1: Product: syz [ 264.173070][ T4278] usb 8-1: Manufacturer: syz [ 264.227892][ T4278] usb 8-1: SerialNumber: syz [ 264.343625][ T7497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.405230][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 264.425041][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 264.459558][ T7497] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.507546][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.539280][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.579462][ T4278] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 264.585950][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.594174][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.614984][ T4278] usb 8-1: USB disconnect, device number 9 [ 264.665861][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.841835][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.875978][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.885846][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.893224][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.902175][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.917399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.935365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.957343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.975344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.036612][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.048880][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.087542][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.121660][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.154669][ T7497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 265.203797][ T7497] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 265.247531][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.261412][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.518451][ T7724] device syzkaller0 entered promiscuous mode [ 266.222324][ T4314] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 266.269941][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.280426][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.324350][ T7497] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.420205][ T4314] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 266.446586][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 266.452059][ T4314] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 266.505480][ T4314] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 266.516075][ T5779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 266.555534][ T7497] device veth0_vlan entered promiscuous mode [ 266.562466][ T4314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.601602][ T7730] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 266.648353][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 266.657701][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 266.695799][ T7497] device veth1_vlan entered promiscuous mode [ 266.740492][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 266.758785][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 266.844600][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 266.875290][ T126] usb 8-1: USB disconnect, device number 10 [ 266.964656][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 266.988353][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.002376][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.028687][ T7497] device veth0_macvtap entered promiscuous mode [ 267.056848][ T7497] device veth1_macvtap entered promiscuous mode [ 267.150347][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.169259][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.184100][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.198641][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.216606][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.232694][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.247863][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 267.265861][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.294911][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.323747][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.339358][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 267.357388][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 267.368786][ T5175] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 267.415361][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.427566][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.447926][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.468024][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.494414][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.523661][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.557903][ T7497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 267.587280][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 267.600229][ T7497] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.672759][ T7747] device syzkaller0 entered promiscuous mode [ 267.700612][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 267.713737][ T4313] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.726391][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 267.754127][ T4313] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 267.759991][ T7497] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.788473][ T7497] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.807462][ T7497] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.854623][ T7497] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.454019][ T26] audit: type=1326 audit(2000000183.050:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7758 comm="syz.7.892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb68d99cdd9 code=0x0 [ 270.768522][ T7781] device syzkaller0 entered promiscuous mode [ 271.066453][ T5540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.085283][ T5540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.549099][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 271.559915][ T4278] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 271.568612][ T4295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.607129][ T4295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.651219][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 271.938087][ T4278] usb 4-1: Using ep0 maxpacket: 16 [ 271.945714][ T4278] usb 4-1: unable to get BOS descriptor or descriptor too short [ 271.965015][ T4278] usb 4-1: config 9 has an invalid interface number: 7 but max is 0 [ 271.988117][ T4278] usb 4-1: config 9 has no interface number 0 [ 271.994488][ T4278] usb 4-1: config 9 interface 7 altsetting 6 endpoint 0x6 has invalid wMaxPacketSize 0 [ 272.086016][ T4278] usb 4-1: config 9 interface 7 has no altsetting 0 [ 272.116503][ T4278] usb 4-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=de.de [ 272.163529][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.203575][ T4278] usb 4-1: Product: syz [ 272.223503][ T4278] usb 4-1: Manufacturer: syz [ 272.241698][ T4278] usb 4-1: SerialNumber: syz [ 272.498110][ T7] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 272.673480][ T4278] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 272.690090][ T7] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 272.701351][ T4278] usb 4-1: USB disconnect, device number 6 [ 272.746494][ T7] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 272.787314][ T7] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 272.799581][ T7] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.844662][ T7822] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 273.081817][ T7] usb 9-1: USB disconnect, device number 3 [ 273.248130][ T7835] device syzkaller0 entered promiscuous mode [ 273.446540][ T4314] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 273.484162][ T4314] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 277.410642][ T7906] loop8: detected capacity change from 0 to 1024 [ 277.541565][ T7906] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 277.567972][ T7] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 277.575947][ T4358] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 277.821767][ T4358] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.843054][ T7] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 277.872562][ T7] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.883217][ T4358] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 277.907971][ T7] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.919042][ T4358] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 277.938475][ T7] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.946890][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.980807][ T7903] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 277.988055][ T7904] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 278.010553][ T7079] EXT4-fs (loop8): unmounting filesystem. [ 278.233310][ T4358] usb 4-1: USB disconnect, device number 7 [ 278.300529][ T129] usb 8-1: USB disconnect, device number 11 [ 278.460759][ T7206] udevd[7206]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 279.153555][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.315717][ T7958] loop9: detected capacity change from 0 to 512 [ 279.353786][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.496648][ T7958] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 279.518286][ T7958] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.589103][ T7962] device syzkaller0 entered promiscuous mode [ 279.654682][ T7964] [ 279.657073][ T7964] ====================================================== [ 279.664113][ T7964] WARNING: possible circular locking dependency detected [ 279.671146][ T7964] syzkaller #0 Not tainted [ 279.675765][ T7964] ------------------------------------------------------ [ 279.683142][ T7964] syz.7.930/7964 is trying to acquire lock: [ 279.689064][ T7964] ffff888018fc26d8 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 279.699004][ T7964] [ 279.699004][ T7964] but task is already holding lock: [ 279.706561][ T7964] ffff888054cb88e0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 279.717568][ T7964] [ 279.717568][ T7964] which lock already depends on the new lock. [ 279.717568][ T7964] [ 279.728256][ T7964] [ 279.728256][ T7964] the existing dependency chain (in reverse order) is: [ 279.737813][ T7964] [ 279.737813][ T7964] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 279.746630][ T7964] down_write+0x36/0x60 [ 279.751340][ T7964] process_measurement+0x3a2/0x1c30 [ 279.757168][ T7964] ima_file_mmap+0x102/0x150 [ 279.762287][ T7964] __se_sys_remap_file_pages+0x559/0x7b0 [ 279.768537][ T7964] do_syscall_64+0x4c/0xa0 [ 279.773492][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.780619][ T7964] [ 279.780619][ T7964] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 279.788196][ T7964] __lock_acquire+0x2d07/0x7d10 [ 279.793673][ T7964] lock_acquire+0x1bb/0x4a0 [ 279.798715][ T7964] down_read_killable+0x4c/0x340 [ 279.804451][ T7964] mmap_read_lock_killable+0x1d/0x60 [ 279.810444][ T7964] lock_mm_and_find_vma+0x2b1/0x2f0 [ 279.816168][ T7964] do_user_addr_fault+0x2db/0xb10 [ 279.821822][ T7964] exc_page_fault+0x60/0x100 [ 279.827028][ T7964] asm_exc_page_fault+0x22/0x30 [ 279.832496][ T7964] fault_in_readable+0x13e/0x1f0 [ 279.838141][ T7964] fault_in_iov_iter_readable+0xbb/0x2e0 [ 279.844483][ T7964] generic_perform_write+0x1f1/0x5c0 [ 279.850476][ T7964] __generic_file_write_iter+0x148/0x2a0 [ 279.856736][ T7964] generic_file_write_iter+0xab/0x2e0 [ 279.862732][ T7964] vfs_write+0x4b1/0xa30 [ 279.867952][ T7964] ksys_write+0x14c/0x250 [ 279.873002][ T7964] do_syscall_64+0x4c/0xa0 [ 279.878132][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.884678][ T7964] [ 279.884678][ T7964] other info that might help us debug this: [ 279.884678][ T7964] [ 279.895113][ T7964] Possible unsafe locking scenario: [ 279.895113][ T7964] [ 279.902776][ T7964] CPU0 CPU1 [ 279.908158][ T7964] ---- ---- [ 279.913608][ T7964] lock(&sb->s_type->i_mutex_key#13); [ 279.919096][ T7964] lock(&mm->mmap_lock); [ 279.926050][ T7964] lock(&sb->s_type->i_mutex_key#13); [ 279.934926][ T7964] lock(&mm->mmap_lock); [ 279.939372][ T7964] [ 279.939372][ T7964] *** DEADLOCK *** [ 279.939372][ T7964] [ 279.947798][ T7964] 3 locks held by syz.7.930/7964: [ 279.953015][ T7964] #0: ffff88802464b4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 279.962360][ T7964] #1: ffff88807a732460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 279.971363][ T7964] #2: ffff888054cb88e0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 279.982912][ T7964] [ 279.982912][ T7964] stack backtrace: [ 279.988809][ T7964] CPU: 1 PID: 7964 Comm: syz.7.930 Not tainted syzkaller #0 [ 279.996186][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 280.006422][ T7964] Call Trace: [ 280.009743][ T7964] [ 280.012791][ T7964] dump_stack_lvl+0x188/0x24e [ 280.017500][ T7964] ? load_image+0x400/0x400 [ 280.022034][ T7964] ? show_regs_print_info+0x12/0x12 [ 280.027252][ T7964] ? print_circular_bug+0x12b/0x1a0 [ 280.032470][ T7964] check_noncircular+0x296/0x330 [ 280.037438][ T7964] ? add_chain_block+0x940/0x940 [ 280.042396][ T7964] ? lockdep_lock+0xf1/0x1f0 [ 280.047008][ T7964] ? _find_first_zero_bit+0xcf/0x100 [ 280.052303][ T7964] __lock_acquire+0x2d07/0x7d10 [ 280.057176][ T7964] ? xfd_validate_state+0x69/0x140 [ 280.062312][ T7964] ? verify_lock_unused+0x140/0x140 [ 280.067726][ T7964] ? mark_lock+0x94/0x320 [ 280.072158][ T7964] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.078153][ T7964] ? lock_chain_count+0x20/0x20 [ 280.083105][ T7964] ? __schedule+0x119d/0x40e0 [ 280.087813][ T7964] ? finish_task_switch+0x265/0x8f0 [ 280.093048][ T7964] lock_acquire+0x1bb/0x4a0 [ 280.097654][ T7964] ? mmap_read_lock_killable+0x1d/0x60 [ 280.103125][ T7964] ? __schedule+0x11d9/0x40e0 [ 280.108007][ T7964] ? read_lock_is_recursive+0x10/0x10 [ 280.113394][ T7964] ? cmp_ex_search+0x1a/0x70 [ 280.117992][ T7964] ? bsearch+0x8a/0xb0 [ 280.122167][ T7964] ? fault_in_readable+0x13e/0x1f0 [ 280.127316][ T7964] ? search_extable+0x8c/0xd0 [ 280.132089][ T7964] ? trim_init_extable+0x3b0/0x3b0 [ 280.137298][ T7964] ? mmap_read_lock_killable+0x1d/0x60 [ 280.142965][ T7964] down_read_killable+0x4c/0x340 [ 280.147942][ T7964] ? mmap_read_lock_killable+0x1d/0x60 [ 280.153603][ T7964] mmap_read_lock_killable+0x1d/0x60 [ 280.158904][ T7964] lock_mm_and_find_vma+0x2b1/0x2f0 [ 280.164141][ T7964] do_user_addr_fault+0x2db/0xb10 [ 280.169182][ T7964] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 280.175411][ T7964] exc_page_fault+0x60/0x100 [ 280.180012][ T7964] asm_exc_page_fault+0x22/0x30 [ 280.184918][ T7964] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 280.190660][ T7964] Code: d8 57 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 b7 57 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 9a 57 [ 280.210280][ T7964] RSP: 0018:ffffc90003ef7ab0 EFLAGS: 00050287 [ 280.216487][ T7964] RAX: ffffffff81be1d99 RBX: 0000000000001000 RCX: 0000000000080000 [ 280.224971][ T7964] RDX: ffffc9000de61000 RSI: 0000000000010966 RDI: 0000000000010967 [ 280.233343][ T7964] RBP: 0000000000000000 R08: ffff8880273c8000 R09: 0000000000000002 [ 280.241620][ T7964] R10: 0000000000000006 R11: 0000000000000002 R12: 000020000009b000 [ 280.249819][ T7964] R13: 0000000000000000 R14: 000020000009a000 R15: 000020000009a000 [ 280.257983][ T7964] ? fault_in_readable+0x139/0x1f0 [ 280.263133][ T7964] fault_in_iov_iter_readable+0xbb/0x2e0 [ 280.268802][ T7964] generic_perform_write+0x1f1/0x5c0 [ 280.274111][ T7964] ? generic_file_direct_write+0x330/0x330 [ 280.280104][ T7964] ? __file_remove_privs+0x5f0/0x5f0 [ 280.285409][ T7964] ? rwsem_write_trylock+0x135/0x1c0 [ 280.290796][ T7964] ? clear_nonspinnable+0x60/0x60 [ 280.296188][ T7964] ? generic_write_checks_count+0x3d9/0x4c0 [ 280.302297][ T7964] __generic_file_write_iter+0x148/0x2a0 [ 280.308230][ T7964] generic_file_write_iter+0xab/0x2e0 [ 280.313621][ T7964] vfs_write+0x4b1/0xa30 [ 280.317916][ T7964] ? file_end_write+0x250/0x250 [ 280.322959][ T7964] ? __fget_files+0x43d/0x4b0 [ 280.327742][ T7964] ? __fdget_pos+0x2ae/0x360 [ 280.332391][ T7964] ? ksys_write+0x71/0x250 [ 280.337017][ T7964] ksys_write+0x14c/0x250 [ 280.341553][ T7964] ? __ia32_sys_read+0x80/0x80 [ 280.346459][ T7964] ? lockdep_hardirqs_on+0x94/0x140 [ 280.351775][ T7964] do_syscall_64+0x4c/0xa0 [ 280.356245][ T7964] ? clear_bhb_loop+0x60/0xb0 [ 280.360960][ T7964] ? clear_bhb_loop+0x60/0xb0 [ 280.365680][ T7964] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 280.371872][ T7964] RIP: 0033:0x7fb68d99cdd9 [ 280.376304][ T7964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.396303][ T7964] RSP: 002b:00007fb68e81d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.404764][ T7964] RAX: ffffffffffffffda RBX: 00007fb68dc15fa0 RCX: 00007fb68d99cdd9 [ 280.412875][ T7964] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000005 [ 280.420879][ T7964] RBP: 00007fb68da32d69 R08: 0000000000000000 R09: 0000000000000000 [ 280.429072][ T7964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 280.437077][ T7964] R13: 00007fb68dc16038 R14: 00007fb68dc15fa0 R15: 00007ffe66d44998 [ 280.445087][ T7964] [ 280.448167][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.511382][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.542261][ T7969] loop1: detected capacity change from 0 to 1024 [ 280.617933][ T7969] EXT4-fs warning (device loop1): ext4_multi_mount_protect:404: Unable to create kmmpd thread for loop1. [ 280.640299][ T7103] EXT4-fs (loop9): unmounting filesystem. [ 280.692417][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.014395][ T9] device hsr_slave_0 left promiscuous mode [ 282.021636][ T9] device hsr_slave_1 left promiscuous mode [ 282.028061][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.035502][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.043144][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.050795][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.060256][ T9] device bridge_slave_1 left promiscuous mode [ 282.066526][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.074717][ T9] device bridge_slave_0 left promiscuous mode [ 282.081090][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.090495][ T9] device veth1_macvtap left promiscuous mode [ 282.096556][ T9] device veth0_macvtap left promiscuous mode [ 282.102837][ T9] device veth1_vlan left promiscuous mode [ 282.110221][ T9] device veth0_vlan left promiscuous mode [ 282.207000][ T9] team0 (unregistering): Port device team_slave_1 removed [ 282.235576][ T9] team0 (unregistering): Port device team_slave_0 removed [ 282.260522][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.287325][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.396052][ T9] bond0 (unregistering): Released all slaves [ 282.787384][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.832002][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.874271][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.923536][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.006494][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.042359][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.121904][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.161887][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.266823][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.313656][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.363102][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.403229][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.488178][ T9] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.562329][ T9] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.622565][ T9] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.673333][ T9] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.775247][ T9] tipc: Left network mode [ 283.781760][ T9] tipc: Left network mode [ 285.321752][ T9] device hsr_slave_0 left promiscuous mode [ 285.329174][ T9] device hsr_slave_1 left promiscuous mode [ 285.335520][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.344290][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.352207][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.360325][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.368179][ T9] device bridge_slave_1 left promiscuous mode [ 285.374522][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.383197][ T9] device bridge_slave_0 left promiscuous mode [ 285.389768][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.401804][ T9] device hsr_slave_0 left promiscuous mode [ 285.408416][ T9] device hsr_slave_1 left promiscuous mode [ 285.414722][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.422498][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.430737][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.438449][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.446207][ T9] device bridge_slave_1 left promiscuous mode [ 285.452896][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.461506][ T9] device bridge_slave_0 left promiscuous mode [ 285.468173][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.479796][ T9] device hsr_slave_0 left promiscuous mode [ 285.486158][ T9] device hsr_slave_1 left promiscuous mode [ 285.493009][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.501004][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.509382][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.516944][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.525034][ T9] device bridge_slave_1 left promiscuous mode [ 285.532145][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.540903][ T9] device bridge_slave_0 left promiscuous mode [ 285.547217][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.560568][ T9] device hsr_slave_0 left promiscuous mode [ 285.567058][ T9] device hsr_slave_1 left promiscuous mode [ 285.573981][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.582005][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.590096][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.597626][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.605759][ T9] device bridge_slave_1 left promiscuous mode [ 285.612474][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.621104][ T9] device bridge_slave_0 left promiscuous mode [ 285.627603][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.642874][ T9] device veth1_macvtap left promiscuous mode [ 285.649237][ T9] device veth0_macvtap left promiscuous mode [ 285.655564][ T9] device veth1_vlan left promiscuous mode [ 285.662320][ T9] device veth0_vlan left promiscuous mode [ 285.669839][ T9] device veth1_macvtap left promiscuous mode [ 285.675910][ T9] device veth0_macvtap left promiscuous mode [ 285.682567][ T9] device veth1_vlan left promiscuous mode [ 285.688448][ T9] device veth0_vlan left promiscuous mode [ 285.695458][ T9] device veth1_macvtap left promiscuous mode [ 285.704606][ T9] device veth0_macvtap left promiscuous mode [ 285.710979][ T9] device veth1_vlan left promiscuous mode [ 285.716913][ T9] device veth0_vlan left promiscuous mode [ 285.724693][ T9] device veth1_macvtap left promiscuous mode [ 285.734241][ T9] device veth0_macvtap left promiscuous mode [ 285.740575][ T9] device veth1_vlan left promiscuous mode [ 285.746579][ T9] device veth0_vlan left promiscuous mode [ 286.165083][ T9] team0 (unregistering): Port device team_slave_1 removed [ 286.197195][ T9] team0 (unregistering): Port device team_slave_0 removed [ 286.233405][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.267286][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.394916][ T9] bond0 (unregistering): Released all slaves [ 286.595953][ T9] team0 (unregistering): Port device team_slave_1 removed [ 286.622571][ T9] team0 (unregistering): Port device team_slave_0 removed [ 286.648225][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 286.674538][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.775319][ T9] bond0 (unregistering): Released all slaves [ 286.933383][ T9] team0 (unregistering): Port device team_slave_1 removed [ 286.959792][ T9] team0 (unregistering): Port device team_slave_0 removed [ 286.985477][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.013341][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.056659][ T9] bond0 (unregistering): Released all slaves [ 287.189641][ T9] team0 (unregistering): Port device team_slave_1 removed [ 287.214255][ T9] team0 (unregistering): Port device team_slave_0 removed [ 287.240313][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.270024][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.311371][ T9] bond0 (unregistering): Released all slaves