last executing test programs: 4m4.688872895s ago: executing program 32 (id=71): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 4m0.686514442s ago: executing program 4 (id=81): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000005c0)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x20044041) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r0, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) connect$can_j1939(r0, 0x0, 0x0) 3m59.842179666s ago: executing program 4 (id=87): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) io_setup(0x8, 0x0) io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 3m59.652493645s ago: executing program 4 (id=88): socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) socket$tipc(0x1e, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4880) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x30, 0x18, 0x1ef, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x2}}]}, 0x30}, 0x1, 0x11}, 0x0) 3m59.401722518s ago: executing program 4 (id=90): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x40, &(0x7f00000001c0)={[{@nouid32}, {@errors_remount}, {@user_xattr}, {@nodiscard}, {@dioread_nolock}]}, 0x1, 0x4f7, &(0x7f0000000cc0)="$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") r1 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x2000000000006) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x2280, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(r2, 0x13, &(0x7f0000000000)={0x24, 0xfe81, 0xffffffff}) tkill(r2, 0x12) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x1, 0x0, 0x27a, 0xebc, 0x5, 0x79a}) 3m57.648909878s ago: executing program 4 (id=97): socket$inet_sctp(0x2, 0x5, 0x84) r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000480)='\xde\x17ufS\x1d\x84P\x1c\xe6\xb5\x808\xcf\x85\x13\x1aL\xe3\xaf\xcbV\xb6\x9f9\xd1\xb9\xd8\xc3\xac\xf5\xac\xcb\xc5+\x80\xdd:\xfd\x1f?\xb2\xaa\x01\xce\xfe\xa2\xaf\xc1\x8d\xac6\xc6#[\xbc\x1f\x02\x00\x00\x0065\bz\xb5y\xee\xb9\x89\xc2\xc9U\xfc\xf1\x15\xdc\xde\xc2\x99\xa5!\x06]\xf2\xc33\x9f\xe3\xe4\x98\x91g\xf3!4:\t\x12F\xdae\xa3/\x9es\x14p\x10\xf4\x1d\xf0p\x9c\xda', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='^,/\x00j\xd6pS\x99FN\xf3\xa3Y\xe1\x90\nJ\x9c\xb7\x0f\x85\xea\xbc28\x04\xe1\x99\tmi\x1b\xcd\x9d\xf8i\xdc\xff \x02J\xa5\t\r\xc8\x1c\xed\xcd', &(0x7f0000000a80)='f}seblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0) read(r0, 0x0, 0x0) close(r0) 3m56.327644487s ago: executing program 4 (id=101): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, {0xa, 0x4e23, 0x7, @mcast1, 0xc}}}, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r3, &(0x7f0000000380)='eS', 0x2) 3m56.063810501s ago: executing program 33 (id=101): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4, 0x0, {0xa, 0x4e23, 0x7, @mcast1, 0xc}}}, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r3, &(0x7f0000000380)='eS', 0x2) 2m56.109592782s ago: executing program 2 (id=305): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000300)={0x11, 0x1b, r3, 0x1, 0x0, 0x6, @local}, 0x14) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x12c, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@mcast2, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8}, @user_kmaddress={0x2c, 0x13, {@in=@private=0xa010100, @in=@loopback, 0x0, 0xa}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x10}, 0x400c0c0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x2, 0xa, 0x0, 0x3, 0x2, 0x0, 0x0, 0xfffffffc}, 0x10}}, 0x0) 2m54.946677262s ago: executing program 2 (id=309): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x408c1}, 0x4) 2m53.420688541s ago: executing program 2 (id=316): unshare(0x2a020480) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(0xffffffffffffffff, 0xf502, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0108000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x0, 0x0, 0x0, 0xccd21cca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='h'], 0x68}, 0x9}, 0x0) 2m52.12022649s ago: executing program 2 (id=321): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000280)='./file1\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0xfd, 0x727, &(0x7f0000000a00)="$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") io_uring_setup(0x217, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x5, 0x8a, 0x20000}, 0x20) 2m51.657736273s ago: executing program 2 (id=324): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) read$FUSE(r3, &(0x7f0000003440)={0x2020}, 0x2020) 2m49.879616896s ago: executing program 2 (id=328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) rt_sigqueueinfo(0x0, 0x21, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LK(r1, 0x0, 0x0) 2m48.923676446s ago: executing program 34 (id=328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x9) rt_sigqueueinfo(0x0, 0x21, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_LK(r1, 0x0, 0x0) 1m19.502815922s ago: executing program 6 (id=635): fsopen(0x0, 0x1) sendto(0xffffffffffffffff, 0x0, 0x0, 0x80, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x0, 0x7b7, &(0x7f00000002c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9) getdents(r0, 0xfffffffffffffffd, 0xbb) ioctl$BTRFS_IOC_LOGICAL_INO_V2(0xffffffffffffffff, 0xc038943b, 0x0) 1m16.815691942s ago: executing program 6 (id=643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=r3], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r4}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) 1m14.55800342s ago: executing program 6 (id=647): r0 = inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x60000, 0x3) getdents(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002240)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r2, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 1m14.305575463s ago: executing program 6 (id=652): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0xec) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x200006, 0x0) splice(r5, 0x0, r2, 0x0, 0xa, 0x7) write(r3, &(0x7f0000000240)="c6", 0x1) 1m13.105479616s ago: executing program 6 (id=654): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000640)='.\x00', 0x0, 0xdd) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',gro']) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m10.90829289s ago: executing program 6 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000680)="2c8fefb14851c7f16fa7e6413708", 0xe}, {&(0x7f00000000c0)="19fd", 0x2}], 0x2}, 0x20008110) 1m9.907022762s ago: executing program 7 (id=668): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000180)=""/183, 0xb7) 1m9.722478012s ago: executing program 7 (id=671): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000000000000017010fff03000000010000000000000000000000000000001701000002000000000000007005baa38d33e2e1650de8f13f421b2d4b60252e76171216e42961c3b08d4d3dacb0a7089ff7cbfd613d46fa95d6e2f6e76ac3266c9b1a531c4bcf0e7071f117cca4e883b4a6eb5dee7a9ab4d05d7ee311ab1c55b817285e0c3714ee6137e3b8553de66770"], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f00000000c0)={0x1, [0x0]}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000540)={r4, 0x8}, &(0x7f0000000580)=0x8) 1m9.595085839s ago: executing program 7 (id=673): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) read$FUSE(r0, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x21831002, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x20}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18d042, 0x140) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r4, 0x0) 1m9.226846928s ago: executing program 7 (id=676): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x400a8, 0x0, 0xd, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000180), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40000) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000300), 0xc1d, 0x42e82) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000000)={r0, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xe, 0x14, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe0]}}) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x3, 0x100) 1m8.014187371s ago: executing program 7 (id=680): openat(0xffffffffffffffff, 0x0, 0x42, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r2, &(0x7f0000006840)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 1m4.829061938s ago: executing program 7 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x805, r3, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) 1m3.697787087s ago: executing program 35 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getpid() fcntl$setown(r0, 0x8, r1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x805, r3, 0x1, 0x0, 0x6, @local}, 0x14) syz_emit_ethernet(0x11, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local, @void, {@x25={0x805, {0x3, 0x7f, 0xe8}}}}, 0x0) 1m1.826788634s ago: executing program 5 (id=700): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 59.812834269s ago: executing program 5 (id=703): write$sndseq(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffc88, 0x140, 0x0, 0x0) 58.06656989s ago: executing program 5 (id=707): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m', 0x0]}) 56.698925232s ago: executing program 5 (id=708): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x16) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,allow_utime=000000000034,usefree,check=strict,dots,\x00'/70, @ANYBLOB="14c6c781dcb879623815ea762b25f8a6ea2fdc01978d1f848547463451ff1eca3f7dfa249f41f45e06229771cf821a722728e3f99648648c02370a68596fa44b6dd5c10001faf7ebec378a5a61d3e8fdee523ce5bf50850613ff7d6e817b84ce33847ef8539f230d9b2d12a8bd2245eb1de857bc24e1fb3983665450b9322c5299ba0eb3c7281388eb8f65"], 0x1, 0x1e9, &(0x7f00000002c0)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r1, &(0x7f0000000480)=[{0x0}, {&(0x7f0000000380)=""/205, 0xcd}], 0x2, 0x4000, 0x0) 53.948506675s ago: executing program 36 (id=661): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) sendmsg$kcm(r2, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r4, 0x9}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000680)="2c8fefb14851c7f16fa7e6413708", 0xe}, {&(0x7f00000000c0)="19fd", 0x2}], 0x2}, 0x20008110) 53.635715142s ago: executing program 5 (id=716): syz_emit_ethernet(0x0, 0x0, 0x0) set_mempolicy(0x1, 0x0, 0xff) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "8422eb8f6ce21c9b", "93a706e5a69ade8010e3c76ff96b4a34", 'p:.h', "2f2af80d32287662"}, 0x28) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = socket(0x2a, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) 52.32717502s ago: executing program 5 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32], 0x1, 0x600, &(0x7f00000002c0)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x2d6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) 52.251708854s ago: executing program 37 (id=719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x3200014, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES32, @ANYRES32], 0x1, 0x600, &(0x7f00000002c0)="$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") getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) setxattr$security_evm(&(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[], 0x2d6, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) 19.836137385s ago: executing program 1 (id=792): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 18.001612021s ago: executing program 1 (id=795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 13.458131898s ago: executing program 0 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r3, 0x4b52, &(0x7f0000000000)) 13.04667205s ago: executing program 1 (id=801): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 12.376132794s ago: executing program 0 (id=803): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r0) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="31ffffffff00fcdbdf350e000000d4a142a149a4b4657014a86994ab66b8a5eb3aa1775b6f7aac3c03563f0b763b78d8c36d8b6b7fbf"], 0x14}}, 0x40000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x85, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00') 12.2795336s ago: executing program 1 (id=804): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x8090) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000003780)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x40, r0, 0x2, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x810) 9.455378257s ago: executing program 8 (id=811): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_ethernet(0x77, &(0x7f00000005c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4a300", 0x41, 0x3a, 0x1, @remote, @mcast2, {[], @param_prob={0x4, 0x2, 0x0, 0x6, {0xc, 0x6, "fdcd53", 0x200, 0x2c, 0xff, @dev={0xfe, 0x80, '\x00', 0x35}, @local, [@hopopts={0x2b}], "81d7a040d5c56b1e34"}}}}}}}, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x175d7e02a3aac1c6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40010}, 0x2004c800) r2 = dup(r0) ioctl$TCSBRK(r2, 0x5409, 0xa5) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x34, 0x2, [@TCA_BASIC_EMATCHES={0x30, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_META={0x20, 0x1, 0x0, 0x0, {{0x5c0, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x8, 0x1}, {0x5, 0x2, 0x2}}}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xe, 0x4, 0x2b8, 0xffffffff, 0x0, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0xb0, 0xf0, 0x0, {}, [@common=@set={{0x40}, {{0x3, [0x7, 0x2, 0x3, 0x2, 0x1, 0x1], 0x6, 0x5}}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x6, 0x46, {0x7}}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x6, 0x4}, {0xffffffffffffffff, 0x3, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 8.4305628s ago: executing program 8 (id=813): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1e2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @random="f59c09c55f10", @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0xb}}}}}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000000, 0x0, 0x6}, {0x40000001, 0x0, 0x9}]}) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000200)={0x418, 0x1f, 0x1, 0x70bd28, 0x0, "", [@nested={0x407, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @nested={0x275, 0x39, 0x0, 0x1, [@nested={0xc, 0xa2, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @str='syz\x00'}]}, @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="595a8d911e22c19b7da2ff0fa5fa52ee3855b8fbff9c6ea5a467957852", @nested={0x141, 0x6c, 0x0, 0x1, [@generic="89ed77aab594e82d4130765cfe27a0474702f92d05922f9058b43bbd4ec0aaa9a29b63124516a94dcb22e6b848ff43c4ec16d62c5c5519d4f3be551d", @generic="d39fcaea8aedd4f2d112542cb024be83f11e60b3eb0431b54bf552948680dc1be5500553ff7ec1e37664c17a09e6c5aeaf6a93b6a435f09861142251f6b6d7ad9fff375e4e5fb5524271d4582c9bccc461c18bb51b9f4b80e2ae039a7154e85e51b21b87e65348e6a31ecd8b4686", @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @generic="a68c349c349d87b44b6ccb4c6165748f623009feaff556951d44fa69d1b6c74e019e3ae39d8a1bf06ce795da916b38ef8bfc3b4a34f16b2770bd536bd71fd0b8ca2a2ca1d4c27481f11dea854f922c6eedf306c6eaefaaef25d38008e27e8079b660bf4c383fa855ba1c48c024da9ca571f91ea7e6740fc095d1505551418b7a3e7d2f3cb3b946d42bef99"]}, @nested={0xed, 0x34, 0x0, 0x1, [@nested={0xa1, 0x58, 0x0, 0x1, [@generic="d5814ea826aa7f73f6edca3c5d5131ea47f09be4a580c1621f22b58b98dfde0bc50dc80408c634fb958a3349e70a7cc6d07d3875969a012ca44d37092de8ca6eaa444a5c6aa178a6e4e7b9497e96c5899f744933d157688bfc805a5f5e480946c8f23f08e88018474058b9ad1374ff20cdc3e9da42a4c44ed5a145460aad1349116b75058b1c9dbdadbce9d318aefabc9e3d195f540d8a2110", @nested={0x4}]}, @nested={0x8, 0xb8, 0x0, 0x1, [@nested={0x4, 0x108}]}, @generic="7558a560cc5cb15e4f38d09a7a05c4e9637e7a6cfae3f02923b74b46eeb09f54d7a254d9115d647375b576520350c2781ebe799dc9060dcf8c7b1a4f8b"]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d43eb640dc5061dc35817c8a66c29be82fdbebd9798785e3ed62d512eaab02faf14e764c1b01bf101ee86478dd1981937508b906e98a23c9615867bc5a86bd5e49ce0872231494c29fee4fc315c7340b47bd96f942cc707ae3596528172ed032a24053a1d27449dc197c28f06b02ed97b99ac9b995cb76ef9c78d6e830607914e325fe44684bcae218b28b230c4dd5ede4b048da336b35f7c90f3663e3303ba9f8fe2fcb69223f0d2f72f71980246d580421560"]}]}, 0x418}], 0x1}, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='hfsplus\x00', 0x18001, 0x0) 6.999916315s ago: executing program 0 (id=814): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) 6.998149535s ago: executing program 8 (id=815): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6.996455855s ago: executing program 3 (id=816): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@local, @ipv4={'\x00', '\xff\xff', @empty}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20c200a2, r6}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x5a, @dev={0xfe, 0x80, '\x00', 0x24}, @private2, 0x7800, 0x7f, 0xfffffffc, 0xdc66}}) 6.995178845s ago: executing program 9 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xa, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 5.37503523s ago: executing program 8 (id=818): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000000)=ANY=[@ANYBLOB='@\x00', @ANYBLOB="01002cbd"], 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.37079373s ago: executing program 9 (id=819): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000780)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000380)={0x0, 0x3ff, 0x5}) 5.36930127s ago: executing program 3 (id=820): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) ioprio_get$uid(0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 4.801173429s ago: executing program 0 (id=821): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x1403, 0xc23, 0x70bd2a, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 4.736528523s ago: executing program 9 (id=822): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x1) getxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=@random={'user.', '([\x00'}, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x11, &(0x7f0000000100)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x71d}}, {@abort}]}, 0x1, 0x610, &(0x7f0000000a40)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000240)={'ip_vti0\x00', 0x0, 0x7, 0x80, 0x4000, 0x200000, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101}}}}) 4.239436909s ago: executing program 3 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) 2.777975965s ago: executing program 8 (id=824): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/vlan/vlan1\x00') r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x1, 'vlan1\x00', {}, 0xffff}) close(0x3) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, 0x0) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000280)={{&(0x7f00006d0000/0x4000)=nil, 0x4000}, 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 2.6786543s ago: executing program 3 (id=825): pipe2(&(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r1, 0x0, 0xffffff6a) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r4}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r5, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) tee(r0, r3, 0xfffffffffffffc01, 0x0) vmsplice(r2, &(0x7f0000000340)=[{&(0x7f0000000000)='\x00', 0x1}], 0x1, 0x9) socket$nl_route(0x10, 0x3, 0x0) 2.30366717s ago: executing program 9 (id=826): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xa0}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) 1.981509197s ago: executing program 9 (id=827): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd2a, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x1600}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x4040) 626.620067ms ago: executing program 9 (id=828): socketpair(0x20, 0x0, 0x0, &(0x7f0000000240)) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000005, 0x2000000000000aa, 0x3, 0x5, {0x0, 0x180, 0x20fe, 0x2586, 0x87, 0xd615, 0x7, 0x80000003, 0xfffffffe, 0x4000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}}}, 0xa0) r1 = creat(&(0x7f0000000200)='./file1\x00', 0x2) close(r1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000980)={[{@noblock_validity}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@noinit_itable}, {@nogrpid}, {@nodiscard}, {@jqfmt_vfsv0}, {@noinit_itable}, {@mb_optimize_scan}, {@usrquota}, {@dioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x12, 0xfffffffffffffffe, &(0x7f0000000040)=0x3a) fallocate(r2, 0x0, 0xfff, 0x9) write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006) 473.882835ms ago: executing program 3 (id=829): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r6}, &(0x7f0000000280), &(0x7f0000000240)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$inet(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 356.223392ms ago: executing program 1 (id=830): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xce22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r1, 0x2) listen(r0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='team0\x00', 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) listen(r2, 0x2) 303.403154ms ago: executing program 0 (id=831): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000062c0)="23db5037805f177d136115e6a1a5903469af39c1fb9cb38215fe64cff9f2f0444a57e22b0cc5cb4f74c9792365400d9e1c68539ea5eff0a5ed0864814d39251bee8dfea69aa052d900bc0c792e1c9752b7d3a3222f6a1ad3e44c1f65617b128aea51911861ca36ba7c96b96b2fba0fdaa49ffb2612f3e81fe565327dd9965a60046442c9dcd0d552c6a00388be3b438a08883c7349761531880294ad9887db97d8c2f74921c57910cf1f5cc528e17bd5c3746b6202f26d621535aac5f7872c2cb3295e42524b5acb249b2d1ac1b53a4e31271decfca3fad2e2f740768adf00875c18cb7d115150f83ceb73f77a1f61f1666c2bb9f6bd9f0fb55b3a619446e32bae2a1d99aa49e5f3822e048f8be44b707f2db10d7916ec9a10a695d573d871cf24959c3d15e61344a68309d186956537c6ea8532fc2e1c7649f8409d8dcde4c8ee1530470ac9c870f9f1837574e444ba6addf5ddb2dec67c0e76df79f265b403818dddb4efc27c90985ed69a48b12056e548f9c99edf80d2b195d26acb1127661727a0600257f4b2546513d03930a0638a71bd3223e51fbb75c832ef737907f2f4d3f0505f431ea02783c798b5c4579c99961fb73dc623a0d99c1b306435464d413b537d42c6444851b36482597140b22fbc0ebc7e795b2f96739bf139f5823bc869ede547da4f394fa1b1787836095e1013264042e53d5006ea059d0488cb2f5ccd44b30d25ea53c2dda71d112d7d441dbfc9f8462c99c098b1958c80b237d83c32f2759c9a9c081d7d7666a477cfda59354309b09f2a8b9f6c3077b0df1e8d0c71ac07232de4f437107cb0eb9b47b2267efe31938a337cf11cadad72ced56895bb14763cca5bdadd245d801e829a1eb3bb4ed851a345918efd2dcf8d38f66badc773068e6a2ef59b2bb838abd8b043cf6ac54550f3fde1bbb9e761095e4b8ef1891757d376be1f778142610c0acbbfc697f51fbb7a1602ed46e82813c74f41ee2bae818174809f3692084bea7310ebec3d6166702ae62aad84313e19b4d145167185ea8d53cb21d099fb592d7d7f8bc305dd375b5c0cd73be44f49ff53cee220085d4706bbf50c6f63b02e7e805e8fa4c73046a57a8700886da29ea53e5a316e7b011c44a0f7be5cc5cb5641ba0069ff591eee18966c7f005ef40046a5fe2bf325b2545b009867761264aa9611d184fa372ba3c5c33d9a50717210f7cec7f6dc4418a87a797eb6aaf6ab3892bd3f559547c88d8c29646c8173fad1588f52beb34ff863be65e7ec1598cfb465f270bd5532fa7035aae077eedbc846058fa19f58ffb1cf0f1863f6d33f2e5c454d18b66be766ca369af2cc9656fa34c6c10e4d4da44ce5e2370aaf60c4e130da331d3489e8f44c600246323409fdd35d11da27128c9d64be65dd3a90c1546a6eb9185cb6d3a4a9cfad0e41ea03896fd2346f745eb3563d7a79fd345b037c040e56f0677840bf9b0d295bcfa98b931464c5ce9fcaf745720deac2d8b4edeffc0fe6f089ed7c3880959fcf8e31f7b7054bc4f5c9d3ed3f66c968d0bc20b2d66c374f030f3f1965f43a98519e527caf693362412d523eeb38c8b016ff77f78f833d7513e4b5a53d5ed5143916673f822ceac9967b8788bc6428283181eaf8d99e48286aacf4f658a903e9f08659450f7f9483807c2e013a1d9d199f18886a8cb4e14d41c71e5731455a4394551281eca12a1bb6ae717f5da2949175d0f1f3d718b761dfc1099c7d9d8928c899ac8e936e69d19fcbfcfdee83b68ef8e15eed41a8ac0d54aa92d7d2ee58bb4799f378225ec9ba4709e5ce2b77208ecc85c22c64967a9ef3360c54d311b8917ceb7b432c90cc5e98de9327c1400f8ec89261b1d77d8874b0bbdd2c5eb59df415705de52b08b0e12c07fb7367c6d461c19f282d51e482cb4fb9ceb0249ac2d6400ca170fbd6c0063224179c616bb030a5c10102aa2eea92f1e6f5828590b250b09e6d1a9535c298a68160b7c281fecdd295dc3396c4e6eb3395d5a677d5fa95a732dfdef81f4346545dd1a74bb3aa9b516699bdf0a59165077ab459a5ffe0dbb3ef8afa7a8382a8441e0c36ffabbed8f93f4bbeb97e5f6a704bf63a0de9ccf8fef643ebc530a80920931002003b027014de317c42f861d98ef4fef66d232d9706e6bd263347384dadadaa43a7e106bbb21bd822d468ace171b3f04b996112135b63dcbd612b5888ec40da583ab549c340ddaf5d7406c3e99322c68874214356c1fd9b5f84348e629cc3487a901d1b7a2fa531b1509ac1c93de3da9f1c3773e3a2aba2b29d2419f240ae6d24ed9f14bf0b9b0f1e740a2db06dab64d6386f950bff4e4c94160ef4b832bbde3af4937b7528658b5c16a51cb22193fe99385721ce5b048d9338e289dcb40683140c413eca52c8e4b64b306f47569477379c864cfb3aa3e349262407d3935ab9a0916eb0f6db2be71a7eb8f9968dfac44995d5bff8ef617fceeaa448f5e5f8d4b39e3512fe7ae9ee1d8a0d5912b6148969ab0325f3f76e2340fbd67ce156bdf638140b3ccdb08e5049db15957915cb05db8901249b10c59cc5c3ff836290e3334eee2df387e44c57b4d6198c3749f5dc57f6c3de115ced6b43cbddd762b58f1fb40b2baf3b381febdc073142e30d2e9a1a69e8d86314221e540f195509d223b206173dc5406865d8064817c30c284c034035a63190ab86df3bae4168c58e01d2251748fd5d9d610024129e83a5730fe83cf0918790e6854ab765c78649b91c06655f0cb9e26d8432df78bbadd99583b6a8afcf177ed6f339e08c0b36a16c6d31d8a24cb6f2bc3ba58d7711b6f8b988dc3e3144be619548457d4f40509f17eeb186cb93a2928ecb951593d1907c8bbb9f4c8999caba3059c8e73dce54ad6f87bcd51d559f7759902b14e68d3b845c0b179b38f4e6f0bd3a89cbcd5ebed9972102048647da1eda5c8456442369f4ae871d4037ba26f27d27371ce57e23adca5af8dc93f934f2ef8d69ad3b2db66657b3868dd839c2b522f5461f24407ef091b77242fc70a48b7eec45f3bcbcfbc6bdc36e4b67295020a345233a32a0a0af4d03a53ef67e69716d5ae35342722afbe7558946475a9ebf5b39c18558a0011f68bc8a78590b0cb63618379a512790c42d94bb239dd3ef5b8d1036cf0391aded8802a7a447c38f231ae611aeeab9bba44cd14369473758b64108d0bc9b6bc9e9b497c2d1d2acbae7c620a55c226cf371331688eaddec61fe961c5fcef71dad45820ed0ac8dc7641d82150f1318ac15aa41e7be585b6a50da1b3cd95239ee61cfde15aba80ae8ebc21ba4540883c6f44cd35b6b97da4640c97f5a2b6efa8d184fec823abc754ab8a0db6c45c2293e90d9c154c4a3e0b9ec2b6113ce6583b80f0d234dec9a9815067244733e2134b9ba93bb9692fb44200bb5501bb109f2401e8baaf0115d795bb0346dfafaf953bed8e9a52a5b9b02d490c55fd89daf311ad5e08b070a9571f696d6df4715c8b69b840e4e03d6f361326e20d9546c47b3a63163e7df9bd260621358c166177ee7c69ed63a8c43dd4a78543aa9f922c0ef527f4aa61ff65bb14595f518412ce25a1e103df89cd4b363593da16c11d80a23a9b5ad8e3a7be8f697cecf82c8fbd889a4f743c839b67f7ba5453b10bbf59b1e4f4e821872c061a4125c0c15c1ca5164efe61a58bb54dcedc849800a6021a448d4660c3b85e2362b7cd8ce95156fbf408a09a30a8ccfc3554004e9f9a35382907eec00617e2ae1f8803146bc8c28b4f3bf3c6b183ae9248e7f05c4adce3e0b7ff29252b5be9b19431e3fe612d471f52c5c34cc12c83049189f4d2e5ca516df78766ba3449d07ef9436c68052c986d9dde8802c931194e2ce34acb8cc26663a09348b15c6c145d26306bded0d1f482803ae6dee26562b03fcb183b69ee4a0491e8776ecdadfca395cb4eac2948d4d64321a4e669f2f663eb54f05f12ed9c685835c3e79f982152dbe701073b9a4ab2932b46ee2424a5e18bbe5f25ce0b898ff6937927f4670defe430ac86021226ae055daf39b535cdc0899fcc99d15e67d66bd2dd89bb21b8d2689a8af10a1b0bd44103c469922c36fc0228d7b6febf5e366dceecf8bb1db385c8ab95d86ff09b76c2fa6282de81fd6864c495a4c8295df61a2548e1b81c3e3f30d7a41216801d6c2d1743f66ae2055756083e8bf403d436b8244ac214f4d84a693d13f299ba267401d094f2df70840e8a980622794212f0992ecf5a47980ab2cf7d5a6f12b0a489af3c3c847ac59bc89f36fbb0e08bf283b68213a17de38b3a45eade6f0b198def408f7711c16367bcc0ded794a9a323c7e7f07fad96ea9c4d7344c26e43844a27c21076b8d7cd07677602d91eac825eb5fd0631755c2dd1dbf7bce3eb3c3f7377fc6080ecd0b894e29769845725943e25932d4249abb4ab78d4e2ff2e2df42c8d884cd6bd13886cef080c6491c217abae0eec6e9d4d49eab6657f15cfd38e6cd6d0bd33198c4685ab302d0f46e42f4a5d5bb7d2840a0a8817b98a856700d4de74351896fe7d7d5a0d1bc57fb4c828aa51f9637807aeb905780f239527ed4affd83f68be8b7ad1e10d9e797ba39cdee24f7be0a0ab0ac22ea3968dac61eb4bdd522c9ce570edf63a439abfd9954bf6a16c88d86157d05477200a83255cde279b454979cee4de00e81cb44acdc4295c877566a749ab5b91d250f03d46ecc14210c196700338eea028c930ce104f20a9e7fabb0ad1d314ec1a2d97d1d1b9e09114dee0e3e513eacede01971ff85dc98634156073df4e8acd6c3aadd615adaffa7a81573813bc4ca21886ddd532021bba5c84b34c34665534db48d61903a03c1cca4ed955ca92c1e33b7664b494e3db6d1e637a49e537808a2669ebeca301691acd4fab0af197b9c7db01b7862466b568ab3a4712a25210264fb297a6b679dfc3fceb65bddd1a23d5b507a0d6da83d73b716d971c5179a92e57b9b93451eb943845a549de737f2d082a83682c32649b4941e787758ead9d2c256b2b4ed1e0255952ce83cccecc39e5bbdd38490f1960b26e5379943be3d9a64b5149c84d577e5fd099560baa292befa06ce9065fb03ed432a9e055ca4ad0e952f8368b3d230fd5239726f79f4c98a0b4a9648382b245d324cb61049562f765f923fc657ef36747658494d78590a1e27a2d09856acf50c3b26271c6d5aa96e8ff9bdb9043859665e21ea53a050c335cac414bbf27b0328ac2c7450acb26b093bf232358afd1135ee50ac3fb26b5f0256ccdd37033c8a59740607cfd549d4c6540afe4a6b4425ae1f633872dcfb5da8d0547cf0c4888817b71fbc7c45b2a641e9c1a76b6a6be124402422ada35edc02ed997d6b87b361aee95a16d2c528d89a52fe40dfd83434969bd86f02e63fc1ae72941209af39a08cfbb4c320bc47d853f5dbaf0cd60ec54608aadbc382fa6b5cab3e9cac57bea26609f4c79f6a6b4eb4a9336fa95783b0c0c366f36d5d6b8310b3cfdb800207919a131bc7f984f7fa11fd0bf2c89e060e9d1286e453fe97363ef72bd6eba29a85ffeccdc3bee72e12284333a5a40622c01619558d2750fc45abfa22059ebdf743f8e50ad29770d19f84d8a34232d6918514769b3bb2a1ea5e59e9556332ba669675764458e9349a1835c501a93e91dd3b31018979880a9913f54ec1e8526b8cffcb776b97fbb9424faa5c5eb60d2ac74955bba4b5182571d0d9f84f0df1baa722b20a78c9c0011c667f688b58489c9e450d83e40ac5eb41c5564b6d76a226448abe4a3f499927074125aa9c0e7e704c36df5bb110a0f15f8433a470e81db414827d5ce21ca1da1c8d51d746d1e1ca110127c15e92afd75d3cd05ce0b632cfa03745de3cdd4b57373d46676583c89f045c26c6fc5793e5489555ced08f83ba351135834a2028113c319af30cc85bc01a7f8208822d7d607aed0d2e12c80aa009100441b75beaccfe0adbda7e8bb870edf4963158794c8c3a5baacf6eec7b5efaefb7602dab8409d161beeb281cba21f1da0ccdc092d0433fb940d79699ffeb87ea775829a6e7e3b308a2ee0b7aec8ac5f35eed61be374c7c77196f7119a8882deff68230f461cb917b0ccb2b8597efcbdd1003b7b77b2c601ebd4b45c35b8426f7b9138ab3df0ec00819604ab8e1e64cf2aa2282b1269585af127a268cd207f964edff172e555398a16df44bdc52889538c3a27f8fbfffb61f7aeb55b259952bbfea81d73058d8b0f78ece9dc08e660437d21d4e3ec38b19e5afda7a6e33023f9158db8a1c14dabd9b8b307ddc66927f7b19df5e0da2237d98ddd890b81f1963808977d02198e8ae2e97419dbb1f8e51cad36a3424b955500fbdaab6ff8dbf028708b1f951fe43864b59b6c2368b816c98023d4480a91b3f1059e9c214bf55a7f8c7da907f79ff5568fd787d3aa022ab9d03cde551f7e3295f02c4f3aa37e4cebdd968c0f82f09eb004fbdb1a4ef3a0d426691bde3964c29ea65622f5d3ffd854053545ba1ec164495e4bef4845439c058f9438d13be7922b656db499c246ee6176a15b97e6a68e42f0c703033b699504e1f92b43054c7237199bd013d96faab47433b6b3f91dc66368706439d4ef7da3942ce8b9c1c9a9d0643fc4540e7d3f1c3821267e866cacd3e904be9f9df80381eec09eb2b0d745ff03ffb199b917a14fdd8fbfbffe8bfb0cf7023aa7183301a8a41e7097ff9f5247f8b78f7d08bbfc596a81047807cf0929677222e7e9e921b294e04088c3746d8dc19294645f1c093a21b4c5e6d92e54dd90465b11dd5d9d42af849070edff4ec63970f4088daaa33afdebb28d01df5ee043a8150ab1b25d864ef31e20c84696596cfbea92d02ea29c4a3933c41ec68aee7d68d7eea7f30d8920e14e62be42bcf856d7a58f46fdb2438b023e974f77281c5a462553627e9614504cbd3f1cae6e0fd9f7e89d9bce48946d0508616fbe542303dc542982c61d7bb4afbf3e76bf1fb2381cdc99f2175ef944dcd826aabdca2b7678db5262733c69ce504c38e7deb7adfb9b6d8bb00d8e4251e0438417ea615cde58bd76c2427b3d7a0578bbbff9fde2abbc5d60307aff0050b18176158aaedb34e283886378ff798b4f74e0a0c95d64271f1916280dd247304d9201c67f5e2640d9706add8703cac81795a0190107e2bb2941ed13738595da1c86ba0f68e2283a435cb5f162c74071a13dfe2266d05abaef080dd6b1dade115e883e04f0bb4be4d91f535ae6f822b02e814e65d2b7807d199a23d3f26209f6c9f93602a3a93ccfdebb5f8161b7928059674e15820d1848a980c8d1af5a73aadc5c402fbb6e730ba51227913ca27f0d78d331d6325d0a7926c238296b2a22b10a69cdffeb087dfe175511ed8e2cde8d7dae140e4ce92f892b129d9940e4a30b19f822ef7611b8750eaea8e55502604b7d2358c09a217af8be6c86d67cf6ff6130c971c9765d56631fe6224fbe1e833d497b534fbf6b030af93691f59295279aa1bdfb5d5d9d4668d5aea70e2b8fc117df0042e91c7e6225f27329727ed6e14a87c7943c040dfee4e5c06a20251c39a45ab4865951b0daefb9c05571fdcc21d1761945bd2b8047ccedd6f1e708646fbe61e75bb2728e8cee893d7e6f642119e786155a6cbab057d6d83b77716145119e974ad7355179d2adc3d748fa249cb58e32e6791d646240c05da4427b2f359976c8fd1486c604cb7ee647e24633d8fca8314cf1f85110ca6351156a2b26e44b040f7d2810acd36f45a3969c1fafd1a7e0bc14fd9b26593375be8e750c3f6534ffb85904d15d75fba05dac4a673de97f7543ee931724cd35474cd7ff5cf3e8abaf206f3030e92895633fa9d8499ea763601560260109dad18bd64b990531fc5377e6eaa5da050b98e1c6515ea48c7de1a15b63283d4a694cbad379356bfdac50e6c343879e29f6b9ab425600d51f257ceb35d0ca00f83cf5bd734223de716747614666ba1f1a8fa756e5f3ff0fc94fa4bd4073bddb0098cf565ee40af5732ee9218d262e5b64ad6b8118c54eeaf7072f2e15514a401779b425fa89d8abb1750e56cc3108dffdcf2d3fd86b8af4560d56f7ff0702154211f9949e3992d93e66892b297fa2d4bfe18de3fd74e96c9d30eb14fd458fdbc9e9a34e00f3280dd732520147fa2a8fa83e91dd0687501466a300015bf888c03fc08190c2753d7719acf6f84885c4c5642f466c1984f15a7716a9b608ee5f1b395726bcc8519766667d24d11e396e62ea39640c9e73e4e9e9e5076d7019ca1bebbd7097807f46b3b6fcb96ed4b433b25ec551fb176a5fa252ed1d81b0350cfdfb8069c9916495bef3a262b6668910896c0b37eee40547c663a901e92f41b417ac50e88d058d021a8f9a5783bd936cca4962bec1c9886689cc547970f9215232596392515182e563f720bb79d29baaabf0e2697de6500bc677e346847011ee3450358c0b16ca528368b5cbb8df5ab974a3cef072d20c9906fa585e0f3083ec6d8507b8561f64e65aa1aecf825fc47ad1459c87771549fd5c9a9cc094e7b1179ee1e90eff7158f28f59f029d90e708f4ec50b4f67d8b4bb7140065528354a7e25d63e92977183a0284ec22aa923210f0bfea89cca53547137381e5de0f60bc484bc2daf129b0380244f1ed4bfb674eb2791e76dce33cae684ad36620d5d67cb587f840caed316b7439b0e8c3de0e065e62680f3997369be3466670278168c9a1a644d870e3a8d0a79b2b720e8c3c51bb9133532beee64319e98714bb2e6d5c0b723962d923b0ef454361d4b3cb470bf8c39031ed4a75267f499741be15aacac92d8e6afdcb01a2e7d2dbf549ceb2a2108c4079c620f05ca1bd31d631c2c8d35ca0d73155f56ed020c25e389db356edf510ae088d11b5e4fed51d0dce4d3aa04924b09c28200ede5bec1a8f38cc5f081055e0f28d75afc4d588ca0e828d00085d150beafdda17b8df9e7d9218ea7d81f2e076412901c5ae04d6929d717fea2fcc8e5a1e69dbd7b5258799a2fa5eb108b6cc35dfab599fb27e6d75f1030b83f452af8137830337141f031942eba83123d3f87b5f01623d4613e5a44b4952c300baf3d4d3dbbfb0ad024a19b3810a174ef8453d85a25822f66e45eba2490f29de1077683ccc32e3517f88b51e010672a982f7c8591450c9ab1573143aefb61c17ebb0c92dcb0494d116b970c2a827a6b3608ae10d583d1f7d092263fa873de9f31cd59bc9491ff012059b63a9120af89477f2ccc34eee7bd66de60af64730c879128b49d31da6400c2471e0d5abf707e560574b477b8e20ca45d92182d639eb434e14aea1a3f91ad8fb60e4859b77389753990513181ea3a82884235e8520294359435cfba220502b591fc28ac36ec697442657d290bd7aad7fce53a3f1766f2bf7d55c24d7c0e9c7a71d6f1282ea1478e0a36378b50e4fee281f686bc53f50138036e2a5d6199d40caff084fde7b63b3c0a47da0791107c3218330f7c2e2c7609aba202fae5290243b6033379eb15edc572eee452008e04c9b53efd5f3d88327317b38934745bc3de4c55bd818febc7a7953bf03c4029f77177c2a974310f0485aa46252f1000dc71934947287c38ea5854f29c7b82f630afb8caf1fd880670307b155a6e7feddc019cfbbbdc18f3bc03da3bd371d93ccbf56bcb39eea55c2d113efc148127c30089d21ce6a5088dbfbcf8f8d75c19456bc962c371548634a95382acb5a0886efc46a87bdc111dc0d1e54084cea0d58054f00762c91d7fe0f0fbcf4c280f29f9cd5999a5e8c6f507f8080d7c7ea9a8685be50722cf1a082f3728dec8d6152cdc72f8da6b1805643c042f4f6780ba79cc8a2165d9d7acec8ab2f421bc3e77b51c62c4bbb262b5674ea7d2dcf9acb894d050e91b052364322a5b08bd9667249571c004fb495da7e24fc5620adda3af6848ccf238911a52bdbff766e4e279ac274afa2c2302faba25b5fe98d972a04aa13f77c0c05d7dd82b0a19f1ded8cf5f99c80e392b0aab1264a29e9fbcf0b69f6b0a9f2332e09ab74dea7277106d0883bb264e279c67e5bc69009225bf4fd1a8532f9392a011b55a73a7cf8d16a59d695b2a65b57fad64a2041f8c28804ee1a48845c5dab757d04f1d95520aa9ddb69904d6529c0e14bd789dfe37067073b3e0e136ae2aebb1c34c55b94ce942f786be4b45f801f35f7c768d91a460b92ffa57ff675f0b4b00437a07f871a8650f21b2bf7c722c1d9e860e8955fef5699ee53a5f6fe46fb9e5e17a1c69fe2538af4718b7215ad2c00c3d420589a8653ee511b809945451fb8205b19ce377c8d0253b05493c557cf2bd8ef208e8fc01beceea1acca38d025f328f28d69bcfaa3adc6d9573a3832dc3f3c758fe08cf9cd0c32acfddae81b3682869e8aa9725b64336252aeb2ee8eb78f0721aa3158217a3009948adb297c5ea45ec26cb6d963c7be47ee1b93fa136ebe73a21936df0148fa311206f8bca2e80719aeca8745ff74ddaad5182644762c66333f942d9a93c467d5f9fd5d0dbbe57480362d4bb0f760294f4eba3e1b08047d256dbda157635d21a43aff3a71f6ad574b402bb36e5270d7ed082c6fbae07771721513ae9ddb22d23b00733046c898ee6ac05ef8a51ce41919e1f241cb98e0592ace68214620ba1a748ef81131661f58f1635713ca2873e150a3e848c8d2ebd039769fda112b73050efa4d1c35dbb46ca5a7b7ccbed1dcded36af272f6838b4c1e7e6778e7e9ca3d794f275d49c9e32e768097349118d2337e7c031ada38d0cc5c04c286ff93083f6d58d73a821118c93432fda9a8c76fa2cbcc093a7decac8e4f001ecc9f67faf1c2f102120f0618469cf653bbd5fcefd4ef2bae86dc4f5393b840f9f47140cf7f46a186c21878a43612a71d3b540b9994f010ab623f878264cf46c7366d0bec5d43d481b47846091fd3cda73a9a28ceb7f839eca695c9f084a16c812475f6575ef2368c88cc6655f47663ef69ce4779fe3ccc4dd85a07a9e4c6f39f42690d231f5727f45c247a53fd8df029fcefda4f328658435892519c17205a3c715ad6bb7387d09a5e387c83f008daf626f5977c66203af1143ef7b59ccd8e3c17bb156bca317861f0b9f222ea63c044075a3a74beaf05c23d0a75caa60397d831bbe507234fff154960faf0f02776d3f9038c955bf0c1ec9c92523cf0b855c18d6ac3b35d437796420ba3dfd581dc6adac64315c1cb1a2c3a45ec4655bb2bd6e0b4a3082281ed0697a213d1d93142e96b4fd57431d2f4547451d008ab58bcd9765ccf3ca3297becd5de9e2be0263cfca09935c9334b5e687bc7e7057dc2ed03873be22200c9fe32a9497dd00a336cf4c723ead302340b5cd1fef8cd88330a9089fc93af4ef739295b94407b291bf33f4f39c936736e1166106428f8796a4b92805f4dfcf46d8692b54e40a9e8584c0eaac4caada87bb33f553eafeef5051b889402176ab766936a38ddd7e5205d2c87e133a02e84ab24ba2d889a4c4db8cbe18b271455e84da716f4a32acdbc0a5aaba25a2ec757c73847dd1c4ccb2967c651e5257692a4553dde227846bfe2977021805f46a287c835ea8dc5", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x2040d00c, 0x0, 0xfffe, 0x2, 0x1, 0x0, 0x0, 0x100, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x130) io_setup(0x3, &(0x7f0000000200)=0x0) io_submit(r4, 0xb, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}]) 288.827955ms ago: executing program 3 (id=832): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1f9, 0xffffffffffffffff, 0xfffffffa, 0x9}}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000600)={[{@nodiscard}, {@noheap}, {@discard_unit_section}, {@discard_unit_section}, {@segment_mode}, {@jqfmt_vfsold}, {@compress_chksum}, {@nogc_merge}, {@fsync_mode_posix}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@lazytime}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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") r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x48, 0x62, &(0x7f0000000600)="b9ff03075fe9008cb89e08e086dd", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x28) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r3) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r3) sendmsg$NLBL_MGMT_C_VERSION(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030f000000000000000008000000150001"], 0x2c}}, 0x0) 238.713967ms ago: executing program 1 (id=833): ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x64, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r0, 0x1, 0x0, 0x4003, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x0) 19.739109ms ago: executing program 0 (id=834): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x411}}], 0x48}, 0x0) 0s ago: executing program 8 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000580), 0xaec, r0}, 0x38) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): iled with error -5 [ 78.142815][ T21] usb-storage 3-1:0.0: USB Mass Storage device detected [ 78.200847][ T21] usb-storage 3-1:0.0: device ignored [ 78.260120][ T4189] EXT4-fs error (device loop3): ext4_map_blocks:631: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 78.287219][ T4409] udc-core: couldn't find an available UDC or it's busy [ 78.310695][ T4409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.343623][ T4189] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Out of memory [ 78.401461][ T4189] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz-executor: mark_inode_dirty error [ 78.486683][ T4443] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 78.633461][ T4409] misc userio: The device must be registered before sending interrupts [ 78.671722][ T4230] usb 3-1: USB disconnect, device number 2 [ 78.683573][ T4448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 78.790004][ T4448] device team1 entered promiscuous mode [ 78.837822][ T4448] 8021q: adding VLAN 0 to HW filter on device team1 [ 78.878281][ T4449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 78.929008][ T4449] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 79.041358][ T4449] device team2 entered promiscuous mode [ 79.047821][ T4449] 8021q: adding VLAN 0 to HW filter on device team2 [ 79.058959][ T4449] Zero length message leads to an empty skb [ 79.135658][ T4455] sch_fq: defrate 53322 ignored. [ 79.793790][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 79.881662][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.64'. [ 79.968750][ T4477] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.977805][ T4477] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.198273][ T4477] syz.1.64 (4477) used greatest stack depth: 20336 bytes left [ 80.428013][ T4491] tipc: Started in network mode [ 80.510846][ T4491] tipc: Node identity 4, cluster identity 4711 [ 80.559811][ T4491] tipc: Node number set to 4 [ 81.135099][ T3054] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.221452][ T2302] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 81.567957][ T3054] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.811459][ T7] cfg80211: failed to load regulatory.db [ 82.127151][ T3054] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.375313][ T3054] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.436147][ T4510] loop1: detected capacity change from 0 to 512 [ 82.442620][ T2302] usb 3-1: unable to get BOS descriptor or descriptor too short [ 82.506197][ T4510] EXT4-fs (loop1): Ignoring removed nobh option [ 82.521717][ T2302] usb 3-1: not running at top speed; connect to a high speed hub [ 82.601700][ T2302] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 128, changing to 4 [ 82.614754][ T2302] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 82.626286][ T4510] EXT4-fs error (device loop1): ext4_iget_extra_inode:4573: inode #15: comm syz.1.75: corrupted in-inode xattr [ 82.633728][ T2302] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 4 [ 82.698940][ T4510] EXT4-fs error (device loop1): ext4_orphan_get:1411: comm syz.1.75: couldn't read orphan inode 15 (err -117) [ 82.791474][ T4510] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,nombcache,resuid=0x0000000000000000,usrjquota=,barrier,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none. [ 82.841895][ T2302] usb 3-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 82.870710][ T2302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.913801][ T2302] usb 3-1: Product: syz [ 82.918717][ T2302] usb 3-1: Manufacturer: syz [ 82.933947][ T4510] tipc: New replicast peer: 0.0.0.0 [ 82.951069][ T2302] usb 3-1: SerialNumber: syz [ 82.970045][ T4510] tipc: Enabled bearer , priority 10 [ 83.117663][ T4515] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 83.350345][ T4507] chnl_net:caif_netlink_parms(): no params data found [ 83.381657][ C1] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.488052][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.73'. [ 84.352091][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 84.901782][ T2302] usb 3-1: 2:1 : no UAC_FORMAT_TYPE desc [ 85.037323][ T2302] usb 3-1: USB disconnect, device number 3 [ 85.215039][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061f9d400: rx timeout, send abort [ 85.362569][ T4507] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.399588][ T4507] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.458109][ T4507] device bridge_slave_0 entered promiscuous mode [ 85.505209][ T4507] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.525384][ T4507] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.546498][ T4507] device bridge_slave_1 entered promiscuous mode [ 85.576456][ T4563] netlink: 24 bytes leftover after parsing attributes in process `syz.0.85'. [ 85.706966][ T4507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.715728][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061f9c400: rx timeout, send abort [ 85.726945][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061f9d400: abort rx timeout. Force session deactivation [ 85.809191][ T4507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.846710][ T4567] loop0: detected capacity change from 0 to 4096 [ 86.059673][ T4580] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.101567][ T4174] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.146285][ T4507] team0: Port device team_slave_0 added [ 86.225588][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061f9c400: abort rx timeout. Force session deactivation [ 86.481832][ T4174] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.546388][ T4507] team0: Port device team_slave_1 added [ 86.600327][ T4174] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.747011][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 86.825297][ T4174] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 86.933506][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 87.094490][ T4174] usb 2-1: SerialNumber: syz [ 87.118967][ T4588] loop4: detected capacity change from 0 to 512 [ 87.283734][ T4588] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 87.378884][ T3054] device hsr_slave_0 left promiscuous mode [ 87.423747][ T4588] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback. [ 87.444654][ T4174] usb 2-1: 0:2 : does not exist [ 87.534944][ T4588] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.552177][ T3054] device hsr_slave_1 left promiscuous mode [ 87.599650][ T3054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.611659][ T4174] usb 2-1: USB disconnect, device number 2 [ 87.622171][ T3054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.683114][ T3054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.691145][ T3054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.787113][ T3054] device bridge_slave_1 left promiscuous mode [ 87.818912][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.888172][ T4273] udevd[4273]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.914095][ T3054] device bridge_slave_0 left promiscuous mode [ 87.925275][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.960501][ T4186] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 87.988697][ T4186] EXT4-fs (loop4): Remounting filesystem read-only [ 87.996736][ T4186] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 88.017100][ T4186] EXT4-fs (loop4): Remounting filesystem read-only [ 88.025317][ T3054] device veth1_macvtap left promiscuous mode [ 88.039420][ T3054] device veth0_macvtap left promiscuous mode [ 88.047039][ T3054] device veth1_vlan left promiscuous mode [ 88.056515][ T3054] device veth0_vlan left promiscuous mode [ 88.197727][ T4622] netlink: 'syz.1.98': attribute type 29 has an invalid length. [ 88.259479][ T4623] netlink: 'syz.1.98': attribute type 29 has an invalid length. [ 88.401722][ T3054] team0 (unregistering): Port device team_slave_1 removed [ 88.420976][ T3054] team0 (unregistering): Port device team_slave_0 removed [ 88.439640][ T3054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.460516][ T3054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.542497][ T3054] bond0 (unregistering): Released all slaves [ 88.619004][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.627310][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.663380][ T4507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.676310][ T4611] netlink: 20 bytes leftover after parsing attributes in process `syz.0.95'. [ 88.687414][ T4611] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.696735][ T4611] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.717339][ T4616] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.724944][ T4616] bridge0: port 2(bridge_slave_1) entered listening state [ 88.733120][ T4616] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.741068][ T4616] bridge0: port 1(bridge_slave_0) entered listening state [ 88.807371][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 88.807388][ T26] audit: type=1326 audit(1776910770.832:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4624 comm="syz.0.99" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5754045819 code=0x0 [ 88.909708][ T4622] netlink: 'syz.1.98': attribute type 29 has an invalid length. [ 88.928253][ T4507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.936272][ T4507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.966506][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 88.968436][ T4507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.161447][ T4507] device hsr_slave_0 entered promiscuous mode [ 89.190426][ T4507] device hsr_slave_1 entered promiscuous mode [ 89.214180][ T4507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.232924][ T4186] syz-executor (4186) used greatest stack depth: 20280 bytes left [ 89.245966][ T4507] Cannot create hsr debugfs directory [ 89.871276][ T4507] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.928077][ T4507] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 90.012718][ T4507] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 90.059432][ T4507] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 90.524965][ T4507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.591367][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 90.618601][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 90.694117][ T4507] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.782101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 90.841941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 90.913355][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.921760][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.951046][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 91.016189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.076913][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.136109][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.193051][ T4538] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.200619][ T4538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.272396][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.328020][ T4645] chnl_net:caif_netlink_parms(): no params data found [ 91.381812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.425663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.475831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.528801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.573662][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.614764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.683358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.722958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.779933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.799283][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.850108][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 92.041550][ T4645] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.049587][ T4645] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.058332][ T4645] device bridge_slave_0 entered promiscuous mode [ 92.163251][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 92.172419][ T4645] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.226207][ T4645] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.286381][ T4645] device bridge_slave_1 entered promiscuous mode [ 92.442897][ T4645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.498544][ T4645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.631665][ T4645] team0: Port device team_slave_0 added [ 92.677950][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.716595][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.744742][ T4507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.775497][ T4645] team0: Port device team_slave_1 added [ 92.882274][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.920997][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.003776][ T4645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.049166][ T4645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.086994][ T4645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.243109][ T4645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.963207][ T4645] device hsr_slave_0 entered promiscuous mode [ 94.034726][ T4645] device hsr_slave_1 entered promiscuous mode [ 94.057809][ T4645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.100674][ T4645] Cannot create hsr debugfs directory [ 94.317444][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 94.432744][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 94.481061][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 94.489946][ T4707] loop0: detected capacity change from 0 to 4096 [ 94.658332][ T4707] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 94.736379][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 94.789407][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 94.817452][ T4507] device veth0_vlan entered promiscuous mode [ 94.843429][ T4717] loop1: detected capacity change from 0 to 256 [ 94.854435][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 94.887354][ T4388] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 94.887729][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 94.912506][ T4192] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 94.988829][ T4192] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 94.996730][ T4192] ntfs3: loop0: ntfs_set_state r=3 failed, -22. [ 95.000955][ T4507] device veth1_vlan entered promiscuous mode [ 95.024795][ T367] ntfs3: loop0: ntfs3_write_inode r=3 failed, -22. [ 95.058784][ T4192] ntfs3: loop0: ntfs_evict_inode r=3 failed, -22. [ 95.160629][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 95.174688][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 95.202934][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 95.242703][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 95.287499][ T4507] device veth0_macvtap entered promiscuous mode [ 95.330454][ T4507] device veth1_macvtap entered promiscuous mode [ 95.487160][ T4645] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 95.783188][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 95.914222][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.499012][ T4645] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 96.543675][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 96.578742][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.641946][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.651947][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.705077][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.735889][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.746760][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.783068][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.812322][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.851986][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.878394][ T4645] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 96.903424][ T4645] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 96.931540][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.951626][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.976100][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.997524][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.014432][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.037317][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.054766][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.068546][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.086806][ T4507] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.100026][ T4507] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.131177][ T4507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.218590][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.249674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.277789][ T4507] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.296361][ T4507] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.313004][ T4507] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.333846][ T4507] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.362796][ T3054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.440834][ T3054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.561416][ T3054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.693474][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.714232][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.716062][ T3054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.758584][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 97.845437][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.854142][ T4645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.868624][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.912187][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 97.975033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.989064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.033690][ T4768] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.058998][ T4645] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.235285][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.255391][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.302006][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.311833][ T367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.371669][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.401559][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.434878][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.442973][ T367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.478663][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.502336][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.623546][ T4790] kernel profiling enabled (shift: 9) [ 98.639047][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.703317][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.737927][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 98.740007][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.837934][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.904351][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.944921][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.996768][ T4803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.129'. [ 99.016767][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.032519][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.042766][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.055703][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.077558][ T4645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.096199][ T4809] loop2: detected capacity change from 0 to 16 [ 99.122761][ T4809] erofs: (device loop2): mounted with root inode @ nid 36. [ 99.231270][ T4809] netlink: 3 bytes leftover after parsing attributes in process `syz.2.131'. [ 99.246830][ T4809] 0ªX¹¦À: renamed from caif0 [ 99.280741][ T4809] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 99.316699][ T4815] input: syz0 as /devices/virtual/input/input5 [ 99.490327][ T4819] xt_NFQUEUE: number of queues (8) out of range (got 65537) [ 99.523987][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.536965][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.556483][ T4645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.886323][ T4834] loop2: detected capacity change from 0 to 256 [ 100.027805][ T4834] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 100.072907][ T3054] device hsr_slave_0 left promiscuous mode [ 100.113631][ T3054] device hsr_slave_1 left promiscuous mode [ 100.206610][ T3054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.252752][ T3054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.276145][ T3054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.316579][ T3054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.339250][ T3054] device bridge_slave_1 left promiscuous mode [ 100.350465][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.376162][ T3054] device bridge_slave_0 left promiscuous mode [ 100.386240][ T4839] loop1: detected capacity change from 0 to 128 [ 100.403715][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.495761][ T3054] device veth1_macvtap left promiscuous mode [ 100.557910][ T3054] device veth0_macvtap left promiscuous mode [ 100.586888][ T3054] device veth1_vlan left promiscuous mode [ 100.594413][ T3054] device veth0_vlan left promiscuous mode [ 100.639691][ T4862] x_tables: duplicate entry at hook 1 [ 102.368463][ T3054] team0 (unregistering): Port device team_slave_1 removed [ 102.391487][ T3054] team0 (unregistering): Port device team_slave_0 removed [ 102.585005][ T3054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.270723][ T3054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.526689][ T3054] bond0 (unregistering): Released all slaves [ 103.623196][ T4864] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 103.641130][ T4868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.142'. [ 103.950194][ T4894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.137528][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.225915][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.966760][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.976558][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.000219][ T4645] device veth0_vlan entered promiscuous mode [ 105.051949][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.106856][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.168477][ T4645] device veth1_vlan entered promiscuous mode [ 105.281025][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.318231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.356898][ T4645] device veth0_macvtap entered promiscuous mode [ 105.405898][ T4645] device veth1_macvtap entered promiscuous mode [ 105.499808][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.574976][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.591755][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.653794][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.716303][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.787358][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.827724][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.872724][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.913704][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.954759][ T4228] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 105.965900][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.996406][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 106.029950][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 106.053492][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 106.087215][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.106957][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.131510][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.165245][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.200796][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.223556][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.268671][ T4645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.301098][ T4645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.341801][ T4645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.366084][ T4228] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 106.398305][ T4228] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 106.407583][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.431093][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.446851][ T4228] usb 3-1: config 0 has no interface number 0 [ 106.480716][ T4228] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 106.485353][ T4645] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.507847][ T4645] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.528150][ T4645] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.531985][ T4228] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 106.544823][ T4645] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.630015][ T4228] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 106.669621][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.714714][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 106.735798][ T4228] usb 3-1: config 0 descriptor?? [ 106.782295][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 106.795918][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 106.887746][ T4963] device bridge_slave_0 left promiscuous mode [ 106.903547][ T4963] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.938352][ T4963] device bridge_slave_1 left promiscuous mode [ 106.961625][ T4963] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.027296][ T4963] bond0: (slave bond_slave_0): Releasing backup interface [ 107.091030][ T4232] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 107.227979][ T4969] loop1: detected capacity change from 0 to 2048 [ 107.367707][ T4963] bond0: (slave bond_slave_1): Releasing backup interface [ 107.502945][ T4232] usb 6-1: Using ep0 maxpacket: 32 [ 107.643934][ T4232] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.745020][ T4232] usb 6-1: config 0 has no interface number 0 [ 107.853865][ T4232] usb 6-1: config 0 interface 184 has no altsetting 0 [ 107.927042][ T4969] UDF-fs: iocharset iso8¿_2 not found [ 107.949400][ T4963] team0: Failed to send options change via netlink (err -105) [ 107.967694][ T4963] team0: Port device team_slave_0 removed [ 107.994902][ T4963] team0: Port device team_slave_1 removed [ 108.015264][ T4963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.027388][ T4963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.057594][ T4963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.116078][ T4963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.131018][ T4232] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 108.147188][ T4232] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.155801][ T4232] usb 6-1: Product: syz [ 108.160324][ T4232] usb 6-1: Manufacturer: syz [ 108.165456][ T4232] usb 6-1: SerialNumber: syz [ 108.222149][ T4232] usb 6-1: config 0 descriptor?? [ 108.270826][ T4232] smsc75xx v1.0.0 [ 108.345366][ T4966] team0: Mode changed to "loadbalance" [ 108.415522][ T4228] usb 3-1: USB disconnect, device number 4 [ 108.462249][ T4587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.509255][ T4587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.554426][ T4538] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.617482][ T4538] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.646115][ T4538] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.671019][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 108.677289][ T4980] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 108.708187][ T4981] loop1: detected capacity change from 0 to 8 [ 108.997483][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 109.065046][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 110.095571][ T4994] loop2: detected capacity change from 0 to 512 [ 110.185131][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 110.202303][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 110.212293][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 110.224318][ T4232] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 110.230165][ T4994] EXT4-fs (loop2): Ignoring removed orlov option [ 110.236128][ T4232] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 110.314341][ T4994] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 110.365478][ T4994] EXT4-fs error (device loop2): ext4_iget_extra_inode:4573: inode #15: comm syz.2.172: corrupted in-inode xattr [ 110.407545][ T4994] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.172: couldn't read orphan inode 15 (err -117) [ 110.437976][ T4994] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,noquota,orlov,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,max_dir_size_kb=0x0000000000000003,noinit_itable,init_itable=0x0000000000000004,,errors=continue. Quota mode: none. [ 110.510734][ T4262] usb 6-1: USB disconnect, device number 2 [ 110.618156][ T5006] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 110.959136][ T5015] loop2: detected capacity change from 0 to 512 [ 111.005048][ T5015] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,usrquota,minixdf,nombcache,. Quota mode: writeback. [ 111.030146][ T5015] ext4 filesystem being mounted at /35/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.994907][ T4983] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.004188][ T4983] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.014142][ T4983] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.023405][ T4983] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.204466][ T26] audit: type=1326 audit(1776910794.772:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 114.231795][ T26] audit: type=1326 audit(1776910794.772:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 114.252724][ T5039] loop1: detected capacity change from 0 to 512 [ 114.262432][ T26] audit: type=1326 audit(1776910794.772:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 114.287192][ T5007] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.485326][ T26] audit: type=1326 audit(1776910794.772:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 114.525992][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.186'. [ 114.567341][ T5046] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.577404][ T5046] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.586763][ T5046] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.595651][ T5046] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.662623][ T26] audit: type=1326 audit(1776910794.772:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 114.768238][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.185'. [ 114.787723][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.185'. [ 114.797912][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.185'. [ 114.809810][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.185'. [ 114.819679][ T5054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.185'. [ 114.875920][ T5046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.186'. [ 115.776072][ T26] audit: type=1326 audit(1776910794.772:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 115.812288][ T26] audit: type=1326 audit(1776910794.772:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 115.836328][ T26] audit: type=1326 audit(1776910794.772:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 115.877092][ T26] audit: type=1326 audit(1776910794.772:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 115.950236][ T26] audit: type=1326 audit(1776910794.772:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5038 comm="syz.1.182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f087fde4819 code=0x7ffc0000 [ 116.215848][ T5076] device syzkaller0 entered promiscuous mode [ 116.248106][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 118.098158][ C0] sched: RT throttling activated [ 118.266802][ T5098] syz.1.197 uses obsolete (PF_INET,SOCK_PACKET) [ 118.501222][ T5099] device batadv_slave_1 entered promiscuous mode [ 118.508673][ T5099] device batadv_slave_1 left promiscuous mode [ 118.515637][ T5105] device batadv_slave_1 entered promiscuous mode [ 118.531054][ T5096] device batadv_slave_1 left promiscuous mode [ 119.967931][ T5129] loop2: detected capacity change from 0 to 128 [ 120.496336][ T5129] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 121.067969][ T26] kauditd_printk_skb: 60 callbacks suppressed [ 121.067987][ T26] audit: type=1804 audit(1776910801.029:146): pid=5129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.205" name="/newroot/38/file1/bus" dev="loop2" ino=1048597 res=1 errno=0 [ 122.434937][ T5140] device syzkaller0 entered promiscuous mode [ 123.269514][ T4386] FAT-fs (loop2): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 124.174011][ T5153] loop1: detected capacity change from 0 to 32768 [ 124.540165][ T5153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.210 (5153) [ 125.095082][ T5153] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 125.124601][ T5173] device syzkaller0 entered promiscuous mode [ 125.173308][ T5153] BTRFS info (device loop1): force clearing of disk cache [ 125.231483][ T5153] BTRFS info (device loop1): force zlib compression, level 3 [ 125.239600][ T4387] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.295170][ T5153] BTRFS info (device loop1): enabling auto defrag [ 125.301799][ T5153] BTRFS info (device loop1): max_inline at 0 [ 125.342690][ T5153] BTRFS info (device loop1): enabling disk space caching [ 125.366292][ T5153] BTRFS info (device loop1): disk space caching is enabled [ 125.392449][ T5153] BTRFS info (device loop1): has skinny extents [ 125.469211][ T5183] xt_hashlimit: size too large, truncated to 1048576 [ 125.476444][ T5183] xt_hashlimit: invalid rate [ 125.641275][ T5200] loop0: detected capacity change from 0 to 256 [ 125.780490][ T5200] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.792651][ T5200] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 125.854491][ T5200] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5817f139, utbl_chksum : 0xe619d30d) [ 126.719974][ T5153] BTRFS error (device loop1): open_ctree failed: -12 [ 127.058722][ T4273] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by udevd (4273) [ 127.488012][ T26] audit: type=1804 audit(1776910807.035:147): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.226" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=37574 res=1 errno=0 [ 127.640446][ T26] audit: type=1804 audit(1776910807.035:148): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.226" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=37574 res=1 errno=0 [ 127.765390][ T4230] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 128.123278][ T4230] usb 2-1: Using ep0 maxpacket: 32 [ 128.286841][ T4230] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.458255][ T4230] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 128.754410][ T5260] loop0: detected capacity change from 0 to 256 [ 128.806293][ T4230] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 128.838346][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.846489][ T4230] usb 2-1: Product: syz [ 128.906179][ T4230] usb 2-1: Manufacturer: syz [ 128.911128][ T4230] usb 2-1: SerialNumber: syz [ 128.964269][ T4230] usb 2-1: config 0 descriptor?? [ 129.209895][ T5280] xt_policy: output policy not valid in PREROUTING and INPUT [ 130.229884][ T5287] netlink: 12 bytes leftover after parsing attributes in process `syz.6.236'. [ 130.259908][ T5292] netlink: 'syz.0.237': attribute type 4 has an invalid length. [ 131.591374][ T5223] usb 2-1: USB disconnect, device number 3 [ 131.703360][ T5325] loop2: detected capacity change from 0 to 2048 [ 131.760173][ T5325] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 131.906372][ T5325] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,grpquota,nomblk_io_submit,stripe=0x000000000004ffff,norecovery,errors=remount-ro,max_batch_time=0x000000000000186b,. Quota mode: writeback. [ 131.981581][ T26] audit: type=1804 audit(1776910811.178:149): pid=5325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.245" name="/newroot/48/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 132.079803][ T5223] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 132.339043][ T5223] usb 2-1: Using ep0 maxpacket: 32 [ 132.471687][ T5223] usb 2-1: config 129 has an invalid interface number: 120 but max is 0 [ 133.000507][ T5223] usb 2-1: config 129 has an invalid descriptor of length 123, skipping remainder of the config [ 133.077316][ T5223] usb 2-1: config 129 has no interface number 0 [ 133.110391][ T5223] usb 2-1: config 129 interface 120 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.133047][ T5223] usb 2-1: config 129 interface 120 has no altsetting 0 [ 133.307150][ T5223] usb 2-1: New USB device found, idVendor=0499, idProduct=c455, bcdDevice=81.ab [ 133.361404][ T5223] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.401971][ T5223] usb 2-1: Product: syz [ 133.465896][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 133.487567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 133.498412][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #302!!! [ 133.509250][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.520080][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.530919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.541760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.552595][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.563434][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.574270][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 133.633211][ T5363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.252'. [ 136.337436][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 136.344539][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.381400][ T5223] usb 2-1: Manufacturer: syz [ 136.391688][ T5223] usb 2-1: SerialNumber: syz [ 136.424883][ T5223] usb 2-1: can't set config #129, error -71 [ 136.440206][ T5223] usb 2-1: USB disconnect, device number 4 [ 136.875023][ T5386] netlink: 28 bytes leftover after parsing attributes in process `syz.6.260'. [ 136.911132][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'. [ 136.954167][ T5389] 9pnet: Insufficient options for proto=fd [ 137.029388][ T5389] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 137.280662][ T5404] netlink: 'syz.2.264': attribute type 4 has an invalid length. [ 140.619070][ T5223] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 141.343168][ T5223] usb 1-1: Using ep0 maxpacket: 8 [ 141.475470][ T5223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.493146][ T5455] team0: Port device team_slave_0 removed [ 141.516557][ T5223] usb 1-1: config 0 has no interfaces? [ 141.538553][ T5223] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 141.576352][ T5223] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.596448][ T5223] usb 1-1: config 0 descriptor?? [ 141.884497][ T5223] usb 1-1: USB disconnect, device number 2 [ 144.062877][ T5499] netlink: 'syz.6.286': attribute type 4 has an invalid length. [ 144.275446][ T5499] netlink: 'syz.6.286': attribute type 4 has an invalid length. [ 144.797236][ T5518] loop6: detected capacity change from 0 to 2048 [ 145.844562][ T5518] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.886926][ T5518] netlink: 182 bytes leftover after parsing attributes in process `syz.6.290'. [ 147.155704][ T5537] loop6: detected capacity change from 0 to 1024 [ 147.403447][ T2302] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 148.104745][ T5537] EXT4-fs (loop6): Ignoring removed orlov option [ 148.180256][ T5537] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,data_err=ignore,journal_ioprio=0x0000000000000000,debug_want_extra_isize=0x0000000000000080,orlov,usrquota,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 148.509024][ T2302] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.747909][ T2302] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 148.772889][ T2302] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.809120][ T2302] usb 6-1: Product: syz [ 148.830631][ T2302] usb 6-1: Manufacturer: syz [ 148.845572][ T2302] usb 6-1: SerialNumber: syz [ 148.866026][ T2302] usb 6-1: config 0 descriptor?? [ 148.945325][ T2302] ims_pcu 6-1:0.0: Missing CDC union descriptor [ 148.956194][ T5568] Illegal XDP return value 4294967274, expect packet loss! [ 148.967009][ T2302] ims_pcu: probe of 6-1:0.0 failed with error -22 [ 149.211563][ T5540] udc-core: couldn't find an available UDC or it's busy [ 149.228917][ T5540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 149.348328][ T13] usb 6-1: USB disconnect, device number 3 [ 149.361723][ T5579] netlink: 'syz.0.302': attribute type 10 has an invalid length. [ 149.430352][ T5579] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 149.605603][ T5577] ODEBUG: Out of memory. ODEBUG disabled [ 149.678388][ T5579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.243065][ T5625] device team1 left promiscuous mode [ 152.306552][ T5625] device team2 left promiscuous mode [ 152.357155][ T5627] netlink: 52 bytes leftover after parsing attributes in process `syz.2.316'. [ 152.445350][ T5630] netlink: 52 bytes leftover after parsing attributes in process `syz.2.316'. [ 153.532068][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.558540][ T5647] loop2: detected capacity change from 0 to 164 [ 153.568103][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 153.710866][ T5647] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.803107][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.803389][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 153.804866][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.806468][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.819307][ T2302] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 153.867194][ T5644] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.956565][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.024336][ T4187] rock: directory entry would overflow storage [ 154.024376][ T4187] rock: sig=0x4f50, size=4, remaining=3 [ 154.024393][ T4187] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 154.030381][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.045721][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.046034][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.050006][ T4187] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 154.050569][ T4187] rock: directory entry would overflow storage [ 154.050580][ T4187] rock: sig=0x4f50, size=4, remaining=3 [ 154.050596][ T4187] iso9660: Corrupted directory entry in block 3 of inode 1856 [ 154.054726][ T4187] VFS: Lookup of '' in iso9660 loop2 would have caused loop [ 154.055204][ T4187] VFS: Lookup of '' in iso9660 loop2 would have caused loop [ 154.123073][ T2302] usb 2-1: Using ep0 maxpacket: 32 [ 154.275152][ T2302] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 154.676164][ T2302] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 154.763933][ T2302] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 154.916721][ T2302] usb 2-1: Product: syz [ 154.982718][ T2302] usb 2-1: Manufacturer: syz [ 155.072691][ T2302] usb 2-1: SerialNumber: syz [ 155.453356][ T2302] usb 2-1: config 0 descriptor?? [ 155.492160][ T5642] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 155.522461][ T2302] hub 2-1:0.0: bad descriptor, ignoring hub [ 155.528564][ T2302] hub: probe of 2-1:0.0 failed with error -5 [ 155.581331][ T367] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.874241][ T5687] Error parsing options; rc = [-22] [ 156.290899][ T367] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.753663][ T367] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.861022][ T367] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.951485][ T5699] loop5: detected capacity change from 0 to 256 [ 157.156423][ T5699] FAT-fs (loop5): Directory bread(block 64) failed [ 157.184747][ T5699] FAT-fs (loop5): Directory bread(block 65) failed [ 157.192908][ T5642] udc-core: couldn't find an available UDC or it's busy [ 157.220235][ T5642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 157.279821][ T5699] FAT-fs (loop5): Directory bread(block 66) failed [ 157.335006][ T5699] FAT-fs (loop5): Directory bread(block 67) failed [ 157.417663][ T5699] FAT-fs (loop5): Directory bread(block 68) failed [ 157.450012][ T5699] FAT-fs (loop5): Directory bread(block 69) failed [ 157.457321][ T5699] FAT-fs (loop5): Directory bread(block 70) failed [ 157.482502][ T5699] FAT-fs (loop5): Directory bread(block 71) failed [ 157.502464][ T5699] FAT-fs (loop5): Directory bread(block 72) failed [ 157.511804][ T5699] FAT-fs (loop5): Directory bread(block 73) failed [ 157.568090][ T5700] chnl_net:caif_netlink_parms(): no params data found [ 157.645228][ T4232] usb 2-1: USB disconnect, device number 5 [ 159.032440][ T5723] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 159.041948][ T5723] bond0: option arp_validate: invalid value (18446744072210219584) [ 159.216514][ T4232] Bluetooth: hci3: command 0x0409 tx timeout [ 159.322892][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.366277][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.375204][ T5700] device bridge_slave_0 entered promiscuous mode [ 159.386958][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.400392][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.410311][ T5700] device bridge_slave_1 entered promiscuous mode [ 160.675881][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.763385][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.229491][ T5700] team0: Port device team_slave_0 added [ 161.855858][ T2302] Bluetooth: hci3: command 0x041b tx timeout [ 161.994058][ T5700] team0: Port device team_slave_1 added [ 162.118598][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.143297][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.246300][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.324250][ T367] device hsr_slave_0 left promiscuous mode [ 162.357685][ T367] device hsr_slave_1 left promiscuous mode [ 162.367545][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.392007][ T367] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.419606][ T367] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.448130][ T367] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.491519][ T367] device bridge_slave_1 left promiscuous mode [ 162.507084][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.535980][ T367] device bridge_slave_0 left promiscuous mode [ 162.549994][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.590156][ T367] device veth1_macvtap left promiscuous mode [ 162.600675][ T367] device veth0_macvtap left promiscuous mode [ 162.617076][ T367] device veth1_vlan left promiscuous mode [ 162.632520][ T367] device veth0_vlan left promiscuous mode [ 162.923789][ T5780] loop5: detected capacity change from 0 to 32768 [ 162.965386][ T367] bond1 (unregistering): Released all slaves [ 163.053618][ T5780] XFS (loop5): Mounting V5 Filesystem [ 163.316086][ T5780] XFS (loop5): Ending clean mount [ 163.365461][ T5780] XFS (loop5): Quotacheck needed: Please wait. [ 163.405845][ T367] team0 (unregistering): Port device team_slave_1 removed [ 163.431322][ T5813] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 163.454328][ T367] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.512641][ T367] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 163.524621][ T5780] XFS (loop5): Quotacheck: Done. [ 163.826023][ T26] audit: type=1804 audit(1776910840.566:150): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.348" name="/newroot/49/file0/bus" dev="loop5" ino=9291 res=1 errno=0 [ 163.868739][ T367] bond0 (unregistering): Released all slaves [ 163.939099][ T5821] netlink: 56 bytes leftover after parsing attributes in process `syz.6.354'. [ 163.962319][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.982043][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.053233][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.072702][ T21] Bluetooth: hci3: command 0x040f tx timeout [ 164.324125][ T5835] fuse: Bad value for 'fd' [ 164.478153][ T5700] device hsr_slave_0 entered promiscuous mode [ 164.837229][ T5840] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 164.863401][ T5700] device hsr_slave_1 entered promiscuous mode [ 165.411744][ T4507] XFS (loop5): Unmounting Filesystem [ 166.358571][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 166.614706][ T5700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.670851][ T5700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.716754][ T5700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.790411][ T5700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 167.096215][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.156092][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.182395][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.233651][ T5700] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.274877][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.305732][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.354135][ T4587] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.361721][ T4587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.446909][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.473327][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.537455][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.588312][ T4587] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.595501][ T4587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.607579][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.646129][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.665134][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.756311][ T5894] xt_hashlimit: overflow, try lower: 3/0 [ 168.717205][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.755106][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.758050][ T5898] tipc: Failed to remove unknown binding: 66,0,0/4:3960098960/3960098962 [ 168.775041][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.797675][ T5898] tipc: Failed to remove unknown binding: 66,0,0/4:3960098960/3960098961 [ 168.821177][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.860632][ T5899] tipc: Failed to remove unknown binding: 66,0,0/4:3960098960/3960098962 [ 168.904283][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.939354][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.955769][ T5899] tipc: Failed to remove unknown binding: 66,0,0/4:3960098960/3960098961 [ 168.974197][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.004833][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.059690][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.546113][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.575159][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.618886][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.870458][ T5938] loop1: detected capacity change from 0 to 128 [ 170.943078][ T5938] EXT4-fs (loop1): inline encryption not supported [ 171.422587][ T5938] EXT4-fs (loop1): Test dummy encryption mode enabled [ 171.609695][ T5960] ptrace attach of "./syz-executor exec"[5961] was attempted by "./syz-executor exec"[5960] [ 171.890707][ T5938] EXT4-fs (loop1): mounted filesystem without journal. Opts: nojournal_checksum,nolazytime,inlinecrypt,jqfmt=vfsv0,nombcache,grpjquota=,test_dummy_encryption,,errors=continue. Quota mode: none. [ 172.301934][ T5938] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.518392][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 172.544273][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 172.620455][ T5700] device veth0_vlan entered promiscuous mode [ 172.678335][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 172.725565][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 172.795514][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 172.870232][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 172.902694][ T5700] device veth1_vlan entered promiscuous mode [ 172.960125][ T5983] netlink: 104 bytes leftover after parsing attributes in process `syz.1.384'. [ 173.039723][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 173.070125][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 173.109944][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 173.157373][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 173.171481][ T5700] device veth0_macvtap entered promiscuous mode [ 173.217653][ T5700] device veth1_macvtap entered promiscuous mode [ 173.284639][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.308893][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.362225][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.411648][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.453208][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.491143][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.535350][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.563171][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.620544][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.656043][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.691061][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.732791][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.775420][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.814877][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.858501][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.901722][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.947076][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.994811][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.032132][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.054321][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.086880][ T5700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.132471][ T5700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.183342][ T5700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.192104][ T5700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.443592][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.451773][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.586660][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 174.633992][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.671119][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.680318][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.411220][ T6031] netlink: 'syz.0.395': attribute type 29 has an invalid length. [ 175.535293][ T6031] netlink: 'syz.0.395': attribute type 29 has an invalid length. [ 175.638001][ T6034] netlink: 'syz.0.395': attribute type 29 has an invalid length. [ 176.186629][ T6050] capability: warning: `syz.0.400' uses 32-bit capabilities (legacy support in use) [ 176.252893][ T6050] capability: warning: `syz.0.400' uses deprecated v2 capabilities in a way that may be insecure [ 176.300194][ T6048] loop5: detected capacity change from 0 to 4096 [ 176.522989][ T6044] netlink: 12 bytes leftover after parsing attributes in process `syz.5.398'. [ 178.374609][ T6113] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 180.682336][ T6145] input: syz0 as /devices/virtual/input/input7 [ 181.445997][ T6166] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 183.278177][ T6172] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 183.877739][ T6198] kvm: emulating exchange as write [ 185.580737][ T6235] netlink: 'syz.7.443': attribute type 4 has an invalid length. [ 185.759363][ T6238] tipc: Started in network mode [ 185.805828][ T6238] tipc: Node identity 080211000001, cluster identity 4711 [ 185.813769][ T6238] tipc: Enabled bearer , priority 0 [ 185.865483][ T6243] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 185.976624][ T6247] netlink: 63 bytes leftover after parsing attributes in process `syz.7.447'. [ 186.485794][ T4263] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 186.902270][ T4232] tipc: Node number set to 134418688 [ 187.278428][ T4263] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.371227][ T4263] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.616869][ T4263] usb 8-1: Product: syz [ 187.846034][ T4263] usb 8-1: Manufacturer: syz [ 187.937695][ T4263] usb 8-1: SerialNumber: syz [ 188.071141][ T6304] loop5: detected capacity change from 0 to 512 [ 188.152849][ T6304] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 188.249886][ T6304] EXT4-fs error (device loop5): ext4_iget_extra_inode:4573: inode #15: comm syz.5.459: corrupted in-inode xattr [ 188.355989][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.1.460'. [ 188.363457][ T6304] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.459: couldn't read orphan inode 15 (err -117) [ 188.395050][ T6304] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,inode_readahead_blks=0x0000000004000000,nodiscard,noload,delalloc,mblk_io_submit,commit=0x0000000000000000,noblock_validity,lazytime,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 189.184684][ T4263] cdc_ncm 8-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 189.192522][ T4263] cdc_ncm 8-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 190.031011][ T4263] cdc_ncm 8-1:1.0: setting rx_max = 2048 [ 190.102222][ T4263] cdc_ncm 8-1:1.0: setting tx_max = 184 [ 190.206405][ T4263] cdc_ncm 8-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.7-1, CDC NCM, 42:42:42:42:42:42 [ 191.466020][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 191.509160][ T6374] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.521495][ T6374] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.531749][ T6374] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.541755][ T6374] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.561466][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 191.572620][ T5227] usb 8-1: USB disconnect, device number 2 [ 191.587986][ T5227] cdc_ncm 8-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.7-1, CDC NCM [ 191.594253][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 191.662520][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): : link becomes ready [ 195.681068][ T6394] loop6: detected capacity change from 0 to 32768 [ 195.746316][ T6394] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop6 scanned by syz.6.480 (6394) [ 195.825859][ T6394] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 195.890155][ T6394] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_LZO (0x8) [ 195.944430][ T6394] BTRFS info (device loop6): force lzo compression, level 0 [ 195.979074][ T6394] BTRFS info (device loop6): max_inline at 4096 [ 196.008335][ T6394] BTRFS info (device loop6): allowing degraded mounts [ 196.043243][ T6394] BTRFS info (device loop6): using free space tree [ 196.097635][ T6394] BTRFS info (device loop6): has skinny extents [ 196.557980][ T6394] BTRFS info (device loop6): enabling ssd optimizations [ 199.109923][ T6493] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 199.294336][ T6505] netlink: 798 bytes leftover after parsing attributes in process `syz.0.495'. [ 199.389480][ T6508] Cannot find add_set index 0 as target [ 200.068362][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 200.146795][ T6510] device syzkaller0 entered promiscuous mode [ 200.155488][ T6513] xt_hashlimit: size too large, truncated to 1048576 [ 200.176925][ T6513] xt_hashlimit: invalid rate [ 200.270509][ T6493] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.286068][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 200.296692][ T6493] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.306415][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 200.352198][ T6493] usb 6-1: Product: syz [ 200.357510][ T6518] netlink: 40 bytes leftover after parsing attributes in process `syz.1.499'. [ 200.375198][ T21] usb 7-1: Using ep0 maxpacket: 8 [ 200.379775][ T6493] usb 6-1: Manufacturer: syz [ 200.397517][ T6518] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 200.397551][ T6493] usb 6-1: SerialNumber: syz [ 200.520060][ T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.544315][ T21] usb 7-1: config 0 has no interfaces? [ 200.556687][ T21] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 200.643483][ T6540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 200.694051][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.787617][ T21] usb 7-1: config 0 descriptor?? [ 200.794551][ T6538] netlink: 56 bytes leftover after parsing attributes in process `syz.7.505'. [ 200.836550][ T6538] netlink: 1 bytes leftover after parsing attributes in process `syz.7.505'. [ 202.323817][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 202.353648][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.410533][ T4263] usb 7-1: USB disconnect, device number 2 [ 202.861820][ T6493] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 202.871132][ T6493] cdc_ncm 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 202.886768][ T6493] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 203.230125][ T6493] cdc_ncm 6-1:1.0: setting tx_max = 184 [ 203.255339][ T6493] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM, 42:42:42:42:42:42 [ 204.095656][ T6494] usb 6-1: USB disconnect, device number 4 [ 204.113536][ T6494] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM [ 204.194819][ T6578] loop1: detected capacity change from 0 to 512 [ 204.490334][ T6578] EXT4-fs (loop1): Ignoring removed oldalloc option [ 204.643240][ T6578] EXT4-fs (loop1): Ignoring removed nobh option [ 205.101025][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.522: iget: bad extra_isize 90 (inode size 256) [ 205.197557][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.208119][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.522: error while reading EA inode 11 err=-117 [ 205.230389][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.238244][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.522: iget: bad extra_isize 90 (inode size 256) [ 205.270450][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.279535][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.522: error while reading EA inode 11 err=-117 [ 205.319748][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.326553][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.522: iget: bad extra_isize 90 (inode size 256) [ 205.377694][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.392267][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.522: error while reading EA inode 18 err=-117 [ 205.449135][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.455833][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #18: comm syz.1.522: iget: bad extra_isize 90 (inode size 256) [ 205.585877][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.625686][ T6578] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.522: error while reading EA inode 18 err=-117 [ 205.725369][ T6578] EXT4-fs (loop1): Remounting filesystem read-only [ 205.735336][ T6578] EXT4-fs (loop1): 1 orphan inode deleted [ 205.741381][ T6578] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,oldalloc,debug_want_extra_isize=0x000000000000005a,nobh,errors=remount-ro,nodiscard,grpid,. Quota mode: none. [ 205.756142][ T6621] loop7: detected capacity change from 0 to 512 [ 206.219792][ T6621] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.518: inode has both inline data and extents flags [ 206.840575][ T6630] netlink: 56 bytes leftover after parsing attributes in process `syz.5.520'. [ 206.859212][ T6630] netlink: 1 bytes leftover after parsing attributes in process `syz.5.520'. [ 206.874182][ T6621] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.518: couldn't read orphan inode 15 (err -117) [ 206.916742][ T6621] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 211.325807][ T6660] loop5: detected capacity change from 0 to 32768 [ 211.435974][ T6688] xt_policy: output policy not valid in PREROUTING and INPUT [ 211.510209][ T6660] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop5 scanned by syz.5.529 (6660) [ 212.298548][ T6660] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 212.369483][ T6660] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 212.405000][ T6660] BTRFS info (device loop5): force lzo compression, level 0 [ 212.417540][ T6660] BTRFS info (device loop5): max_inline at 4096 [ 212.423942][ T6660] BTRFS info (device loop5): allowing degraded mounts [ 212.510390][ T6660] BTRFS info (device loop5): using free space tree [ 212.532386][ T6660] BTRFS info (device loop5): has skinny extents [ 212.905884][ T6720] netlink: 56 bytes leftover after parsing attributes in process `syz.0.536'. [ 212.957519][ T6720] netlink: 1 bytes leftover after parsing attributes in process `syz.0.536'. [ 213.000623][ T6660] BTRFS info (device loop5): enabling ssd optimizations [ 216.536341][ T6763] xt_hashlimit: overflow, try lower: 3/0 [ 217.471596][ T1108] Bluetooth: hci2: command 0x0406 tx timeout [ 221.885604][ T6801] loop5: detected capacity change from 0 to 1024 [ 222.091935][ T6801] EXT4-fs (loop5): mounted filesystem without journal. Opts: block_validity,bsddf,max_dir_size_kb=0x000000000000ffff,jqfmt=vfsv1,journal_ioprio=0x0000000000000004,bsddf,nogrpid,noauto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 229.378509][ T6479] Bluetooth: hci1: command 0x0406 tx timeout [ 232.445583][ T6941] team0 (unregistering): Port device team_slave_0 removed [ 232.535562][ T6941] team0 (unregistering): Failed to send options change via netlink (err -105) [ 232.540881][ T6941] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 232.545350][ T6941] team0 (unregistering): Port device team_slave_1 removed [ 232.756131][ T6949] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 233.080168][ T6959] loop6: detected capacity change from 0 to 64 [ 233.212727][ T6959] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing [ 233.783894][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.6.594'. [ 233.959469][ T6980] Error parsing options; rc = [-22] [ 234.788585][ T6985] netlink: 92 bytes leftover after parsing attributes in process `syz.6.599'. [ 237.695706][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.704296][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.260695][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.303524][ T6990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.646390][ T6990] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.657579][ T6990] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.668001][ T6990] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.677116][ T6990] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.807861][ T7016] netlink: 8 bytes leftover after parsing attributes in process `syz.6.605'. [ 238.912761][ T7024] netlink: 140 bytes leftover after parsing attributes in process `syz.1.606'. [ 238.944187][ T7030] loop7: detected capacity change from 0 to 512 [ 238.945715][ T7024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 239.201784][ T7030] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 240.213247][ T7030] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.734299][ T7093] loop6: detected capacity change from 0 to 128 [ 243.848833][ T7093] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 243.894229][ T7093] hpfs: filesystem error: improperly stopped [ 243.923099][ T7093] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 243.971324][ T7093] hpfs: You really don't want any checks? You are crazy... [ 244.004378][ T7093] hpfs: hpfs_map_sector(): read error [ 244.015060][ T7093] hpfs: code page support is disabled [ 244.094814][ T7093] hpfs: hpfs_map_4sectors(): unaligned read [ 244.102046][ T7093] hpfs: hpfs_map_4sectors(): unaligned read [ 244.124714][ T7093] hpfs: filesystem error: unable to find root dir [ 244.211735][ T7093] hpfs: hpfs_map_4sectors(): unaligned read [ 244.236719][ T7118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 244.253111][ T7093] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 244.342656][ T7093] hpfs: hpfs_map_4sectors(): unaligned read [ 244.351386][ T7093] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 245.865887][ T7093] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 246.065894][ T7129] fuse: Unknown parameter '4' [ 246.081725][ T7129] sctp: [Deprecated]: syz.5.633 (pid 7129) Use of int in max_burst socket option deprecated. [ 246.081725][ T7129] Use struct sctp_assoc_value instead [ 246.264850][ T7135] loop6: detected capacity change from 0 to 764 [ 246.295749][ T7137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.346863][ T7135] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 249.030016][ T7155] loop1: detected capacity change from 0 to 2048 [ 249.152726][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.5.645'. [ 250.660045][ T7155] loop1: p1 < > p4 [ 250.660045][ T7155] p4: [ 251.019376][ T7155] loop1: p4 size 722688 extends beyond EOD, truncated [ 251.258327][ T7179] loop7: detected capacity change from 0 to 128 [ 251.526259][ T7179] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 251.841052][ T7179] hpfs: filesystem error: improperly stopped [ 252.100194][ T7179] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 252.203666][ T7179] hpfs: You really don't want any checks? You are crazy... [ 252.211298][ T7179] hpfs: hpfs_map_sector(): read error [ 252.216815][ T7179] hpfs: code page support is disabled [ 252.222824][ T7179] hpfs: hpfs_map_4sectors(): unaligned read [ 252.229004][ T7179] hpfs: hpfs_map_4sectors(): unaligned read [ 252.255722][ T7179] hpfs: filesystem error: unable to find root dir [ 252.278330][ T7186] netlink: 44 bytes leftover after parsing attributes in process `syz.0.651'. [ 252.374536][ T7179] hpfs: hpfs_map_4sectors(): unaligned read [ 252.386320][ T7179] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 252.423520][ T7191] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.452082][ T7179] hpfs: hpfs_map_4sectors(): unaligned read [ 252.476212][ T7179] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib [ 252.537365][ T7200] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at trim [ 255.537951][ T7246] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 255.941025][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 256.198504][ T26] audit: type=1804 audit(1776910926.299:151): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.673" name="/newroot/54/file1" dev="fuse" ino=1 res=1 errno=0 [ 256.272983][ T26] audit: type=1800 audit(1776910926.326:152): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.673" name="/" dev="fuse" ino=1 res=0 errno=0 [ 256.343761][ T26] audit: type=1804 audit(1776910926.336:153): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.673" name="/newroot/54/file1" dev="fuse" ino=1 res=1 errno=0 [ 256.465209][ T26] audit: type=1800 audit(1776910926.336:154): pid=7273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.673" name="/" dev="fuse" ino=1 res=0 errno=0 [ 256.622794][ T7290] netlink: 216 bytes leftover after parsing attributes in process `syz.0.675'. [ 256.635759][ T7290] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 258.530727][ T7304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 259.064834][ T7302] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 259.906569][ T7320] device dummy0 entered promiscuous mode [ 259.912921][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 259.923321][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 259.931237][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 259.941667][ T4200] Workqueue: hci4 hci_rx_work [ 259.946540][ T4200] Call Trace: [ 259.949844][ T4200] [ 259.952966][ T4200] dump_stack_lvl+0x188/0x250 [ 259.957946][ T4200] ? show_regs_print_info+0x20/0x20 [ 259.963873][ T4200] ? load_image+0x400/0x400 [ 259.968550][ T4200] sysfs_create_dir_ns+0x26a/0x290 [ 259.973804][ T4200] ? sysfs_warn_dup+0xa0/0xa0 [ 259.978903][ T4200] ? process_one_work+0x85f/0x1010 [ 259.982709][ T7324] Cannot find add_set index 65532 as target [ 259.984039][ T4200] ? do_raw_spin_unlock+0x11d/0x230 [ 259.995389][ T4200] kobject_add_internal+0x6e0/0xd90 [ 260.001459][ T4200] kobject_add+0x160/0x230 [ 260.005896][ T4200] ? kobject_init+0x1d0/0x1d0 [ 260.011267][ T4200] ? klist_children_get+0x50/0x50 [ 260.016784][ T4200] ? get_device_parent+0x121/0x3f0 [ 260.022206][ T4200] device_add+0x483/0xfb0 [ 260.026768][ T4200] hci_conn_add_sysfs+0xd1/0x1e0 [ 260.031940][ T4200] le_conn_complete_evt+0xc48/0x15c0 [ 260.037561][ T4200] ? cs_le_create_conn+0x5e0/0x5e0 [ 260.043762][ T4200] ? __mutex_trylock_common+0x155/0x260 [ 260.052410][ T4200] hci_le_meta_evt+0x285/0x3c90 [ 260.058996][ T4200] ? hci_event_packet+0x37b/0x1370 [ 260.067193][ T4200] ? __lock_acquire+0x7d10/0x7d10 [ 260.073936][ T4200] ? hci_remote_host_features_evt+0x280/0x280 [ 260.081632][ T4200] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 260.088738][ T4200] ? mark_lock+0x94/0x320 [ 260.094716][ T4200] ? mutex_unlock+0x10/0x10 [ 260.100861][ T4200] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 260.108850][ T4200] ? lock_chain_count+0x20/0x20 [ 260.115735][ T4200] ? __rwlock_init+0x140/0x140 [ 260.124644][ T4200] hci_event_packet+0xe48/0x1370 [ 260.132236][ T4200] ? lockdep_hardirqs_on+0x94/0x140 [ 260.138864][ T4200] ? rcu_lock_release+0x20/0x20 [ 260.144348][ T4200] ? hci_send_to_monitor+0x9c/0x4a0 [ 260.150318][ T4200] hci_rx_work+0x255/0xa10 [ 260.155707][ T4200] process_one_work+0x85f/0x1010 [ 260.161664][ T4200] ? worker_detach_from_pool+0x240/0x240 [ 260.167602][ T4200] ? lockdep_hardirqs_off+0x70/0x100 [ 260.172990][ T4200] ? _raw_spin_lock_irq+0xb7/0xf0 [ 260.178301][ T4200] ? _raw_spin_lock_irqsave+0x100/0x100 [ 260.183954][ T4200] ? wq_worker_running+0x97/0x170 [ 260.189278][ T4200] worker_thread+0xaa6/0x1290 [ 260.194000][ T4200] kthread+0x436/0x520 [ 260.198455][ T4200] ? rcu_lock_release+0x20/0x20 [ 260.203432][ T4200] ? kthread_blkcg+0xd0/0xd0 [ 260.208144][ T4200] ret_from_fork+0x1f/0x30 [ 260.213011][ T4200] [ 260.216412][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.234868][ T4200] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 260.250617][ T4200] Bluetooth: hci4: failed to register connection device [ 260.725435][ T7320] device macvlan2 entered promiscuous mode [ 261.972424][ T4386] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.221135][ T4386] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.459335][ T4386] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.533940][ T4587] Bluetooth: hci5: Frame reassembly failed (-84) [ 262.554306][ T7362] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 262.571294][ T4587] Bluetooth: hci5: Frame reassembly failed (-84) [ 262.644138][ T4386] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.698671][ T7369] overlayfs: failed to clone upperpath [ 263.127907][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 263.258532][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.266838][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.275483][ T7355] device bridge_slave_0 entered promiscuous mode [ 263.348563][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.485515][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.547916][ T7355] device bridge_slave_1 entered promiscuous mode [ 263.762556][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.609528][ T6482] Bluetooth: hci3: command 0x0409 tx timeout [ 264.707328][ T6482] Bluetooth: hci5: command 0x1003 tx timeout [ 264.714826][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 264.792030][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.854470][ T7409] netlink: 'syz.5.700': attribute type 1 has an invalid length. [ 265.008625][ T7409] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.737879][ T7355] team0: Port device team_slave_0 added [ 265.781643][ T7355] team0: Port device team_slave_1 added [ 265.835190][ T7422] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.855427][ T7426] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 265.879137][ T7426] bond1: (slave macvlan3): making interface the new active one [ 265.915897][ T7426] bond1: (slave macvlan3): Enslaving as an active interface with an up link [ 265.949915][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 265.970104][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.991792][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.051013][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.101177][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.114968][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.180833][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.273856][ T7429] 9p filesystem being mounted at /188/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 266.341463][ T7355] device hsr_slave_0 entered promiscuous mode [ 266.370598][ T7355] device hsr_slave_1 entered promiscuous mode [ 266.384966][ T7355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 266.397071][ T7355] Cannot create hsr debugfs directory [ 267.501164][ T6483] Bluetooth: hci3: command 0x041b tx timeout [ 267.508561][ T5228] Bluetooth: hci5: command 0x1001 tx timeout [ 267.515130][ T4200] Bluetooth: hci5: sending frame failed (-49) [ 267.840134][ T4386] device hsr_slave_0 left promiscuous mode [ 268.879810][ T4386] device hsr_slave_1 left promiscuous mode [ 268.890637][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.897169][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.952373][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.990392][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.017566][ T4386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.039540][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.047681][ T4386] device bridge_slave_1 left promiscuous mode [ 269.054837][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.065779][ T4386] device bridge_slave_0 left promiscuous mode [ 269.072535][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.312565][ T4386] device veth1_macvtap left promiscuous mode [ 269.341850][ T4386] device veth0_macvtap left promiscuous mode [ 269.348446][ T4386] device veth1_vlan left promiscuous mode [ 269.366920][ T4386] device veth0_vlan left promiscuous mode [ 269.735921][ T6482] Bluetooth: hci5: command 0x1009 tx timeout [ 269.787167][ T6482] Bluetooth: hci3: command 0x040f tx timeout [ 270.360533][ T7461] loop5: detected capacity change from 0 to 128 [ 270.520344][ T7461] msdos filesystem being mounted at /112/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 270.721773][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 270.748345][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 270.783870][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.815043][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.942163][ T4386] bond0 (unregistering): Released all slaves [ 272.994016][ T6482] Bluetooth: hci3: command 0x0419 tx timeout [ 273.169426][ T7355] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 273.244504][ T7355] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 273.267748][ T7355] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 273.359136][ T7355] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 273.665081][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.699253][ T7480] chnl_net:caif_netlink_parms(): no params data found [ 273.755839][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.832924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 273.843932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 273.947753][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 273.981657][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 274.049814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.058180][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.082134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 274.136565][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 274.179737][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.187710][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.230761][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 274.267296][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 274.347396][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 274.394031][ T26] audit: type=1326 audit(3924394591.082:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7511 comm="syz.1.723" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f087fde4819 code=0x0 [ 274.485305][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 274.506769][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 274.526466][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 274.535989][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 274.556352][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 274.655825][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 274.673057][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 274.683093][ T2302] Bluetooth: hci6: command 0x0409 tx timeout [ 274.707871][ T7355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.729310][ T7355] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 274.751176][ T7480] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.759023][ T7480] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.768871][ T7480] device bridge_slave_0 entered promiscuous mode [ 274.783110][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 274.804441][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 274.825427][ T7480] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.839327][ T7480] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.857442][ T7480] device bridge_slave_1 entered promiscuous mode [ 274.979521][ T7480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.031501][ T7480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.153323][ T7532] netlink: 'syz.0.724': attribute type 1 has an invalid length. [ 275.180919][ T7500] chnl_net:caif_netlink_parms(): no params data found [ 275.220603][ T7532] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.724'. [ 275.222969][ T7480] team0: Port device team_slave_0 added [ 275.259117][ T7480] team0: Port device team_slave_1 added [ 275.345800][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.380439][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.438259][ T7480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.463017][ T7480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.475767][ T7480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.509442][ T7480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.527001][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 275.545768][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 275.554624][ T7538] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 275.580782][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.689223][ T7480] device hsr_slave_0 entered promiscuous mode [ 275.708006][ T7480] device hsr_slave_1 entered promiscuous mode [ 275.882043][ T7554] loop1: detected capacity change from 0 to 8192 [ 275.904644][ T7500] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.913594][ T7500] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.926470][ T7500] device bridge_slave_0 entered promiscuous mode [ 276.060769][ T7500] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.069792][ T7500] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.112938][ T7500] device bridge_slave_1 entered promiscuous mode [ 276.238403][ T2302] Bluetooth: hci1: command 0x0409 tx timeout [ 276.329459][ T7500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.396334][ T7500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.448970][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 276.469299][ T4387] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 276.566764][ T7355] device veth0_vlan entered promiscuous mode [ 276.622047][ T7355] device veth1_vlan entered promiscuous mode [ 276.691801][ T7500] team0: Port device team_slave_0 added [ 276.702932][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 276.721731][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 276.803932][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 276.911183][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.932523][ T4174] Bluetooth: hci6: command 0x041b tx timeout [ 277.039239][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 277.339859][ T7500] team0: Port device team_slave_1 added [ 277.536352][ T7355] device veth0_macvtap entered promiscuous mode [ 277.628309][ T7355] device veth1_macvtap entered promiscuous mode [ 277.656778][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.678596][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.688866][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.723246][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.774890][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.788480][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.808151][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.824722][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.833618][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.845802][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.873374][ T7480] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 278.004508][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.045238][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.310700][ T7500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.512197][ T6482] Bluetooth: hci1: command 0x041b tx timeout [ 278.534751][ T7500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.653600][ T7500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.695732][ T7500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.726126][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.752718][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.778013][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.810102][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.849051][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.878351][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.892497][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.920091][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.942945][ T7480] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 279.005042][ T7480] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 279.040131][ T7480] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 279.079617][ T7500] device hsr_slave_0 entered promiscuous mode [ 279.109353][ T7500] device hsr_slave_1 entered promiscuous mode [ 279.125975][ T7500] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.146737][ T7500] Cannot create hsr debugfs directory [ 279.166405][ T7355] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.186534][ T6482] Bluetooth: hci6: command 0x040f tx timeout [ 279.208500][ T7355] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.217578][ T7355] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.268498][ T7355] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.651087][ T4506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.679001][ T4506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.715802][ T7480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.727388][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.769686][ T7480] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.801968][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.826471][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 279.835560][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 279.853485][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.917851][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.928921][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 279.951225][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 280.010596][ T4506] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.018927][ T4506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.086549][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 280.120435][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 280.159973][ T4506] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.167869][ T4506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.199842][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 280.217200][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 280.387378][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 280.397932][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 280.434602][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 280.456413][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 280.482210][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 280.520195][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 280.529468][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 280.571519][ T7480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 280.617779][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 280.757926][ T6483] Bluetooth: hci1: command 0x040f tx timeout [ 280.877284][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 280.886491][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 280.910874][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 281.451518][ T1108] Bluetooth: hci6: command 0x0419 tx timeout [ 281.829135][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.847093][ T26] audit: type=1326 audit(3924394597.965:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7613 comm="syz.8.734" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2215e10819 code=0x0 [ 281.864169][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.950249][ T7480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.574391][ T4174] Bluetooth: hci1: command 0x0419 tx timeout [ 283.928260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 283.971992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 284.020026][ T7644] ªªªªª: renamed from virt_wifi0 [ 284.051916][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 284.066821][ T7645] <š [ 284.067736][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 284.103851][ T7480] device veth0_vlan entered promiscuous mode [ 284.116769][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 284.153583][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 284.199669][ T7480] device veth1_vlan entered promiscuous mode [ 284.377266][ T7480] device veth0_macvtap entered promiscuous mode [ 284.390032][ T7480] device veth1_macvtap entered promiscuous mode [ 284.408578][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 284.419208][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 284.429767][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 284.442626][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 284.457002][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 284.664407][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 284.886573][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.045907][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.129957][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.144100][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.213338][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.247130][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.260532][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.323493][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 285.354511][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 285.376937][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.391010][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.745'. [ 285.404491][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.417126][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.439774][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.459670][ T7480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.485695][ T7480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.531343][ T7480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.180042][ T7682] No such timeout policy "syz1" [ 286.593419][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 286.631305][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 286.691968][ T7480] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.707708][ T7480] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.726278][ T7480] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.736286][ T7480] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.733963][ T4386] device hsr_slave_0 left promiscuous mode [ 287.773679][ T4386] device hsr_slave_1 left promiscuous mode [ 287.792438][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.809857][ T4386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.913284][ T4386] device bridge_slave_1 left promiscuous mode [ 287.919858][ T4386] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.929981][ T4386] device bridge_slave_0 left promiscuous mode [ 287.936802][ T4386] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.956623][ T4386] bond1 (unregistering): Released all slaves [ 289.260572][ T7713] loop8: detected capacity change from 0 to 256 [ 289.277142][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 289.310254][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 289.443033][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.501136][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.206068][ T7713] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 290.241715][ T7713] exfat filesystem being mounted at /9/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 290.330884][ T4386] bond0 (unregistering): Released all slaves [ 291.855863][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.883074][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.928865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 292.012993][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.057450][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.112983][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 293.727029][ T7500] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 295.407539][ T7500] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 295.554821][ T7500] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 295.781674][ T7500] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 296.937592][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 297.019465][ T7766] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 297.048057][ T7766] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 297.246341][ T7500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.542804][ T7773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 298.626743][ T7773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 298.658722][ T7500] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.730892][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 298.763779][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 298.820306][ T7715] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.828153][ T7715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.872356][ T7715] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 299.510688][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 299.866100][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 300.010068][ T7804] xt_ecn: cannot match TCP bits for non-tcp packets [ 300.342186][ T4419] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.349984][ T4419] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.360429][ T4419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 300.482511][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 300.492239][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 300.532568][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 300.580773][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 300.599140][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 300.620462][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 300.639505][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 300.666363][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 300.688003][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 300.707145][ T367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 300.724490][ T7500] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 302.861456][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 302.883830][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.813552][ T7500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.026752][ T7861] netlink: 40 bytes leftover after parsing attributes in process `syz.8.784'. [ 304.036326][ T7860] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 65, id = 0 [ 304.085349][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 304.124993][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 304.272549][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 304.337240][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 304.413813][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.473881][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.518711][ T7500] device veth0_vlan entered promiscuous mode [ 304.566160][ T7500] device veth1_vlan entered promiscuous mode [ 304.760784][ T7878] No such timeout policy "syz1" [ 305.591754][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 305.965754][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.051267][ T3054] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.231345][ T7500] device veth0_macvtap entered promiscuous mode [ 306.505314][ T7500] device veth1_macvtap entered promiscuous mode [ 306.547245][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.785673][ T7891] loop9: detected capacity change from 0 to 512 [ 306.812179][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.590393][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.603241][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.615621][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.626961][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.637279][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.825597][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.871189][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.958243][ T7906] ufs: You didn't specify the type of your ufs filesystem [ 307.958243][ T7906] [ 307.958243][ T7906] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 307.958243][ T7906] [ 307.958243][ T7906] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 307.991527][ T7906] ufs: ufstype=old is supported read-only [ 308.003881][ T7906] blk_update_request: I/O error, dev loop17, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 310.885559][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 310.912291][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 311.015716][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 311.045631][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 311.096791][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 311.282770][ T7923] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 311.308492][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 311.320927][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 311.324857][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 311.390068][ T7924] 9pnet_virtio: no channels available for device 127.0.0.1 [ 312.167386][ T7912] ceph: No mds server is up or the cluster is laggy [ 312.193178][ T2302] libceph: connect (1)[c::]:6789 error -101 [ 312.208897][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.218330][ T2302] libceph: mon0 (1)[c::]:6789 connect error [ 312.389185][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.422503][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.462207][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.563376][ T7500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 312.725857][ T7500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 312.935563][ T7500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.030515][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 313.228628][ T4232] libceph: connect (1)[c::]:6789 error -101 [ 313.235044][ T4232] libceph: mon0 (1)[c::]:6789 connect error [ 313.304373][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 313.341567][ T7500] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.358957][ T7500] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.380235][ T7500] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.392103][ T7500] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.523786][ T7944] syz.1.804 sent an empty control message without MSG_MORE. [ 314.220231][ T7954] loop9: detected capacity change from 0 to 256 [ 314.247020][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.255132][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.299872][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 314.341396][ T7954] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 314.405760][ T7954] exfat filesystem being mounted at /10/file2 supports timestamps until 2107-12-31 (0x10391447f) [ 314.418018][ T4272] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.439571][ T4272] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.483343][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 315.825489][ T7944] infiniband syz2: set active [ 315.848397][ T7944] infiniband syz2: added bond_slave_1 [ 316.106129][ T7944] infiniband syz2: Couldn't open port 1 [ 317.175736][ T7944] RDS/IB: syz2: added [ 317.180989][ T7944] smc: adding ib device syz2 with port count 1 [ 318.325707][ T7944] smc: ib device syz2 port 1 has pnetid [ 322.617874][ T8031] loop9: detected capacity change from 0 to 1024 [ 322.720628][ T8031] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 322.793798][ T8031] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 322.874824][ T8031] EXT4-fs error (device loop9): ext4_get_journal_inode:5187: inode #5: comm syz.9.822: unexpected bad inode w/o EXT4_IGET_BAD [ 322.947561][ T8031] EXT4-fs (loop9): no journal found [ 322.959961][ T8031] EXT4-fs (loop9): can't get journal size [ 323.005549][ T8031] EXT4-fs (loop9): mounted filesystem without journal. Opts: noblock_validity,stripe=0x0000000000000002,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback. [ 325.125182][ T8070] loop9: detected capacity change from 0 to 2048 [ 325.189694][ T8036] rdma_rxe: rxe_register_device failed with error -23 [ 325.200350][ T8036] rdma_rxe: failed to add vxcan1 [ 325.376959][ T8045] device veth0_vlan left promiscuous mode [ 325.425645][ T8070] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 325.575140][ T8067] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 325.630173][ T8067] [ 325.632568][ T8067] ====================================================== [ 325.639615][ T8067] WARNING: possible circular locking dependency detected [ 325.646833][ T8067] syzkaller #0 Not tainted [ 325.651247][ T8067] ------------------------------------------------------ [ 325.658533][ T8067] syz.9.828/8067 is trying to acquire lock: [ 325.664594][ T8067] ffff888060babc98 (&ei->xattr_sem){++++}-{3:3}, at: ext4_destroy_inline_data+0x24/0xe0 [ 325.674442][ T8067] [ 325.674442][ T8067] but task is already holding lock: [ 325.681809][ T8067] ffff888061d0ac58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 325.692046][ T8067] [ 325.692046][ T8067] which lock already depends on the new lock. [ 325.692046][ T8067] [ 325.702460][ T8067] [ 325.702460][ T8067] the existing dependency chain (in reverse order) is: [ 325.711622][ T8067] [ 325.711622][ T8067] -> #1 (&sbi->s_writepages_rwsem){.+.+}-{0:0}: [ 325.720984][ T8067] percpu_down_read+0x46/0x1b0 [ 325.726528][ T8067] ext4_writepages+0x20f/0x2df0 [ 325.732169][ T8067] do_writepages+0x476/0x6e0 [ 325.737381][ T8067] __writeback_single_inode+0x153/0xda0 [ 325.743623][ T8067] writeback_single_inode+0x3cb/0x8e0 [ 325.749775][ T8067] write_inode_now+0x23b/0x2c0 [ 325.755151][ T8067] iput+0x5ab/0x8a0 [ 325.759583][ T8067] ext4_xattr_set_entry+0x34f4/0x3ea0 [ 325.765656][ T8067] ext4_xattr_block_set+0x4fd/0x2d20 [ 325.771665][ T8067] ext4_expand_extra_isize_ea+0xf3f/0x19b0 [ 325.778029][ T8067] __ext4_expand_extra_isize+0x301/0x3e0 [ 325.784280][ T8067] __ext4_mark_inode_dirty+0x469/0x700 [ 325.790448][ T8067] ext4_evict_inode+0xa8d/0x1090 [ 325.796105][ T8067] evict+0x4c9/0x8d0 [ 325.800708][ T8067] ext4_orphan_cleanup+0xad2/0x1320 [ 325.806560][ T8067] ext4_fill_super+0x8d6e/0x94f0 [ 325.812082][ T8067] mount_bdev+0x287/0x3c0 [ 325.817110][ T8067] legacy_get_tree+0xe6/0x180 [ 325.822502][ T8067] vfs_get_tree+0x88/0x270 [ 325.827463][ T8067] do_new_mount+0x24a/0xa40 [ 325.832581][ T8067] __se_sys_mount+0x2e3/0x3d0 [ 325.837781][ T8067] do_syscall_64+0x4c/0xa0 [ 325.842733][ T8067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.849306][ T8067] [ 325.849306][ T8067] -> #0 (&ei->xattr_sem){++++}-{3:3}: [ 325.856982][ T8067] __lock_acquire+0x2c42/0x7d10 [ 325.862366][ T8067] lock_acquire+0x19e/0x400 [ 325.867499][ T8067] down_write+0x38/0x60 [ 325.872365][ T8067] ext4_destroy_inline_data+0x24/0xe0 [ 325.878268][ T8067] ext4_writepages+0x670/0x2df0 [ 325.883648][ T8067] do_writepages+0x476/0x6e0 [ 325.888888][ T8067] filemap_fdatawrite_wbc+0x1eb/0x240 [ 325.894873][ T8067] file_write_and_wait_range+0x14d/0x220 [ 325.901030][ T8067] ext4_sync_file+0x1ff/0xae0 [ 325.906316][ T8067] ext4_buffered_write_iter+0x338/0x3b0 [ 325.912394][ T8067] ext4_file_write_iter+0x74d/0x1700 [ 325.918293][ T8067] vfs_write+0x745/0xd60 [ 325.923060][ T8067] ksys_write+0x152/0x260 [ 325.928001][ T8067] do_syscall_64+0x4c/0xa0 [ 325.933025][ T8067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 325.939535][ T8067] [ 325.939535][ T8067] other info that might help us debug this: [ 325.939535][ T8067] [ 325.950028][ T8067] Possible unsafe locking scenario: [ 325.950028][ T8067] [ 325.957507][ T8067] CPU0 CPU1 [ 325.962969][ T8067] ---- ---- [ 325.968540][ T8067] lock(&sbi->s_writepages_rwsem); [ 325.973832][ T8067] lock(&ei->xattr_sem); [ 325.980874][ T8067] lock(&sbi->s_writepages_rwsem); [ 325.988626][ T8067] lock(&ei->xattr_sem); [ 325.992971][ T8067] [ 325.992971][ T8067] *** DEADLOCK *** [ 325.992971][ T8067] [ 326.001221][ T8067] 3 locks held by syz.9.828/8067: [ 326.006259][ T8067] #0: ffff8880776340f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370 [ 326.015497][ T8067] #1: ffff888061d08460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x295/0xd60 [ 326.024386][ T8067] #2: ffff888061d0ac58 (&sbi->s_writepages_rwsem){.+.+}-{0:0}, at: ext4_writepages+0x20f/0x2df0 [ 326.035010][ T8067] [ 326.035010][ T8067] stack backtrace: [ 326.041122][ T8067] CPU: 1 PID: 8067 Comm: syz.9.828 Not tainted syzkaller #0 [ 326.048409][ T8067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 326.058671][ T8067] Call Trace: [ 326.061960][ T8067] [ 326.064903][ T8067] dump_stack_lvl+0x188/0x250 [ 326.069586][ T8067] ? load_image+0x400/0x400 [ 326.074365][ T8067] ? show_regs_print_info+0x20/0x20 [ 326.079822][ T8067] ? print_circular_bug+0x12b/0x1a0 [ 326.085243][ T8067] check_noncircular+0x296/0x330 [ 326.090200][ T8067] ? add_chain_block+0x940/0x940 [ 326.095434][ T8067] ? lockdep_lock+0xf1/0x1f0 [ 326.100150][ T8067] ? lockdep_lock+0xf1/0x1f0 [ 326.104859][ T8067] ? mark_lock+0x94/0x320 [ 326.109284][ T8067] __lock_acquire+0x2c42/0x7d10 [ 326.114152][ T8067] ? verify_lock_unused+0x140/0x140 [ 326.119352][ T8067] ? mark_lock+0x94/0x320 [ 326.123684][ T8067] ? verify_lock_unused+0x140/0x140 [ 326.129075][ T8067] ? __lock_acquire+0x12e8/0x7d10 [ 326.134126][ T8067] lock_acquire+0x19e/0x400 [ 326.138660][ T8067] ? ext4_destroy_inline_data+0x24/0xe0 [ 326.144314][ T8067] ? read_lock_is_recursive+0x10/0x10 [ 326.149785][ T8067] ? rcu_read_lock_any_held+0xb0/0x130 [ 326.155258][ T8067] ? ext4_journal_check_start+0x180/0x250 [ 326.161127][ T8067] down_write+0x38/0x60 [ 326.165536][ T8067] ? ext4_destroy_inline_data+0x24/0xe0 [ 326.171169][ T8067] ext4_destroy_inline_data+0x24/0xe0 [ 326.176578][ T8067] ext4_writepages+0x670/0x2df0 [ 326.181449][ T8067] ? verify_lock_unused+0x140/0x140 [ 326.186831][ T8067] ? mark_lock+0x94/0x320 [ 326.191168][ T8067] ? __might_sleep+0xf0/0xf0 [ 326.195859][ T8067] ? ext4_readpage+0x2e0/0x2e0 [ 326.200723][ T8067] ? __lock_acquire+0x7d10/0x7d10 [ 326.205749][ T8067] ? do_raw_spin_lock+0x128/0x2f0 [ 326.210873][ T8067] ? do_raw_spin_unlock+0x11d/0x230 [ 326.216548][ T8067] ? ext4_readpage+0x2e0/0x2e0 [ 326.221442][ T8067] do_writepages+0x476/0x6e0 [ 326.226159][ T8067] ? filemap_fdatawrite_wbc+0x1e0/0x240 [ 326.231892][ T8067] ? __writepage+0x130/0x130 [ 326.236684][ T8067] ? __lock_acquire+0x7d10/0x7d10 [ 326.241895][ T8067] ? __rwlock_init+0x140/0x140 [ 326.246920][ T8067] ? generic_write_end+0x24d/0x3d0 [ 326.252133][ T8067] ? do_raw_spin_unlock+0x11d/0x230 [ 326.257437][ T8067] filemap_fdatawrite_wbc+0x1eb/0x240 [ 326.262952][ T8067] file_write_and_wait_range+0x14d/0x220 [ 326.268714][ T8067] ? __filemap_set_wb_err+0x1b0/0x1b0 [ 326.274097][ T8067] ext4_sync_file+0x1ff/0xae0 [ 326.278876][ T8067] ext4_buffered_write_iter+0x338/0x3b0 [ 326.284777][ T8067] ext4_file_write_iter+0x74d/0x1700 [ 326.290188][ T8067] ? rcu_read_lock_any_held+0xb0/0x130 [ 326.295929][ T8067] ? ext4_file_read_iter+0x700/0x700 [ 326.301252][ T8067] ? end_current_label_crit_section+0x14b/0x170 [ 326.307509][ T8067] ? memset+0x1e/0x40 [ 326.311505][ T8067] ? iov_iter_init+0xb4/0x170 [ 326.316282][ T8067] vfs_write+0x745/0xd60 [ 326.320806][ T8067] ? file_end_write+0x250/0x250 [ 326.325692][ T8067] ? __fget_files+0x40f/0x480 [ 326.330392][ T8067] ? mutex_lock_nested+0x17/0x20 [ 326.335712][ T8067] ? __fdget_pos+0x2bf/0x370 [ 326.340396][ T8067] ? ksys_write+0x71/0x260 [ 326.344907][ T8067] ksys_write+0x152/0x260 [ 326.349336][ T8067] ? __ia32_sys_read+0x80/0x80 [ 326.354102][ T8067] ? lockdep_hardirqs_on+0x94/0x140 [ 326.359309][ T8067] do_syscall_64+0x4c/0xa0 [ 326.363837][ T8067] ? clear_bhb_loop+0x30/0x80 [ 326.368516][ T8067] ? clear_bhb_loop+0x30/0x80 [ 326.373303][ T8067] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 326.379479][ T8067] RIP: 0033:0x7ff9ad8e0819 [ 326.383944][ T8067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.403817][ T8067] RSP: 002b:00007ff9abb3a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.412445][ T8067] RAX: ffffffffffffffda RBX: 00007ff9adb59fa0 RCX: 00007ff9ad8e0819 [ 326.420529][ T8067] RDX: 0000000000001006 RSI: 0000200000001440 RDI: 0000000000000005 [ 326.428801][ T8067] RBP: 00007ff9ad976c91 R08: 0000000000000000 R09: 0000000000000000 [ 326.436821][ T8067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.444917][ T8067] R13: 00007ff9adb5a038 R14: 00007ff9adb59fa0 R15: 00007ffea2e1b448 [ 326.452916][ T8067] [ 326.580056][ T8067] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 28 [ 326.594047][ T8067] EXT4-fs (loop9): This should not happen!! Data will be lost [ 326.594047][ T8067] [ 326.605899][ T8067] EXT4-fs (loop9): Total free blocks count 0 [ 326.612075][ T8067] EXT4-fs (loop9): Free/Dirty block details [ 326.618411][ T8067] EXT4-fs (loop9): free_blocks=4096 [ 326.634370][ T8067] EXT4-fs (loop9): dirty_blocks=16 [ 326.643453][ T8067] EXT4-fs (loop9): Block reservation details [ 326.657931][ T8067] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 327.341906][ T8090] loop3: detected capacity change from 0 to 40427 [ 335.459725][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 335.466267][ T1431] ieee802154 phy1 wpan1: encryption failed: -22