last executing test programs: 17m28.225996967s ago: executing program 32 (id=187): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0xb3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$9p_virtio(&(0x7f00000000c0), 0x0, 0x0, 0x20000cc, 0x0) r3 = socket(0x2, 0x3, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffc, '\x00', r4, 0xffffffffffffffff, 0x3, 0x4}, 0x50) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r6, 0x0, 0xffffffdb) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x12, 0xffffffffffffffff, 0x0) 15m24.149045457s ago: executing program 33 (id=416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) unshare(0x2a020400) unshare(0x2000400) 13m19.197078386s ago: executing program 34 (id=666): socket$unix(0x1, 0x1, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$kcm(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, 0x0, 0x0) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e28, 0x8, @mcast2, 0x5}, 0x1c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x840, 0x43) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) memfd_secret(0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x8) 13m7.062545617s ago: executing program 35 (id=686): setrlimit(0x1, &(0x7f0000000040)) syz_open_dev$radio(0x0, 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x24000080) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfffff, 0xfffffffffffffffe) 12m30.433265805s ago: executing program 36 (id=744): prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16=r2], 0x1, 0x374, &(0x7f0000000f80)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) gettid() r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) 7m24.450645837s ago: executing program 37 (id=1566): openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x40, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m19.647689481s ago: executing program 9 (id=2029): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @private=0xa010102}}, 0x0, 0x0, 0x2c, 0x0, "e83ae75240c2d6d8ec87bb53679fd0450078548ceb6c4414fab091000000000000000776aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3079cffcfd"}, 0xd8) pselect6(0x40, &(0x7f0000000500)={0x9, 0x5, 0x1, 0x0, 0xffffffff, 0x1, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r3 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r3, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 5m18.051305132s ago: executing program 9 (id=2037): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000100), 0x1, 0x7ad, &(0x7f00000007c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r2, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x2000, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0xdddd1000, 0x4000, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xe, 0x3, 0xc0}, {0xffff1000, 0xdddd1000, 0xb, 0x4f, 0x2, 0x7, 0x19, 0x1, 0x81, 0x0, 0x6, 0x5}, {0x8000000, 0x2000, 0xd, 0x5, 0x3, 0x46, 0x2, 0xd, 0x6, 0x8, 0x8, 0x1}, {0x9000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x8000000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x89, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x8, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0x0, 0x5, 0x28, 0x3, 0xa, 0x9, 0x58, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40010000, 0x0, 0x80a0000, 0x35c, 0x1, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) 5m17.125711875s ago: executing program 9 (id=2041): ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x3c, 0x64, 0x0, 0x7, 0x6, 0x0, @private=0xa010102, @remote}, {{0x6e22, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x8, 0x606d, 0x0, 0x1ff, {[@md5sig={0x13, 0x12, "0e958d0000f1ff000000ec2400000041"}]}}}}}}}, 0x0) 5m16.051584973s ago: executing program 9 (id=2046): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000000)='./file0\x00', 0x3200c94, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c00484516000000000037c015c57600912233eefc80e89be5a1ef2c27ebf5171169dcfa4805d89c7e1f70d73d64ab8b2194a9e8b537ad2ed68f83195872b3f3000000", @ANYRES64], 0x1, 0x2b9, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 5m15.619975766s ago: executing program 9 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_getroute={0x34, 0x1a, 0x1, 0x70bd2b, 0x25dfdbff, {0xa, 0x10, 0x80, 0xd7, 0xfd, 0x3, 0x0, 0x3, 0x200}, [@RTA_UID={0x8}, @RTA_MARK={0x8, 0x10, 0x80000001}, @RTA_OIF={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8004) 5m15.131987016s ago: executing program 9 (id=2052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@loopback, 0x5, r5}) 5m14.750597074s ago: executing program 38 (id=2052): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000200)={@loopback, 0x5, r5}) 4m41.290575282s ago: executing program 3 (id=2174): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x804810, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") chdir(&(0x7f00000001c0)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000200)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xc01, 0x108) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000140)={[{@abort}, {@delalloc}, {@nomblk_io_submit}, {@test_dummy_encryption}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbc8, &(0x7f0000002380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x82400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m39.660513867s ago: executing program 3 (id=2181): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x0, 0x0, 0x1}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000480)={0x2, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0xeeee8000, 0x17000, 0x1}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 4m39.179877065s ago: executing program 3 (id=2182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) pipe2$9p(0x0, 0x80800) stat(&(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0) socket(0x10, 0x803, 0x0) 4m38.03651759s ago: executing program 3 (id=2184): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x147842, 0x88) preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000006c0)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff3000/0x2000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x0}, 0x68) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r2, 0x0) 4m35.194607656s ago: executing program 3 (id=2190): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) getpeername(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40485404, &(0x7f0000000400)={{0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 4m32.288523669s ago: executing program 3 (id=2201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 4m31.88087731s ago: executing program 39 (id=2201): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) 3m22.10172948s ago: executing program 2 (id=2441): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000000c0)=0x3c760000) 3m21.179946003s ago: executing program 2 (id=2445): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r1, 0x6, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f0000000100)) ioctl$SIOCAX25ADDUID(r2, 0x89e1, &(0x7f0000000140)={0x3, @null}) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="180000000114fbdb"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) 3m16.456919269s ago: executing program 2 (id=2460): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f00000000c0)={0x2, 0x1, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x4008032, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x4008084}, 0x20000800) 3m14.699924236s ago: executing program 2 (id=2462): socket$inet6(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x3, 0x80000000) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00'}) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r3 = socket(0x2, 0x3, 0x67) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000070000"], 0x38}, 0x0) 3m10.054313624s ago: executing program 2 (id=2475): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)) r5 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r7 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r7, 0x1, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x40000000015, 0x5, 0x0) r9 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) getpid() r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) write$UHID_INPUT(r11, &(0x7f0000002080)={0x200f, {"20e30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) write$sndseq(r9, 0x0, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0xde) 3m7.731149069s ago: executing program 2 (id=2479): pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") lstat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="15000000100000000004"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 2m53.492960974s ago: executing program 6 (id=2517): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xbf5ce000) getpeername(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40485404, &(0x7f0000000400)={{0x3}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f0000000000)={0x1d, r5}, 0x10) setsockopt$CAN_RAW_FILTER(r6, 0x65, 0x1, &(0x7f00000000c0), 0xf00) 2m48.332790054s ago: executing program 40 (id=2479): pipe(&(0x7f0000000140)) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$eJzs3c9vVF0ZAOD3Tjttv34DBWWhRgURRUOY/gAaggthozGExEhcuYDaDk3TGabptEgri7J0byKJK/0T3LkwYeXCnTvducGFCSrRUBMXY+6dSzu0HVqk7dDO8yR37j3nXuY9Z4ZzztzDDCeAnnUuItYiYiAi7kfESJ6f5FvcbG3pda9fPZlef/VkOolm8+4/kux8mhdtfyb1af6cQxHxg+9G/DjZHrexsjo/Va1WFvP06FJtYbSxsnp5rpDnTEyOT45dv3JtYt/qerb2m5ffmbv9w9/99ksv/rj2zZ+mxSr97ER2rr0e+6lV9WKU2vL6I+L2QQTrkv787w9HT9raPhMR57P2PxJ92bsJABxnzeZINEfa0wDAcZfe/5ciKZTzuYBSFArlcmsO70wMF6r1xtKlkfryw5nI5rBORbHwYK5aGcvnCk9FMUnT49nxZnpiS/pKRJyOiJ8PfpKly9P16kw3P/gAQA/7dMv4/+/B1vgPABxzQ+95va8IAMDR977jPwBw9Bn/AaD3vMf4b+ofAI4J9/8A0HuM/wDQe3Yd/58eTjkAgEPx/Tt30q25nv//1zOPVpa/VXp0eabSmC/XlqfL0/XFhfJsvT5brZSnm83dnq9ary+MX91INlZW79Xqyw+X7s3VpmYr9yrFA64PALC702ef/zmJiLUbn2RbtK3lYKyG463Q7QIAXdPX7QIAXeP3PNC79nCPbxoAjrkdluh9S8evCD2z+CscVRc/b/4fepX5f+hd/9/8/7f3vRzA4TP/D72r2Uys+Q8APcYcP/BB//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPaqUbUmhnK0FvpY+FsrliBMRcSqKyYO5amUsIk5GxJ8Gi4NperzbhQYAPlDhb0m+/tfFkQulrWcHkv8MZvuI+Mkv7/7i8dTS0uJ4mv/PjfylZ3n+xEA3KgAAtLu5Pas1Tuf7thv516+eTL/ZDrOIL2+1FhdN467nW+tMf/Rn+6EoRsTwv5I83ZJ+Xunbh/hrTyPic5v1f9wWoZTNgbRWPt0aP4194gDib77+W+MX3opfyM6l+2L2Wnx2H8oCveb5rVY/mbe9tInl7a8Q57L9zu1/KOuhPtyb/m99W/9X2Oj/+rbFT7I2f24j/e6SvLz6++9ty2yOtM49jfhC/07xk434SYf+98Ie6/iXL375fKdzzV9FXIyd47fUsm52dKm2MNpYWb08V5uarcxWHk5MTI5Pjl2/cm1iNJujbj3+YacYf79x6WSn+Gn9hzvEH9ql/l/bY/1//d/7P/rKO+J/46s7v/9n3hE/HRO/vsf4U8M3Oy7fncaf6VD/3d7/S3uM/+KvqzN7vBQAOASNldX5qWq1srjLQfpZc7drHBzNg1iL+AiKkR8MxEdRjJ4/6HbPBBy0zUbf7ZIAAAAAAAAAAAAAAACdNFZW5wfjYH9O1O06AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHz9LwAA//9Jt84K") lstat(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="15000000100000000004"], 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xff) ioctl$GIO_UNIMAP(r2, 0x4b66, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r1, 0x0, 0x4040004) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040), 0x2}, 0x20) 2m47.57725373s ago: executing program 1 (id=2521): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99ee"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r9 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r7, r8, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r9, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 2m45.465465693s ago: executing program 6 (id=2522): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) getresuid(&(0x7f0000000040), &(0x7f00000000c0), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TCXONC(r1, 0x5608, 0x1) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={0x0, 0x0, 0x26}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="090000000400000004000000020000008000000086146dde60305b7926ab31c8f5b26e3fc7192e59b66141afd2308764000000007ca8d457aee225f1c673e42795978dd45a65dc63c4470ce2092c4a04d2111c42b2c2074341a1596b6abe832bf69062ffc3095be9ed5c33c0813e4d1963fa03d6cff981e2be2363ca1d94b99f32b0641f8812010000004fb10f1bbd2dee85b69444c5aeec4d0b7e2f61dc618ca0a74b2dc30f83bbd1c41061ea4cbb235f18cea78a0fe1e4af101d641878e100"/205, @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000100"/28], 0x50) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xa4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff3d72", 0x1e7}, {&(0x7f0000001b00)}], 0x2}}], 0x2, 0x2090) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x40) 2m45.266543893s ago: executing program 1 (id=2525): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000480)={0xa, 0xe20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x5}, 0x1c) 2m45.09892687s ago: executing program 1 (id=2526): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet(r0, &(0x7f0000000180)='\f', 0x1, 0x400002d, 0x0, 0x0) 2m44.235924387s ago: executing program 6 (id=2528): rseq(0x0, 0x0, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) mknod$loop(0x0, 0x2000, 0x1) openat$dir(0xffffffffffffff9c, 0x0, 0x84800, 0x0) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="043e1f0a00c9000201"], 0x22) mount$tmpfs(0x0, 0x0, 0x0, 0x48442, 0x0) 2m44.196233831s ago: executing program 1 (id=2529): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x800714, &(0x7f0000000000), 0xff, 0x4a7, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r5, 0x4b72, 0x0) write(r0, &(0x7f0000000180)="7e7226ce9b4d692092ffa2b579f0ff5793012c9738a9be19ff3e69a683a0a1bbace0dc3853c661a4e1019e7a1f3af60350126cb99c5f3ace6f5616c00e0fb30b2832398fed6233b8632a001dd0a846cbb8a5d77e3208db486b055edb6ae7917f07ccf4b6811be57047aa17799359e733ec395940d1feb7a9ec2ddadb1ff61070c9c00f9db8e47f74a5271fa77b6e692e6ac97aaae883e5522f8e86c2403aec0ff8dee1cba5d40f0969470b9a2a95f6f22f9d4250809400ea8403a6540948", 0xfffffec6) 2m43.018814089s ago: executing program 1 (id=2532): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$netlink(0x10, 0x3, 0x0) ptrace(0x8, r0) wait4(0x0, 0x0, 0x20000000, 0x0) 2m42.982430093s ago: executing program 6 (id=2533): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{}, {&(0x7f0000000100)="b9a7c60494d422f2", 0x8}], 0x2) 2m41.187996274s ago: executing program 1 (id=2539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000380)={[{0x5, 0x841, 0x9, 0x9, 0x5, 0x2, 0x0, 0x2, 0x4, 0xf8, 0xf0, 0x8, 0x4}, {0xfffffff9, 0x5, 0xfe, 0xb, 0x7, 0x4, 0x10, 0xf, 0x2, 0x8, 0x1, 0x4, 0x100}, {0x8, 0x81, 0x0, 0xf9, 0x3, 0x3, 0xc, 0x6, 0x7f, 0xe9, 0x0, 0x7, 0x7}], 0x8001}) 2m40.739919289s ago: executing program 41 (id=2539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000380)={[{0x5, 0x841, 0x9, 0x9, 0x5, 0x2, 0x0, 0x2, 0x4, 0xf8, 0xf0, 0x8, 0x4}, {0xfffffff9, 0x5, 0xfe, 0xb, 0x7, 0x4, 0x10, 0xf, 0x2, 0x8, 0x1, 0x4, 0x100}, {0x8, 0x81, 0x0, 0xf9, 0x3, 0x3, 0xc, 0x6, 0x7f, 0xe9, 0x0, 0x7, 0x7}], 0x8001}) 2m35.083628459s ago: executing program 6 (id=2549): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x140601, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_SREGS2(r3, 0x8140aecc, &(0x7f0000000280)) 2m34.647779723s ago: executing program 6 (id=2550): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$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") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() sync() syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m16.788999983s ago: executing program 42 (id=2550): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000640), 0x1, 0x5bc, &(0x7f0000001440)="$eJzs3V2IXGcdB+D/md1N87E1H7Zqa2xWQ20gdGez2YREvLDEj1qTWlG8CIWwZKe7IbM7a3YD3algizeiIII3IggVe2FFNJCbSqntRYs3Ckr9oKIxoIIIRSsFEdSRdz620+akCe7uHJrzPHBm3/Oe2X3f2eE355w57zkngNIaSw9ZxGhEXIyI7Z3Z1z9hrPOjefDCXJqyaLU+/bes/byZgxfmek/t/d629DAcsTkidh3LYu/Ile0urTTPTtfrtXPd+ery/GJ1aaV595n56dnabG3h0JGpo5OHp45Mrd9rnfjZ1lv/fOf9l594/p///tZvDv8g9Xe0u6z/dayXsRjr/k9GYmdf/XAWcd96N1aQoc5bHXf21WXDBXaI69Zq7fp+ev/eHhF72/nfHkPRefNeevrBf2yPX91bdB+BjdPqyV/8Sgu4YVXa28BZZTwiOuVKZXy8sw1/S2yt1BtLy/sfapxfmOlsK++IkcpDZ+q1ie6+wo4YydL8gXb5tfnJN8wfjGhvA39paEt7fvx0oz4z6A87oG004tLFz53etO0N+f/LUCf/wI0r5f+XLzz1bCq/OlR0b4BBSvn/3qvznwj5h9KRfygv+Yfykn8oL/mH8pJ/KC/5h/KSfygv+Yfykn8or17+HzhxIh44caLV7J7/vtCYPXN2bvHo5MT4/PnT46cb5xbHZxuN2fYZO/PX/rv1RmPxwGScf7i6XFtari6tNE/NN84vLJ9qn9d/qpZzKQCgACcvb75v557nXsoi4tEPbGlPyabuclmFG1urlUXR5yADxbDrD+XlUm1QXvbxgewayzdfbUF9/fsCDEal6A4AhbnrNsf/oKx8/w/l5ft/KC/b+IDv/6F8fP8P5TV6lft/3dx3766JiHhbRPx0aOSm3r2+gLeU1+3qj0ZcuvSdz1ZX78OtoKCgsFoo7oMKGIzXQl90T4CizBy8MNebBtXmM7ODagnI8/I9nUFAKffN7tRZMrx6bGBkg8YJ7bwjPf7o94/vmxtKU3Q/hzagKSDHo49FxLvy1v9Z+9jAju7zdnWeFrdExK0R8Y6IeOca2/7GpyLG4oVaf538w+Bcb/5vi4i0ur49It4dEbsj4j1rbPsXF1P+f72lv07+oRw+/3zRPQCK8vGniu4BUJSTxhhAaX33kaJ7ABTl6R8W3QOgKF99segeQLk9d09ETOQd/6u0j/f3jHSvC3hT91oAWyJia0Rs655DeHP3HMHtfccMr+XUJyPG4o4f99c5/geD0xv/17xi/F9ldfzfUETsWUMbz3xw9Ct59dO7U/6feKQ3/i9Nqf3eWEBgY738WMTtufnPVsf8ZpFyGvHe/7ONsS9cfjKv/sX7098d+bn8QzFa3454f+TnvyeVqsvzi9Wllebd7ft4z9YWDh2ZOjp5eOrIVLV9iZBq70IhOY7//ZX9efW/m0z5/+Yh+YdipPX/1qvkv3/7/31raOPY1798Mq9+9I8p/7ufffP8V/66KftMe753X4KHp5eXzx2I2JQdv7J+cg0dhRtcLyO9DKX879ubv/+/q/s7af1/LCI+nLYXIuI/EfHfiPhIRHw0Ij4WEfe+SZtfu2v2cl79H55M+X/8rPU/FCPlf+Ya6//0819raGP/vp98Ma/+Q3tS/sd/+6fjDw6nSf4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1t/SSvPsdL1eO7eBhaJfIwAAAAAAAJTF/wIAAP//d8Uzog==") bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sync() sync() syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x20404a, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1dc, &(0x7f0000000440)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file2\x00', 0x0, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 1m47.984418846s ago: executing program 0 (id=2625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xe, 0xf, &(0x7f00000016c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0xd, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1m47.024213792s ago: executing program 0 (id=2628): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x180}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x218641, 0x20) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4008041) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3c, &(0x7f0000000080)=0x3, 0x4) 1m45.899995426s ago: executing program 0 (id=2630): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x28011, r0, 0x4000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000dffffffffffffbbbbbbbbbbbb0806"], 0x2e) 1m40.613768259s ago: executing program 7 (id=2638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, &(0x7f000015bffc)='nfs\x00', 0x0, 0x0) setregid(0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}]}, &(0x7f00000002c0)=0x10) pipe2$9p(0x0, 0x80800) stat(&(0x7f00000000c0)='./cgroup.net/devices.allow\x00', 0x0) socket(0x10, 0x803, 0x0) 1m39.543192577s ago: executing program 7 (id=2640): io_setup(0x2, &(0x7f0000000080)) 1m38.52244099s ago: executing program 7 (id=2641): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 1m34.258740849s ago: executing program 7 (id=2645): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0x492492492492846, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) dup(r0) socket$nl_netfilter(0x10, 0x3, 0xc) 1m34.202947145s ago: executing program 0 (id=2646): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2a401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0xa1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m32.971940669s ago: executing program 0 (id=2648): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) 1m32.103855636s ago: executing program 7 (id=2652): mprotect(&(0x7f00004ff000/0x4000)=nil, 0x4000, 0x700000e) r0 = fsopen(&(0x7f0000000300)='devpts\x00', 0x1) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r3 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) 1m31.288065498s ago: executing program 0 (id=2653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5e00", 0x11}, {&(0x7f0000000100)="b9a7c60494d422f2", 0x8}], 0x2) 1m28.917153208s ago: executing program 7 (id=2655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 1m15.149344805s ago: executing program 43 (id=2653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89e7ee2c21fe62a3b47380c988ca4b5e00", 0x11}, {&(0x7f0000000100)="b9a7c60494d422f2", 0x8}], 0x2) 1m12.154888007s ago: executing program 44 (id=2655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$kcm(0x29, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r8, r9, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000480)=r10, 0x4) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 21.169757736s ago: executing program 8 (id=2769): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000200)=0x1000000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) 19.261881608s ago: executing program 8 (id=2770): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002080)={0x2020}, 0x2020) lseek(r3, 0xfffffffffffffff5, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 8.618387911s ago: executing program 8 (id=2779): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f00000000c0)={[{0x2d, 'cpu'}, {0x2b, 'pids'}]}, 0xb) syz_open_dev$MSR(&(0x7f00000001c0), 0x6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KDSETKEYCODE(r5, 0x4b4d, &(0x7f0000000300)={0xe, 0x5}) bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000005c, &(0x7f0000000500)=ANY=[], 0x1, 0x1537, &(0x7f0000001ec0)="$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") rmdir(&(0x7f0000000040)='./file0\x00') 7.93162738s ago: executing program 5 (id=2780): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000711834000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 7.692030114s ago: executing program 5 (id=2781): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000006f2c7cafd337302e4dd0993128484a16d7aaa4be0a88dec09f545664ce71a0e2321e562dec980245083feb9c1410fd9a5fe3335014ff2e89e15a37a7c186eebb"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f00000000c0)) 7.483466475s ago: executing program 5 (id=2782): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02010000000009040000018ea44300090585d167737c42597d30d599e944967aa40dff2da3b7c94f03428852ac6e0d659e7ba20cc54754667c4719c523f30a5eeacb"], 0x0) 6.482706547s ago: executing program 4 (id=2783): openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000140)={0x1c, 0x4, 0x2, 0x14, 0x1, 0x2, 0x0, 0xf, 0xffffffffffffffff}) 6.215926393s ago: executing program 5 (id=2784): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f00000002c0)={0x0, 0x5f9559ad1fdc6406}, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 6.176760227s ago: executing program 4 (id=2785): fallocate(0xffffffffffffffff, 0x10, 0x3, 0x7ffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0xfff, 0xd2900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="38000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) 4.988986697s ago: executing program 4 (id=2786): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x100002, 0x800000000000007}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe007d000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_pidfd_open(0x0, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r2, r3, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ptrace$cont(0x20, r0, 0x0, 0x63e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getpeername(0xffffffffffffffff, 0x0, 0x0) membarrier(0x2, 0x0) 4.633203513s ago: executing program 5 (id=2787): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x1, 0x8, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x220, 0x6, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "b50a6efb"}, @global=@item_012={0x1, 0x1, 0x8, "aa"}]}}, 0x0}, 0x0) 3.210915516s ago: executing program 4 (id=2788): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0xfffffffffffffffd}, 0x0) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x80a, &(0x7f0000000340)={[{@debug}, {@lazytime}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@noblock_validity}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0xc619}}, {@errors_remount}]}, 0x1, 0x7b5, &(0x7f0000001440)="$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") inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x449) syz_create_resource$binfmt(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_netdev_private(r1, 0x89f2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, 0x0) r3 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0506617, &(0x7f0000000280)={@id={0x2, 0x0, @a}, 0x40, r3, '\x00', @b}) keyctl$set_timeout(0xf, r3, 0x9) bind$unix(0xffffffffffffffff, 0x0, 0xfffffffffffffd89) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000280)="$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") 3.114008786s ago: executing program 5 (id=2789): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x800452d2, &(0x7f0000000100)) r5 = socket$netlink(0x10, 0x3, 0x15) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x10, r5}, 0x0) syz_open_dev$sg(&(0x7f0000000280), 0x5, 0x204000) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x8, 0x77}) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0xe4, 0xfc, 0xea, 0x8, 0xa257, 0x2013, 0x5448, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x0, 0x4c, 0x96, 0x78}}]}}]}}, 0x0) 2.808869046s ago: executing program 8 (id=2790): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08001, &(0x7f0000000840)={[{@noblock_validity}, {@debug}]}, 0x0, 0x49b, &(0x7f0000001800)="$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") syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000380)='./file0\x00', 0x10e, &(0x7f0000000140)={[{@inlinecrypt}, {@nodelalloc}, {@jqfmt_vfsold}, {@bh}, {@block_validity}, {@quota}]}, 0x3, 0x460, &(0x7f0000001380)="$eJzs289vFFUcAPDvzLZg+WEr4g9+qFU0Nv5oaUHl4EGNJh40MfGCx9oWgizU0JoIIYrG4NGQeDceTfwLPOnFqCcTr3o3JMRwEU1M1szuDLs77C4U2i5lP59k4L2d17733Tdv9715nQAG1nj2TxKxLSJ+j4jRRra9wHjjvyuXz879c/nsXBK12tt/JfVyf18+O1cULX5ua56ZSCPSz5LY06HepdNnjs9Wqwun8vzU8on3p5ZOn3n22InZowtHF07OHDp08MD0C8/PPHeDkfxX63X2nqytuz9a3Lvr9XcuvDl3+MK7P3+bFPGX4lgl471OPlHr2dwNZ3tLOhnqY0NYkUpEZN01XB//o1GJZueNxmuf9rVxwJqq5bqcPlcD7mBJ9LsFQH8UX/TZ+rc41m/20X+XXm4sgLK4r+RH48xQpNFYGA2X1reraTwiDp/796vsiLW5DwEA0Ob7bP7zTKf5Xxr3t5S7O98bGsv3UnZExL0RsTMi7ouol30gIh5cYf3lTZJr5z/pxZsK7AZl878X872t9vlfWhQZq+S57fXMcHLkWHVhf/6eTMTw5iw/3aOOH1797Ytu51rnf9mR1V/MBfN2XBza3P4z87PLs7cSc6tLn0TsHuoUf3J1JyCJiF0Rsfsm6zj21Dd7u50rxT/SvvlY9lJ7dhX2mWpfRzzZ6P9zUYq/kPTen5y6K6oL+6eKq+Jav/x6/q1u9V+//9dW1v9bOl7/V+MfS1r3a5dWXsf5Pz7vuqaZXPH1vyk65T6cXV4+NR2xKXmj0ejW12ea5Yt8UT6Lf2Jf5/G/I5rvxJ6IyC7ihyLi4Yh4JO+7RyPisYjYVw4sbSZ/euXx95q59gv8duj/+VL/j7UXKfV/M7Epyq90TlSO//hd+29sJm/s8+9gPTWRv5J9/l1v97y1FUmPBt7auwcAAAAbQxoR2yJJJ6+m03RysvE3/DtjS1pdXFp++sjiByfnG88IjMVwWtzpatwPbtwPnc6X9UV+ppQ/kN83/rIyUs9Pzi1W5/sdPAy4rV3Gf+bPSr9bB6w5z2vB4DL+YXAZ/zC4jH8YXB3G/0g/2gGsv07f/x83k7XR9WwMsK5K49+2HwwQ638YXMY/DK7W8d/z+XvgTrI0Er0f3h+ARHp7NGODJSLtW+3pqv/mZI1Hwbb+99dKE/3+ZAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFgd/wcAAP//nHbk3g==") mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x2088828, &(0x7f0000000140)='usrjquota=') 1.501872488s ago: executing program 8 (id=2791): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r4, r4, &(0x7f0000000000)=0x1, 0x4) 1.149103764s ago: executing program 4 (id=2792): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) socket$nl_route(0x10, 0x3, 0x0) munlock(&(0x7f000025e000/0x2000)=nil, 0x2000) 770.736502ms ago: executing program 4 (id=2793): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x9, 0xb}, {0xfff2, 0xffff}, {0xffe0}}}, 0x24}}, 0x10) 0s ago: executing program 8 (id=2794): fallocate(0xffffffffffffffff, 0x10, 0x3, 0x7ffd) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$usbfs(0x0, 0xfff, 0xd2900) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000000)="38000000010001", 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r5}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000003180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 930.730996][ T3654] usb 5-1: USB disconnect, device number 12 [ 930.937075][T13979] fido_id[13979]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 931.267969][T11850] EXT4-fs (loop4): unmounting filesystem. [ 932.267470][T13997] loop4: detected capacity change from 0 to 1024 [ 932.292237][T13997] EXT4-fs: Ignoring removed nomblk_io_submit option [ 932.300715][T13997] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 932.350569][T13997] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 932.382269][T10535] team0 (unregistering): Port device team_slave_1 removed [ 932.438654][T13997] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 932.488142][T10535] team0 (unregistering): Port device team_slave_0 removed [ 932.617729][T11851] Bluetooth: hci0: command 0x0401 tx timeout [ 932.650520][T10535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 932.740799][T10535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 932.805129][T11850] EXT4-fs (loop4): unmounting filesystem. [ 932.978061][T14009] overlayfs: missing 'lowerdir' [ 933.792416][T14016] loop4: detected capacity change from 0 to 8192 [ 934.227866][T10535] bond0 (unregistering): Released all slaves [ 934.326698][T13810] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.338933][T13810] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.353971][T13810] device bridge_slave_1 entered promiscuous mode [ 934.400780][T13965] netlink: 'syz.6.2099': attribute type 7 has an invalid length. [ 934.617328][T14023] loop6: detected capacity change from 0 to 512 [ 934.629953][T13810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.669742][T13810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.804185][T14023] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 934.866138][T13810] team0: Port device team_slave_0 added [ 934.873853][T14023] ext4 filesystem being mounted at /332/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 935.014239][T13810] team0: Port device team_slave_1 added [ 935.065063][T14030] loop3: detected capacity change from 0 to 128 [ 935.179799][T13810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.212446][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.241146][T13810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.266265][T14036] syz.3.2121: attempt to access beyond end of device [ 935.266265][T14036] loop3: rw=2049, sector=145, nr_sectors = 152 limit=128 [ 935.282588][ T6420] EXT4-fs (loop6): unmounting filesystem. [ 935.292817][T13810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.299830][T13810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 935.429619][T13810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.448411][T14030] syz.3.2121: attempt to access beyond end of device [ 935.448411][T14030] loop3: rw=0, sector=177, nr_sectors = 1 limit=128 [ 935.508577][T14036] syz.3.2121: attempt to access beyond end of device [ 935.508577][T14036] loop3: rw=524288, sector=145, nr_sectors = 32 limit=128 [ 935.570470][T14036] syz.3.2121: attempt to access beyond end of device [ 935.570470][T14036] loop3: rw=524288, sector=185, nr_sectors = 112 limit=128 [ 935.844510][T13810] device hsr_slave_0 entered promiscuous mode [ 935.975925][T13810] device hsr_slave_1 entered promiscuous mode [ 936.097650][T13810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 936.172701][T13810] Cannot create hsr debugfs directory [ 937.126845][T14062] loop3: detected capacity change from 0 to 2048 [ 937.344542][T14062] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 939.387555][T13810] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 939.434008][T13810] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 939.467758][T13810] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 939.505937][T13810] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 939.878369][T13810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 939.940270][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 939.956933][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 939.992586][T13810] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.042006][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 940.067624][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 940.092212][T11973] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.099472][T11973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.159915][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 940.173309][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 940.262086][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 940.314243][T11973] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.321507][T11973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 940.385057][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 940.409070][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 940.423799][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 940.445019][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 941.052367][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 941.438643][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 941.482153][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 941.531870][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 941.566407][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 941.624928][T13810] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 941.695108][T13810] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 941.745469][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 941.776024][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 944.012794][T14153] loop3: detected capacity change from 0 to 256 [ 944.057704][T14153] exfat: Deprecated parameter 'utf8' [ 944.063127][T14153] exfat: Deprecated parameter 'namecase' [ 944.115529][T14153] exfat: Deprecated parameter 'utf8' [ 944.198493][T14153] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb91b7c9d, utbl_chksum : 0xe619d30d) [ 944.276154][T14153] syz.3.2150: attempt to access beyond end of device [ 944.276154][T14153] loop3: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 944.347775][T14153] syz.3.2150: attempt to access beyond end of device [ 944.347775][T14153] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 944.597585][ T27] kauditd_printk_skb: 26 callbacks suppressed [ 944.597600][ T27] audit: type=1800 audit(1768221357.200:305): pid=14153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2150" name="file1" dev="loop3" ino=1048705 res=0 errno=0 [ 945.441162][T14175] loop4: detected capacity change from 0 to 256 [ 945.548166][T14175] FAT-fs (loop4): Directory bread(block 64) failed [ 945.569558][T14175] FAT-fs (loop4): Directory bread(block 65) failed [ 945.576476][T14175] FAT-fs (loop4): Directory bread(block 66) failed [ 945.591113][T14175] FAT-fs (loop4): Directory bread(block 67) failed [ 945.612467][T14175] FAT-fs (loop4): Directory bread(block 68) failed [ 945.622935][T14175] FAT-fs (loop4): Directory bread(block 69) failed [ 945.648491][T14175] FAT-fs (loop4): Directory bread(block 70) failed [ 945.677202][T14175] FAT-fs (loop4): Directory bread(block 71) failed [ 945.716454][T14175] FAT-fs (loop4): Directory bread(block 72) failed [ 945.744577][T14175] FAT-fs (loop4): Directory bread(block 73) failed [ 945.780383][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 945.801674][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 945.839946][T13810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.934463][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 945.953303][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 946.011601][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 946.071047][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 946.095114][T13810] device veth0_vlan entered promiscuous mode [ 946.114030][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 946.134536][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 946.151168][T13810] device veth1_vlan entered promiscuous mode [ 946.205218][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 946.235949][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 946.258569][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 946.285231][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 946.320238][T13810] device veth0_macvtap entered promiscuous mode [ 946.384488][T13810] device veth1_macvtap entered promiscuous mode [ 946.446998][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 946.583802][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 946.825072][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.082818][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.142783][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 947.164458][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 947.197751][T13810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 948.129141][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 948.146753][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 948.397762][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 948.437518][T14207] loop6: detected capacity change from 0 to 512 [ 948.441389][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 948.496106][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.536169][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.546178][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.557073][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.567189][T13810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 948.578031][T13810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 948.590078][T13810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.601221][T13810] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.610004][T13810] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.619095][T13810] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.628079][T13810] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.697992][T14207] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 948.746391][T14207] ext4 filesystem being mounted at /343/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 948.788405][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 948.810320][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 949.649688][ T4615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.658123][ T4615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 949.671502][T14207] EXT4-fs error (device loop6): ext4_get_first_dir_block:3594: inode #12: comm syz.6.2162: directory missing '.' [ 949.820855][T14207] EXT4-fs (loop6): Remounting filesystem read-only [ 949.860283][ T4517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 949.869985][ T4517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 949.934662][ T4517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 950.035803][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 950.241616][ T6420] EXT4-fs (loop6): unmounting filesystem. [ 953.058180][ T3654] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 953.175502][T14251] loop3: detected capacity change from 0 to 2048 [ 953.225032][T14251] EXT4-fs: Ignoring removed nobh option [ 953.395563][ T3654] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 953.399901][T14251] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 953.421260][T14251] ext4 filesystem being mounted at /478/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 953.425987][ T3654] usb 2-1: config 0 has no interface number 0 [ 953.895051][ T27] audit: type=1800 audit(1768221365.909:306): pid=14251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2174" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 953.901660][ T3654] usb 2-1: config 0 interface 1 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 953.948038][T14251] fs-verity: sha256 using implementation "sha256-avx2" [ 953.966196][ T3654] usb 2-1: config 0 interface 1 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 954.005303][ T3654] usb 2-1: config 0 interface 1 has no altsetting 0 [ 954.020118][ T3654] usb 2-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 954.068446][ T3654] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.094181][ T3654] usb 2-1: config 0 descriptor?? [ 954.149794][T14245] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 954.481285][T14251] fs-verity: sha512 using implementation "sha512-avx2" [ 954.621320][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.641755][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.650176][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.680113][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 954.691850][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.715432][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.723420][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.804530][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.827803][ T3654] holtek_mouse 0003:04D9:A067.0009: unknown main item tag 0x0 [ 954.866150][ T3654] holtek_mouse 0003:04D9:A067.0009: hidraw0: USB HID v0.00 Device [HID 04d9:a067] on usb-dummy_hcd.1-1/input1 [ 954.932269][ T3654] usb 2-1: USB disconnect, device number 5 [ 955.248910][T14282] fido_id[14282]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 958.024495][T14299] loop3: detected capacity change from 0 to 512 [ 958.196366][T14299] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 958.285995][T14299] ext4 filesystem being mounted at /481/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 958.502475][ T27] audit: type=1800 audit(1768221370.212:307): pid=14299 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2184" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 958.670934][T14299] loop3: detected capacity change from 512 to 64 [ 958.682868][T14307] syz.3.2184: attempt to access beyond end of device [ 958.682868][T14307] loop3: rw=524288, sector=82, nr_sectors = 2 limit=64 [ 958.762071][T14307] syz.3.2184: attempt to access beyond end of device [ 958.762071][T14307] loop3: rw=0, sector=82, nr_sectors = 2 limit=64 [ 958.843574][T14307] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5928: Out of memory [ 958.920398][T14307] EXT4-fs error (device loop3): ext4_dirty_inode:6132: inode #15: comm syz.3.2184: mark_inode_dirty error [ 958.967006][ T27] audit: type=1800 audit(1768221370.642:308): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2184" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 959.130509][ T4271] syz-executor: attempt to access beyond end of device [ 959.130509][ T4271] loop3: rw=12288, sector=70, nr_sectors = 2 limit=64 [ 959.206949][ T4271] EXT4-fs error (device loop3): ext4_get_inode_loc:4651: inode #2: block 35: comm syz-executor: unable to read itable block [ 959.264802][ T4271] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5928: IO failure [ 959.297488][ T4271] EXT4-fs error (device loop3): ext4_dirty_inode:6132: inode #2: comm syz-executor: mark_inode_dirty error [ 959.537126][ T4454] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 959.761787][ T4454] usb 7-1: Using ep0 maxpacket: 8 [ 959.772674][ T4454] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 959.808738][ T4454] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.847014][ T4454] usb 7-1: Product: syz [ 959.861057][ T4454] usb 7-1: Manufacturer: syz [ 959.875633][ T4454] usb 7-1: SerialNumber: syz [ 960.065943][ T4454] usb 7-1: config 0 descriptor?? [ 960.085203][ T4454] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 960.916455][ T4454] gspca_sonixj: reg_r err -32 [ 960.921302][ T4454] sonixj: probe of 7-1:0.0 failed with error -32 [ 961.142564][T14339] fuse: Unknown parameter 'grou00000000000000000000' [ 961.305952][ T4314] tipc: Left network mode [ 961.796873][ T56] kworker/u4:4: attempt to access beyond end of device [ 961.796873][ T56] loop3: rw=12288, sector=70, nr_sectors = 2 limit=64 [ 961.846512][ T56] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4636: inode #2: block 35: comm kworker/u4:4: unable to read itable block [ 961.908529][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 962.504101][ T4314] device gretap0 left promiscuous mode [ 962.521333][ T4314] bridge0: port 3(gretap0) entered disabled state [ 962.548857][ T5589] usb 7-1: USB disconnect, device number 22 [ 965.078081][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 965.089364][ T4281] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 965.100523][ T4281] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 965.108846][ T4281] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 965.130796][ T4281] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 965.138212][ T4281] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.229431][ T4314] device hsr_slave_0 left promiscuous mode [ 965.246122][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.284310][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.332332][ T4314] device bridge_slave_1 left promiscuous mode [ 965.338937][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.430948][ T4314] device bridge_slave_0 left promiscuous mode [ 965.437290][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.646578][ T4281] Bluetooth: hci0: command 0x0401 tx timeout [ 967.331778][T11851] Bluetooth: hci3: command 0x0409 tx timeout [ 969.558140][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 969.607211][ T4672] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 969.636421][ T4314] team0 (unregistering): Port device team_slave_1 removed [ 969.707833][ T4314] team0 (unregistering): Port device team_slave_0 removed [ 969.815092][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 969.822037][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 969.832185][ T4672] usb 2-1: Using ep0 maxpacket: 32 [ 969.843986][ T4672] usb 2-1: config 1 has an invalid interface number: 10 but max is 0 [ 969.865495][ T4672] usb 2-1: config 1 has no interface number 0 [ 969.871672][ T4672] usb 2-1: config 1 interface 10 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 969.917356][ T4672] usb 2-1: New USB device found, idVendor=2001, idProduct=3319, bcdDevice=5b.04 [ 969.943514][ T4672] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.954009][ T4672] usb 2-1: Product: syz [ 969.958248][ T4672] usb 2-1: Manufacturer: syz [ 969.967319][ T4672] usb 2-1: SerialNumber: syz [ 970.223981][ T4672] usb 2-1: USB disconnect, device number 6 [ 971.788122][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 973.138740][T14390] chnl_net:caif_netlink_parms(): no params data found [ 974.078623][T11851] Bluetooth: hci3: command 0x0419 tx timeout [ 974.930882][T14390] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.963651][T14390] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.989424][T14390] device bridge_slave_0 entered promiscuous mode [ 975.041003][T14390] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.048242][T14390] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.108653][T14390] device bridge_slave_1 entered promiscuous mode [ 975.186082][T14390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.225524][T14390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.433253][T14390] team0: Port device team_slave_0 added [ 975.502816][T14390] team0: Port device team_slave_1 added [ 977.885719][T14390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 977.903133][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.458954][T14390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.604638][T14390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.611672][T14390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.702505][T14390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.816939][T11851] Bluetooth: hci3: command 0x0411 tx timeout [ 979.908031][T14390] device hsr_slave_0 entered promiscuous mode [ 979.951324][T14390] device hsr_slave_1 entered promiscuous mode [ 979.983585][T14390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 980.012761][T14390] Cannot create hsr debugfs directory [ 980.938220][T14513] fuse: Unknown parameter 'group_i00000000000000000000' [ 982.950993][T14390] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 982.986823][T14390] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 983.018051][T14390] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 983.050866][T14390] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 984.102272][T14390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 984.152271][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 984.169675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 984.211390][T14390] 8021q: adding VLAN 0 to HW filter on device team0 [ 984.285031][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 984.311149][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 984.346627][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 984.353878][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 984.401061][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 984.414127][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 984.422870][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 984.430058][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 984.474539][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 984.514826][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 984.534586][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 984.604989][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 984.624684][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 984.649742][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 984.692349][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 984.726753][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 984.751273][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 984.804169][T14390] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 984.841645][T14390] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 984.877293][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 984.895950][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 984.931682][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 986.358917][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 986.382234][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 986.397119][T14390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 986.428530][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 986.443156][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 986.504750][T14628] loop6: detected capacity change from 0 to 1024 [ 986.531220][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 986.544300][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 986.557382][ T4273] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 986.591488][T14390] device veth0_vlan entered promiscuous mode [ 986.606916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 986.649033][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 986.699185][T14390] device veth1_vlan entered promiscuous mode [ 986.808121][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 986.838204][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 986.889338][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 986.961049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 987.136464][T14390] device veth0_macvtap entered promiscuous mode [ 987.592937][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 987.686325][T14390] device veth1_macvtap entered promiscuous mode [ 987.871739][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.893218][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.941549][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 987.973892][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 987.983830][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.018791][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.038169][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 988.059222][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.084988][T14390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 988.285989][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.331992][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.384551][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.416571][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.448479][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.510637][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.565311][T14390] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 988.614273][T14390] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 988.654146][T14390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 988.684939][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 988.708407][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 988.798887][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 988.821909][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 988.952303][T14390] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 988.999397][T14390] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.115986][T14655] loop1: detected capacity change from 0 to 1024 [ 989.190286][T14390] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.422645][T14390] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 989.622752][T14655] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 989.931283][T11973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 989.952949][T11973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.030497][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 990.058439][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 990.079148][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 990.108038][T13810] EXT4-fs (loop1): unmounting filesystem. [ 990.139724][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 990.406709][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 990.444703][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 990.495384][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 990.516063][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 990.615930][T14681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2204'. [ 990.665776][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 990.723962][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 990.760953][T14681] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 991.097246][T14697] netlink: 'syz.4.2297': attribute type 1 has an invalid length. [ 991.804341][T14697] device bond1 entered promiscuous mode [ 991.884461][T14697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 991.935139][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 992.120410][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 992.201538][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 992.291150][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 992.359673][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 992.427652][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 992.500868][T14699] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 997.042827][ T22] hid-generic 0062:0008:0005.000A: unexpected long global item [ 997.069787][ T22] hid-generic: probe of 0062:0008:0005.000A failed with error -22 [ 997.984139][T14791] fuse: Unknown parameter 'group_id00000000000000000000' [ 1000.556655][T11851] Bluetooth: hci0: command 0x0401 tx timeout [ 1002.757833][T14839] loop4: detected capacity change from 0 to 1024 [ 1002.867092][T14839] EXT4-fs: Ignoring removed orlov option [ 1003.432978][T14849] ipt_REJECT: ECHOREPLY no longer supported. [ 1003.902768][T14839] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 1004.893458][ T4273] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1006.313632][ T22] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1006.875035][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 1006.888845][ T22] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 1007.031701][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.148693][ T22] usb 5-1: config 0 descriptor?? [ 1007.163120][ T22] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 1007.514485][ T22] gspca_sonixj: reg_w1 err -71 [ 1007.520835][ T22] sonixj: probe of 5-1:0.0 failed with error -71 [ 1007.587077][ T22] usb 5-1: USB disconnect, device number 13 [ 1008.110130][T11617] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1008.175929][T14900] loop1: detected capacity change from 0 to 128 [ 1008.259239][T14900] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1008.332495][T11617] usb 7-1: config 0 has an invalid interface number: 46 but max is 0 [ 1008.352095][T14900] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1008.408308][T11617] usb 7-1: config 0 has no interface number 0 [ 1008.439536][T11617] usb 7-1: config 0 interface 46 has no altsetting 0 [ 1008.510365][T11617] usb 7-1: New USB device found, idVendor=05ac, idProduct=20cf, bcdDevice=bb.2a [ 1008.584473][T11617] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.755264][T14900] fscrypt (loop1, inode 12): Mutually exclusive encryption flags (0x19) [ 1008.776356][T11617] usb 7-1: config 0 descriptor?? [ 1008.883416][T14911] fuse: Bad value for 'fd' [ 1009.004600][T11617] usb 7-1: string descriptor 0 read error: -71 [ 1009.024253][T11617] ipheth 7-1:0.46: Unable to find alternate settings interface [ 1009.087958][ T5589] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1009.129587][T11617] usb 7-1: USB disconnect, device number 23 [ 1009.220718][T13810] EXT4-fs (loop1): unmounting filesystem. [ 1009.314233][ T5589] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1009.322593][ T5589] usb 5-1: config 0 has no interface number 0 [ 1009.579510][ T5589] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1010.069581][ T5589] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1010.079735][ T5589] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.088141][ T5589] usb 5-1: Product: syz [ 1010.092357][ T5589] usb 5-1: Manufacturer: syz [ 1010.097330][ T5589] usb 5-1: SerialNumber: syz [ 1010.104929][ T5589] usb 5-1: config 0 descriptor?? [ 1010.111250][T14907] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1010.137611][T14924] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1010.147115][ T5589] smsc95xx v2.0.0 [ 1010.150821][ T5589] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1010.202509][ T5589] smsc95xx: probe of 5-1:0.67 failed with error -22 [ 1011.238566][T14955] fuse: Bad value for 'fd' [ 1011.567849][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1011.737157][T14969] overlayfs: failed to clone upperpath [ 1011.835120][ T22] usb 3-1: device descriptor read/64, error -71 [ 1011.841510][ T4673] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1012.001542][ T4454] usb 5-1: USB disconnect, device number 14 [ 1012.348382][ T4673] usb 7-1: Using ep0 maxpacket: 32 [ 1012.355438][ T4673] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1012.370941][ T4673] usb 7-1: config 0 has no interface number 0 [ 1012.377193][ T4673] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1012.388892][ T4673] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1012.395877][ T22] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1012.406463][ T4673] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1012.435629][ T4673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1012.454646][ T4673] usb 7-1: Product: syz [ 1012.465357][ T4673] usb 7-1: Manufacturer: syz [ 1012.476143][ T4673] usb 7-1: SerialNumber: syz [ 1012.491916][T14984] loop4: detected capacity change from 0 to 512 [ 1012.509957][ T4673] usb 7-1: config 0 descriptor?? [ 1012.568085][T14984] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1012.579021][ T22] usb 3-1: device descriptor read/64, error -71 [ 1012.623830][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2375'. [ 1012.682941][T14984] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1012.723108][ T22] usb usb3-port1: attempt power cycle [ 1012.737196][T14984] EXT4-fs (loop4): 1 truncate cleaned up [ 1012.743375][T14984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1012.835396][T11850] EXT4-fs (loop4): unmounting filesystem. [ 1013.338607][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1013.738536][ T4673] appletouch 7-1:0.85: Geyser mode initialized. [ 1013.789496][ T4673] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.85/input/input10 [ 1013.843741][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 1013.859058][ T22] usb 3-1: device descriptor read/8, error -71 [ 1013.873687][ C1] appletouch 7-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 1013.898152][ T4673] usb 7-1: USB disconnect, device number 24 [ 1013.927403][ T4673] appletouch 7-1:0.85: input: appletouch disconnected [ 1014.171492][T15015] overlayfs: failed to clone upperpath [ 1014.756728][ T22] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 1014.828797][ T22] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1014.847687][ T22] usb 3-1: config 0 has no interface number 0 [ 1014.880602][ T22] usb 3-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1015.040246][ T22] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1015.085107][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.160131][ T22] usb 3-1: Product: syz [ 1015.164380][ T22] usb 3-1: Manufacturer: syz [ 1015.188859][ T22] usb 3-1: SerialNumber: syz [ 1015.243761][ T22] usb 3-1: config 0 descriptor?? [ 1015.261984][T15022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1015.302999][ T22] smsc95xx v2.0.0 [ 1015.306827][ T22] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1015.332646][ T22] smsc95xx: probe of 3-1:0.67 failed with error -22 [ 1015.766261][T15051] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 1015.801316][T15051] device bond1 entered promiscuous mode [ 1015.817400][T15051] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1017.940216][ T22] usb 3-1: USB disconnect, device number 9 [ 1019.626724][T15098] loop6: detected capacity change from 0 to 512 [ 1019.657391][T15098] EXT4-fs: Ignoring removed mblk_io_submit option [ 1019.731404][T15098] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 1020.109734][T15107] loop1: detected capacity change from 0 to 8 [ 1020.268423][T15107] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1020.277263][T15107] SQUASHFS error: Failed to read block 0x9b: -5 [ 1020.283854][T15107] SQUASHFS error: Unable to read metadata cache entry [99] [ 1020.291474][T15107] SQUASHFS error: Unable to read inode 0x127 [ 1020.378094][T15098] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a003c11c, mo2=0002] [ 1020.615318][T15098] System zones: 1-12 [ 1020.788491][T15098] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2200: inode #15: comm syz.6.2402: corrupted in-inode xattr [ 1020.803474][T15098] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.2402: couldn't read orphan inode 15 (err -117) [ 1020.831291][T15098] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 1021.069547][T15120] loop4: detected capacity change from 0 to 256 [ 1021.311471][T15120] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1021.340323][ T6420] EXT4-fs (loop6): unmounting filesystem. [ 1021.371362][T15120] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1021.459687][T15120] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1022.902947][T15140] fuse: Bad value for 'fd' [ 1025.727720][T15170] loop6: detected capacity change from 0 to 256 [ 1026.123103][T15178] loop1: detected capacity change from 0 to 1024 [ 1027.825650][T15203] fuse: Bad value for 'fd' [ 1027.945547][T15205] loop1: detected capacity change from 0 to 8 [ 1027.956695][T15205] squashfs: Unknown parameter 'ils 0 [ 1027.956695][T15205] Ip6FragOKs 0 [ 1027.956695][T15205] Ip6FragFails 0 [ 1027.956695][T15205] Ip6FragCreates 0 [ 1027.956695][T15205] Ip6InMcastPkts 423 [ 1027.956695][T15205] Ip6OutMcastPkts 590 [ 1027.956695][T15205] Ip6InOctets ' [ 1030.263881][ T27] audit: type=1326 audit(1768221437.336:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fc18f749 code=0x7ffc0000 [ 1030.459514][ T27] audit: type=1326 audit(1768221437.514:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7ff4fc18f749 code=0x7ffc0000 [ 1030.484233][ T3654] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1030.531349][ T27] audit: type=1326 audit(1768221437.514:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fc18f749 code=0x7ffc0000 [ 1030.730203][ T3654] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1030.746293][ T3654] usb 2-1: config 0 has no interface number 0 [ 1030.821111][ T3654] usb 2-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1031.093570][ T3654] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1031.289315][ T3654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.321859][ T27] audit: type=1326 audit(1768221437.514:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15237 comm="syz.6.2433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4fc18f749 code=0x7ffc0000 [ 1031.399099][ T3654] usb 2-1: Product: syz [ 1031.403425][ T3654] usb 2-1: Manufacturer: syz [ 1031.408082][ T3654] usb 2-1: SerialNumber: syz [ 1031.428988][T15253] fuse: Bad value for 'fd' [ 1031.461203][ T3654] usb 2-1: config 0 descriptor?? [ 1031.480613][T15235] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1031.492139][ T3654] smsc95xx v2.0.0 [ 1031.501705][ T3654] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1031.523042][ T3654] smsc95xx: probe of 2-1:0.67 failed with error -22 [ 1033.366129][ T3654] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1033.494732][ T22] usb 2-1: USB disconnect, device number 7 [ 1033.601957][ T3654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1033.638198][ T3654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.905565][ T3654] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1034.217471][ T3654] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1034.260160][ T3654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.303793][ T3654] usb 5-1: config 0 descriptor?? [ 1034.345636][T15307] fuse: Bad value for 'fd' [ 1035.309067][ T3654] plantronics 0003:047F:FFFF.000B: unknown main item tag 0xd [ 1035.330131][ T3654] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 1035.426441][ T3654] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1035.508819][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1035.515246][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1035.616392][ T22] usb 5-1: USB disconnect, device number 15 [ 1036.423011][T15322] fido_id[15322]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1037.300303][ T22] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1037.542181][ T22] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1037.617878][ T22] usb 5-1: config 0 has no interface number 0 [ 1037.712619][ T22] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1037.781228][ T22] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1037.876475][ T22] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1037.941564][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.949644][ T22] usb 5-1: Product: syz [ 1037.979018][ T22] usb 5-1: Manufacturer: syz [ 1037.983705][ T22] usb 5-1: SerialNumber: syz [ 1038.017007][ T22] usb 5-1: config 0 descriptor?? [ 1038.024089][T15341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.292173][T15341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.612771][ T22] smsc95xx v2.0.0 [ 1039.790874][ T27] audit: type=1326 audit(1768221446.241:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1039.820544][T15341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.844803][T15341] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1039.965692][ T27] audit: type=1326 audit(1768221446.297:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1040.096929][ T27] audit: type=1326 audit(1768221446.325:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1040.173839][ T27] audit: type=1326 audit(1768221446.325:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1040.264696][ T22] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1040.275915][ T22] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1040.972497][ T22] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1041.007561][ T22] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 1041.086379][ T27] audit: type=1326 audit(1768221446.325:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1041.228763][ T27] audit: type=1326 audit(1768221446.325:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1041.408706][ T4275] usb 5-1: USB disconnect, device number 16 [ 1041.489114][ T27] audit: type=1326 audit(1768221446.325:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1041.657001][ T27] audit: type=1326 audit(1768221446.344:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1041.744529][ T27] audit: type=1326 audit(1768221446.344:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1041.890575][ T27] audit: type=1326 audit(1768221446.344:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15357 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f032e78f749 code=0x7ffc0000 [ 1044.432090][T15439] fuse: Invalid rootmode [ 1044.666135][ T4391] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1044.882086][ T4391] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1044.919478][ T4391] usb 5-1: config 0 has no interface number 0 [ 1044.947714][ T4391] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1046.860910][ T4391] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1046.958636][ T4391] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1046.986018][ T4391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.015806][ T4391] usb 5-1: Product: syz [ 1047.026585][ T4391] usb 5-1: Manufacturer: syz [ 1047.048182][ T4391] usb 5-1: SerialNumber: syz [ 1047.067909][ T4391] usb 5-1: config 0 descriptor?? [ 1047.093125][T15435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1047.101139][T15435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1047.136980][ T4391] smsc95xx v2.0.0 [ 1047.363252][T15435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1047.412730][T15435] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1047.668194][ T4391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1047.680876][ T4391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1047.976303][ T4391] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1047.988390][ T4391] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 1048.978489][T15476] tipc: Started in network mode [ 1048.986435][T15476] tipc: Node identity faf63670b355, cluster identity 4711 [ 1048.993779][T15476] tipc: Enabled bearer , priority 0 [ 1049.049416][T15476] device syzkaller0 entered promiscuous mode [ 1049.056187][T15476] tipc: Resetting bearer [ 1049.081942][T15471] tipc: Resetting bearer [ 1049.118207][ T4464] usb 5-1: USB disconnect, device number 17 [ 1049.368942][T15483] usb usb1: usbfs: interface 0 claimed by hub while 'syz.6.2487' sets config #-1 [ 1049.485033][T15486] fuse: Invalid rootmode [ 1053.714917][T15471] tipc: Disabling bearer [ 1053.737746][ T4391] tipc: Node number set to 1235433072 [ 1053.796949][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1053.846088][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1053.872831][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1053.900246][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1053.923223][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1053.945771][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1053.953534][T15512] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1054.030345][T15519] loop1: detected capacity change from 0 to 1024 [ 1054.124916][ T27] kauditd_printk_skb: 40 callbacks suppressed [ 1054.124934][ T27] audit: type=1800 audit(1768221459.655:363): pid=15519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2496" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 1054.178776][T15519] syz.1.2496: attempt to access beyond end of device [ 1054.178776][T15519] loop1: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 1054.227257][ T4392] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1054.253000][T15519] syz.1.2496: attempt to access beyond end of device [ 1054.253000][T15519] loop1: rw=34817, sector=393216, nr_sectors = 2045 limit=1024 [ 1054.314243][T15519] syz.1.2496: attempt to access beyond end of device [ 1054.314243][T15519] loop1: rw=34817, sector=395261, nr_sectors = 1 limit=1024 [ 1054.439150][ T4392] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1054.469400][ T4392] usb 7-1: config 0 has no interfaces? [ 1054.480439][ T4392] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1054.512680][ T4392] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.687957][ T4392] usb 7-1: config 0 descriptor?? [ 1055.073586][ T4454] usb 7-1: USB disconnect, device number 25 [ 1055.558733][T15533] fuse: Bad value for 'rootmode' [ 1057.723907][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1057.747923][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1057.761001][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1057.768896][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1057.784496][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1057.803016][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1057.810909][T15563] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1057.977942][T15565] tipc: Started in network mode [ 1057.996433][T15565] tipc: Node identity 22d2b08c04c3, cluster identity 4711 [ 1058.023917][T15565] tipc: Enabled bearer , priority 0 [ 1058.132259][T15561] device syzkaller0 entered promiscuous mode [ 1058.281611][T15561] tipc: Resetting bearer [ 1058.338471][T15560] tipc: Resetting bearer [ 1060.226752][T15585] fuse: Bad value for 'rootmode' [ 1061.806943][T15612] loop1: detected capacity change from 0 to 512 [ 1061.894089][T15612] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 1061.942229][T15612] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1061.998133][T15612] System zones: 0-1, 15-15, 18-18, 34-34 [ 1062.057310][T15612] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1062.102471][T15612] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0 [ 1062.128712][T15612] EXT4-fs warning (device loop1): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1062.149077][T15612] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 1062.306943][T15612] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2518: bg 0: block 40: padding at end of block bitmap is not set [ 1062.347370][T15612] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 1062.365920][T15612] EXT4-fs (loop1): 1 truncate cleaned up [ 1062.374155][T15612] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1066.439533][T13810] EXT4-fs (loop1): unmounting filesystem. [ 1066.550400][T11851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1066.560702][T11851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1066.580968][T11851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1066.595413][T11851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1066.618836][T11851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1066.626557][T11851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1066.672222][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1066.680396][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1066.693430][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1066.731379][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1066.739186][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1066.747465][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1068.687851][T15560] tipc: Disabling bearer [ 1068.703767][ T4464] tipc: Node number set to 638693516 [ 1068.933863][ T4281] Bluetooth: hci5: command 0x0409 tx timeout [ 1069.313597][T15645] loop4: detected capacity change from 0 to 1024 [ 1069.325040][T15645] EXT4-fs: inline encryption not supported [ 1069.340041][T15645] EXT4-fs: Ignoring removed nobh option [ 1069.345674][T15645] EXT4-fs: Ignoring removed bh option [ 1069.690633][T15645] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1070.133920][T15645] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1070.173148][ T27] audit: type=1800 audit(1768221474.668:364): pid=15645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2524" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1070.209986][T15645] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.2524: Allocating blocks 497-513 which overlap fs metadata [ 1070.336506][T15666] loop1: detected capacity change from 0 to 512 [ 1070.355067][T15661] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3852: comm syz.4.2524: Allocating blocks 497-513 which overlap fs metadata [ 1070.377524][T15624] chnl_net:caif_netlink_parms(): no params data found [ 1070.401760][T15666] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.2529: inode has both inline data and extents flags [ 1070.462595][T15666] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.2529: couldn't read orphan inode 15 (err -117) [ 1070.501518][T15666] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1070.664520][T15624] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.736101][T15624] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.745244][T15624] device bridge_slave_0 entered promiscuous mode [ 1071.065933][T15624] bridge0: port 2(bridge_slave_1) entered blocking state [ 1071.077268][T15624] bridge0: port 2(bridge_slave_1) entered disabled state [ 1071.137223][T15624] device bridge_slave_1 entered promiscuous mode [ 1071.157635][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 1071.365803][T11850] EXT4-fs (loop4): unmounting filesystem. [ 1071.505715][T13810] EXT4-fs (loop1): unmounting filesystem. [ 1071.555265][T15682] tipc: Started in network mode [ 1071.565406][T15682] tipc: Node identity fe821583dc95, cluster identity 4711 [ 1071.583619][T15682] tipc: Enabled bearer , priority 0 [ 1071.642111][T15624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1072.057538][T15685] device syzkaller0 entered promiscuous mode [ 1072.064354][T15685] tipc: Resetting bearer [ 1072.707568][ T4464] tipc: Node number set to 571938179 [ 1072.745105][T15624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1072.790058][T15681] tipc: Resetting bearer [ 1073.381333][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 1075.020315][T11851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1075.044149][T11851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1075.058836][T11851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1075.068479][T11851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1075.077568][T11851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1075.084971][T11851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1075.604880][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 1077.324846][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 1078.948172][T15681] tipc: Disabling bearer [ 1079.339005][ T8112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.379435][T15624] team0: Port device team_slave_0 added [ 1079.529693][T15624] team0: Port device team_slave_1 added [ 1079.549438][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 1079.569129][ T8112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.731767][T15745] loop6: detected capacity change from 0 to 512 [ 1079.744809][ T8112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.835627][T15624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.843476][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1079.880002][T15745] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1079.923902][T15624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.024180][ T8112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.072717][T15624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.096424][T15624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.372906][T15624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.439038][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1081.422344][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 1081.452977][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 1081.489743][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 1081.517340][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 1081.525036][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 1081.559509][T15757] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 1081.762521][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 1081.812460][T15624] device hsr_slave_0 entered promiscuous mode [ 1081.869785][T15624] device hsr_slave_1 entered promiscuous mode [ 1081.879711][T15624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1081.891359][T15624] Cannot create hsr debugfs directory [ 1082.196388][T15714] chnl_net:caif_netlink_parms(): no params data found [ 1082.260433][ T8112] tipc: Left network mode [ 1082.742349][T15714] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.749708][T15714] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.763705][T15714] device bridge_slave_0 entered promiscuous mode [ 1082.794111][T15714] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.808104][T15714] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.817950][T15714] device bridge_slave_1 entered promiscuous mode [ 1082.854482][T15714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1082.910886][T15714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.030392][T15714] team0: Port device team_slave_0 added [ 1083.143959][T15714] team0: Port device team_slave_1 added [ 1083.893314][T15714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1083.911235][T15714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1083.941503][T15714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1084.051976][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 1084.060176][T15714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1084.067576][T15714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1084.094996][T15714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1084.416183][T15714] device hsr_slave_0 entered promiscuous mode [ 1084.435730][T15714] device hsr_slave_1 entered promiscuous mode [ 1084.453862][T15714] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1084.481103][T15714] Cannot create hsr debugfs directory [ 1084.497900][T15810] tipc: Enabled bearer , priority 0 [ 1084.600025][T15811] device syzkaller0 entered promiscuous mode [ 1084.611713][T15811] tipc: Resetting bearer [ 1084.730725][T15803] tipc: Resetting bearer [ 1088.001999][T15803] tipc: Disabling bearer [ 1090.196959][ T8112] device hsr_slave_0 left promiscuous mode [ 1090.240933][ T8112] device hsr_slave_1 left promiscuous mode [ 1090.250164][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1090.269355][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1090.282447][ T8112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1090.293592][ T8112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1090.323427][ T8112] device bridge_slave_1 left promiscuous mode [ 1090.354310][ T8112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.380882][ T8112] device bridge_slave_0 left promiscuous mode [ 1090.387258][ T8112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.837454][ T8112] device veth1_macvtap left promiscuous mode [ 1090.843742][ T8112] device veth0_macvtap left promiscuous mode [ 1090.852059][ T8112] device veth1_vlan left promiscuous mode [ 1090.858162][ T8112] device veth0_vlan left promiscuous mode [ 1092.886335][ T8112] bond1 (unregistering): Released all slaves [ 1093.639984][ T8112] team0 (unregistering): Port device team_slave_1 removed [ 1093.700440][ T8112] team0 (unregistering): Port device team_slave_0 removed [ 1093.760365][ T8112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.822543][ T8112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.486574][ T8112] bond0 (unregistering): Released all slaves [ 1094.903512][T15888] tipc: Enabling of bearer rejected, failed to enable media [ 1096.053771][T15624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1097.469837][T15624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1098.667299][T15624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1098.734782][T15624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1098.928840][ T4274] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1098.943770][ T4274] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1098.954728][ T4274] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1098.962981][ T4274] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1098.971185][ T4274] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1099.239832][ T4274] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1100.542418][T15624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.599485][T15934] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1100.620901][T15948] tipc: Enabling of bearer rejected, failed to enable media [ 1100.647349][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1100.669417][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1100.699326][T15624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.759167][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1100.778831][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1100.804335][T15934] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1100.812540][T15934] usb 5-1: config 0 has no interface number 0 [ 1100.819591][ T8112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.826799][ T8112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.834582][T15934] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1100.863361][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1100.871693][T15934] usb 5-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1100.883827][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1100.916070][T15934] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1100.922245][ T8112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.932367][ T8112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.948385][T15934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.957112][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1100.971256][T15934] usb 5-1: Product: syz [ 1100.999394][T15915] chnl_net:caif_netlink_parms(): no params data found [ 1101.049183][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1101.061091][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1101.077175][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1101.103171][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1101.174299][T15934] usb 5-1: Manufacturer: syz [ 1101.184917][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1101.191314][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1101.216886][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1101.225286][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1101.241809][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1101.261576][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1101.301595][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1101.325246][T15934] usb 5-1: SerialNumber: syz [ 1101.333684][T15934] usb 5-1: config 0 descriptor?? [ 1101.339682][T15940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1101.347002][T15940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1101.355804][T15934] smsc95xx v2.0.0 [ 1101.380909][T15624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1101.402433][T15624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1101.420907][T15714] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1101.433328][T11851] Bluetooth: hci6: command 0x0409 tx timeout [ 1101.445426][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1101.464861][ T8112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1101.538405][T15714] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1101.673767][T15940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1101.726122][T15940] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1101.784260][T15714] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1101.809823][T15915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.832699][T15915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.955173][T15915] device bridge_slave_0 entered promiscuous mode [ 1101.999994][T15934] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1102.062751][T15934] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1102.084758][T15915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.205088][T15915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.435775][T15915] device bridge_slave_1 entered promiscuous mode [ 1102.509563][T15934] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1102.532157][T15934] smsc95xx: probe of 5-1:0.67 failed with error -61 [ 1102.840478][T15714] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1102.863051][T15915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1102.893493][T15915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.588854][T15915] team0: Port device team_slave_0 added [ 1103.630279][T15915] team0: Port device team_slave_1 added [ 1103.657526][T11851] Bluetooth: hci6: command 0x041b tx timeout [ 1104.006589][T15915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.013702][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.040239][T15915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.197769][ T4675] usb 5-1: USB disconnect, device number 18 [ 1104.962020][T15915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.971779][T15915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.109370][T15915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.336324][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1105.349106][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1105.489292][T15624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.777128][T15915] device hsr_slave_0 entered promiscuous mode [ 1105.800290][T15915] device hsr_slave_1 entered promiscuous mode [ 1105.831039][T15915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.865618][T15915] Cannot create hsr debugfs directory [ 1105.895332][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.917658][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1106.007815][T15714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1106.039122][T11851] Bluetooth: hci6: command 0x040f tx timeout [ 1106.114904][T15624] device veth0_vlan entered promiscuous mode [ 1106.254788][T16014] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2585'. [ 1106.276320][T16014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2585'. [ 1106.338002][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1106.353408][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1106.381733][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1106.401218][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1106.435421][T15624] device veth1_vlan entered promiscuous mode [ 1106.455792][T15714] 8021q: adding VLAN 0 to HW filter on device team0 [ 1106.517977][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1106.549140][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1106.562882][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1106.691969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1106.725889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1106.761310][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.768542][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1106.805871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1106.906919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1106.957028][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1107.013011][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.020329][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1107.169334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1107.367709][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.414079][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.507557][T15624] device veth0_macvtap entered promiscuous mode [ 1107.543763][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.562958][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1107.587566][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1107.637927][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1107.656000][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1107.677390][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1107.698418][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1107.707219][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1107.716743][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1107.736680][T15624] device veth1_macvtap entered promiscuous mode [ 1107.812793][T15714] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1107.875234][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1107.891413][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1108.080446][T16042] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2592'. [ 1108.894380][T11851] Bluetooth: hci6: command 0x0419 tx timeout [ 1108.897027][ T4274] Bluetooth: hci0: command 0x0401 tx timeout [ 1108.948126][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.996580][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.027263][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.038324][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.049345][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.060298][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.070419][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1109.081524][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.093575][T15624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1109.117378][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1109.134967][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1109.160383][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.181865][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.193919][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.211850][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.223602][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.241144][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.254568][T15624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1109.274381][T15624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1109.290477][T15624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.316880][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.323566][ T4464] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1109.351844][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.383974][T15624] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.429737][T15624] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.438521][T15624] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.475289][T15624] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.527379][ T4464] usb 5-1: Using ep0 maxpacket: 8 [ 1109.534532][ T4464] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.570003][ T4464] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1109.613459][ T4464] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1109.632995][ T4464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.641073][ T4464] usb 5-1: Product: syz [ 1109.662366][ T4464] usb 5-1: Manufacturer: syz [ 1109.684473][ T4464] usb 5-1: SerialNumber: syz [ 1109.696315][ T4464] usb 5-1: config 0 descriptor?? [ 1110.214188][ T4567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.250546][ T4567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.413666][T15714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.438243][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1110.460704][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1110.482938][T11973] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1110.766033][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1110.784173][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1110.900362][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1112.386640][T15915] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1112.410678][ T4391] usb 5-1: USB disconnect, device number 19 [ 1112.456594][T15915] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1112.476692][T15915] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1112.506540][T15915] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1112.865017][T15915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1112.937677][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1112.961204][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1113.012359][T15915] 8021q: adding VLAN 0 to HW filter on device team0 [ 1113.152903][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1114.863343][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1114.891384][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.898639][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.003592][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1115.024682][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1115.050752][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1115.107211][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.114425][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1115.177362][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1115.240066][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1115.344184][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1115.848872][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1115.926013][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1115.959018][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1115.992610][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1116.014298][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1116.029343][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1116.065332][T15915] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1116.106656][T15915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1116.140969][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1116.158820][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1116.174553][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1116.240086][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1116.271168][ T4732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1116.380510][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1116.397977][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1116.433988][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.901374][ T4374] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1117.926367][T15714] device veth0_vlan entered promiscuous mode [ 1117.965155][T15714] device veth1_vlan entered promiscuous mode [ 1118.068055][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1118.087937][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1118.138495][T15714] device veth0_macvtap entered promiscuous mode [ 1118.198657][T15714] device veth1_macvtap entered promiscuous mode [ 1118.304817][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.364228][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.409784][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.420295][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.484811][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.527671][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.537577][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.597819][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.644966][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1118.655480][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1118.674626][T16146] loop4: detected capacity change from 0 to 1024 [ 1118.728323][T15714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.764032][T16146] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1118.790661][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1118.838013][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1118.878521][T16146] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1118.885754][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1118.930770][T16146] EXT4-fs error (device loop4): ext4_free_blocks:6221: comm syz.4.2608: Freeing blocks not in datazone - block = 0, count = 4096 [ 1118.959689][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1118.988748][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.009237][T16146] EXT4-fs (loop4): 1 orphan inode deleted [ 1119.051247][T16146] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1119.059589][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.092904][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.115510][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.136019][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.190206][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.232537][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.283192][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.308008][T15714] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1119.339894][T15714] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1119.373717][T15714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1119.404509][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1119.426649][T10535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1119.464476][T15714] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.489872][T15714] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.515433][T15714] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.532321][T15714] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.646553][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1119.661674][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1119.673987][T11850] EXT4-fs (loop4): unmounting filesystem. [ 1119.702913][T15915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1119.797419][ T4374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.828004][ T4374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.835983][ T4392] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1120.034883][ T4392] usb 1-1: Using ep0 maxpacket: 8 [ 1120.042523][ T4392] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1120.116354][ T4392] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1120.159687][ T4392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.199097][ T4392] usb 1-1: Product: syz [ 1120.227121][ T4392] usb 1-1: Manufacturer: syz [ 1120.231831][ T4392] usb 1-1: SerialNumber: syz [ 1120.296942][ T4392] usb 1-1: config 0 descriptor?? [ 1120.762032][ T4392] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 1120.860574][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1120.868024][T10535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1120.876876][T10535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1120.966696][ T4392] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1120.976202][ T4392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.993993][ T4392] usb 5-1: config 0 descriptor?? [ 1121.006321][ T4392] asix: probe of 5-1:0.0 failed with error -22 [ 1121.225913][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1123.610160][ T4391] usb 1-1: USB disconnect, device number 3 [ 1123.725009][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1123.741976][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1123.799807][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1123.821009][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1123.865172][T15915] device veth0_vlan entered promiscuous mode [ 1123.873700][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1123.892559][ T4456] usb 5-1: USB disconnect, device number 20 [ 1123.917917][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1123.965630][T15915] device veth1_vlan entered promiscuous mode [ 1124.061772][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1124.084374][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1124.100426][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1124.113259][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1124.134173][T15915] device veth0_macvtap entered promiscuous mode [ 1124.196514][T15915] device veth1_macvtap entered promiscuous mode [ 1124.675653][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.735752][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.746255][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.757238][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.772541][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.784214][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.796750][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.807687][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.817983][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.828970][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.839698][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.855225][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.870318][T15915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.883409][T16214] tipc: Enabled bearer , priority 0 [ 1124.891219][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1124.927176][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1124.958643][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1124.992317][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1125.063507][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.096439][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.134573][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.173487][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.198765][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.210505][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.220445][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.231055][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.240922][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.251437][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.261370][T15915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1125.271887][T15915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.304124][T15915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.410336][T16224] loop0: detected capacity change from 0 to 16 [ 1125.596534][T16212] device syzkaller0 entered promiscuous mode [ 1125.606659][T16212] tipc: Resetting bearer [ 1125.868599][T16211] tipc: Resetting bearer [ 1126.017161][T16224] erofs: (device loop0): mounted with root inode @ nid 36. [ 1131.373024][T16286] fuse: Bad value for 'fd' [ 1139.754618][T16211] tipc: Disabling bearer [ 1139.763917][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1139.778332][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1139.790137][T15915] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.799121][T15915] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.816389][T15915] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1139.828577][T15915] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.764772][T16345] usb usb1: usbfs: process 16345 (syz.0.2646) did not claim interface 0 before use [ 1140.846305][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.913034][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.021792][T16273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1141.697219][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.727323][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.856480][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1145.426486][T16383] tipc: Started in network mode [ 1145.436584][T16383] tipc: Node identity ca6b12d20867, cluster identity 4711 [ 1145.484158][T16383] tipc: Enabled bearer , priority 0 [ 1145.760426][T16391] device syzkaller0 entered promiscuous mode [ 1145.793985][T16391] tipc: Resetting bearer [ 1147.212926][T16381] tipc: Resetting bearer [ 1151.462929][T16448] loop8: detected capacity change from 0 to 1024 [ 1151.471011][T16448] EXT4-fs: Invalid want_extra_isize 61857 [ 1151.539543][T16448] loop8: detected capacity change from 0 to 512 [ 1151.556030][T16450] loop4: detected capacity change from 0 to 16 [ 1151.623559][T16450] erofs: (device loop4): mounted with root inode @ nid 36. [ 1152.294681][T16450] syz.4.2667: attempt to access beyond end of device [ 1152.294681][T16450] loop4: rw=524288, sector=525136, nr_sectors = 8 limit=16 [ 1152.375563][T16450] syz.4.2667: attempt to access beyond end of device [ 1152.375563][T16450] loop4: rw=524288, sector=712, nr_sectors = 8 limit=16 [ 1152.407547][T16450] syz.4.2667: attempt to access beyond end of device [ 1152.407547][T16450] loop4: rw=524288, sector=19320, nr_sectors = 8 limit=16 [ 1152.436447][T16448] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1152.748072][ T5589] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1152.956222][ T5589] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 188, changing to 11 [ 1152.996400][ T5589] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 18239, setting to 1024 [ 1153.047418][ T5589] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.105082][ T5589] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.142776][ T5589] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.646128][ T5589] usb 9-1: config 0 descriptor?? [ 1153.653312][T16448] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1154.144655][ T5589] plantronics 0003:047F:FFFF.000C: unknown main item tag 0xd [ 1154.163642][ T5589] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 1154.181479][ T5589] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1154.474176][ T5589] usb 9-1: USB disconnect, device number 11 [ 1156.093318][T15915] EXT4-fs (loop8): unmounting filesystem. [ 1160.282144][ T4281] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1160.294456][ T4281] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1160.308005][ T4281] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1160.335388][ T4281] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1160.344204][ T4281] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1160.351840][ T4281] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1161.964509][T16381] tipc: Disabling bearer [ 1161.978425][ T4464] tipc: Node number set to 3255571154 [ 1162.583531][ T4281] Bluetooth: hci7: command 0x0409 tx timeout [ 1163.048449][T16512] chnl_net:caif_netlink_parms(): no params data found [ 1164.730247][T16546] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2687'. [ 1164.767110][T16546] loop4: detected capacity change from 0 to 16 [ 1165.267404][ T4281] Bluetooth: hci7: command 0x041b tx timeout [ 1165.284369][T16546] erofs: (device loop4): mounted with root inode @ nid 36. [ 1165.548023][T11851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1165.564226][T11851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1165.574769][T11851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1165.583044][T11851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1165.593985][T11851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1165.601419][T11851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1165.875901][T16556] loop8: detected capacity change from 0 to 512 [ 1165.989925][ T4571] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.202226][T16556] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1166.233644][T16556] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1166.862765][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1166.889125][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1166.936788][T15915] EXT4-fs (loop8): unmounting filesystem. [ 1167.115213][ T4571] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.458497][ T4281] Bluetooth: hci7: command 0x040f tx timeout [ 1167.656058][T16512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.711078][T16512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1167.813177][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 1168.165776][T16512] device bridge_slave_0 entered promiscuous mode [ 1168.257074][T16582] loop8: detected capacity change from 0 to 256 [ 1168.276043][T16582] exfat: Deprecated parameter 'namecase' [ 1168.284774][T16582] exfat: Deprecated parameter 'namecase' [ 1168.295799][ T4571] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.343939][T16512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.359153][T16582] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 1168.368464][T16512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.413596][T16512] device bridge_slave_1 entered promiscuous mode [ 1168.421435][T16582] syz.8.2694: attempt to access beyond end of device [ 1168.421435][T16582] loop8: rw=524288, sector=34225520824, nr_sectors = 1 limit=256 [ 1168.593726][T16582] syz.8.2694: attempt to access beyond end of device [ 1168.593726][T16582] loop8: rw=0, sector=34225520824, nr_sectors = 1 limit=256 [ 1168.672119][ T27] audit: type=1800 audit(1768221566.805:365): pid=16582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2694" name="file1" dev="loop8" ino=1048731 res=0 errno=0 [ 1168.750886][ T4571] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1168.877262][T16512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1168.970848][T16512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.802348][ T4281] Bluetooth: hci7: command 0x0419 tx timeout [ 1169.924721][T16512] team0: Port device team_slave_0 added [ 1170.921767][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 1171.239648][T16512] team0: Port device team_slave_1 added [ 1171.625174][T16616] Bluetooth: MGMT ver 1.22 [ 1172.141186][T16512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.148218][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.240538][T16512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.287677][T16512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1172.308704][T16512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.533575][T16512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.104023][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 1173.359344][T16549] chnl_net:caif_netlink_parms(): no params data found [ 1173.745315][T16636] loop8: detected capacity change from 0 to 1024 [ 1173.776249][T16636] EXT4-fs: Ignoring removed oldalloc option [ 1173.804000][T16636] EXT4-fs: Ignoring removed bh option [ 1174.016742][T16636] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1174.375913][T16636] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1174.415145][T16512] device hsr_slave_0 entered promiscuous mode [ 1178.954451][T11851] Bluetooth: hci0: command 0x0419 tx timeout [ 1178.982338][T16512] device hsr_slave_1 entered promiscuous mode [ 1179.113242][T16512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1179.120895][T16512] Cannot create hsr debugfs directory [ 1179.129491][T15915] EXT4-fs (loop8): unmounting filesystem. [ 1181.460775][T16549] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.472711][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 1181.508301][T16549] device bridge_slave_0 entered promiscuous mode [ 1181.722992][T16549] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.755686][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 1181.794834][T16549] device bridge_slave_1 entered promiscuous mode [ 1183.732421][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1183.753787][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1184.362993][T16549] team0: Port device team_slave_0 added [ 1184.516189][T16549] team0: Port device team_slave_1 added [ 1185.345514][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1185.352541][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1185.461526][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.901846][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.909320][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1187.997209][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.352737][T16762] loop4: detected capacity change from 0 to 2048 [ 1188.366816][T16762] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1189.054146][T16762] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1191.351407][T16549] device hsr_slave_0 entered promiscuous mode [ 1191.880772][T16549] device hsr_slave_1 entered promiscuous mode [ 1191.923599][T16549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1192.034777][T16549] Cannot create hsr debugfs directory [ 1194.087735][ T4571] device hsr_slave_0 left promiscuous mode [ 1194.097536][ T4571] device hsr_slave_1 left promiscuous mode [ 1194.120347][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1194.130303][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1194.153092][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1194.160607][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.215845][ T4571] device bridge_slave_1 left promiscuous mode [ 1194.250200][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1194.298170][ T4571] device bridge_slave_0 left promiscuous mode [ 1194.320766][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1194.330813][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 1194.450775][ T4571] device veth1_macvtap left promiscuous mode [ 1194.466697][ T4571] device veth0_macvtap left promiscuous mode [ 1194.493235][ T4571] device veth1_vlan left promiscuous mode [ 1194.510095][ T4571] device veth0_vlan left promiscuous mode [ 1197.672554][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 1198.397750][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 1198.537525][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1198.657817][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1199.369963][ T4454] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1199.583776][ T4454] usb 9-1: Using ep0 maxpacket: 8 [ 1199.596459][ T4454] usb 9-1: config 0 has an invalid interface number: 107 but max is 0 [ 1199.621632][ T4454] usb 9-1: config 0 has no interface number 0 [ 1199.655952][ T4454] usb 9-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48 [ 1199.703716][ T4454] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1199.735362][ T4454] usb 9-1: config 0 descriptor?? [ 1200.225062][ T4571] bond0 (unregistering): Released all slaves [ 1200.636975][T16512] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1200.678963][T16512] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1200.744317][T16512] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1200.771633][T16512] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1202.364520][T16512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.385584][ T3654] usb 9-1: USB disconnect, device number 12 [ 1202.454145][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1202.492238][T10229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1202.529860][T16512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.576711][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1203.846192][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1203.988523][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1203.995712][T16272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.109614][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1204.139224][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1204.189182][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1204.227383][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.234590][T16272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.412122][ T4571] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.605572][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1204.641386][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1204.694592][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1204.736011][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1204.856088][ T4571] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.038320][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1205.111463][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1205.143584][T16272] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1205.251733][ T4571] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.297592][T16512] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1205.358771][T16512] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1205.406718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1205.433140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1205.496660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1205.506450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1205.639546][ T4571] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.693834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1205.741389][T16549] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1205.967778][T16549] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1206.422538][T16549] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1206.447369][T16549] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1208.221850][T16549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1208.292611][T16271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1208.318480][T16271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1208.368489][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 1208.390428][ T4571] tipc: Left network mode [ 1208.446922][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1208.455620][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1208.616959][ T4486] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.624183][ T4486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.460526][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1209.547747][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1209.601264][ T4486] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.608543][ T4486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1209.664509][ T4486] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1210.535618][ T4464] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1210.727605][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1210.741096][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1210.755965][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1210.808517][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1210.962451][T16512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1210.970624][ T4464] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1210.978733][ T4464] usb 9-1: config 0 has no interface number 0 [ 1210.996576][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1211.027630][ T4464] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1211.034138][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1211.065324][ T4464] usb 9-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1211.132270][ T4464] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1211.214960][ T4464] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.223047][ T4464] usb 9-1: Product: syz [ 1211.268422][ T4464] usb 9-1: Manufacturer: syz [ 1211.273112][ T4464] usb 9-1: SerialNumber: syz [ 1211.322098][ T4464] usb 9-1: config 0 descriptor?? [ 1211.365029][T16949] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1211.372374][T16949] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1212.531240][ T4464] smsc95xx v2.0.0 [ 1212.694388][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1212.745125][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1212.787528][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1212.821606][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1212.838717][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1213.110571][ T4464] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1213.150095][ T4464] smsc95xx: probe of 9-1:0.67 failed with error -71 [ 1213.193007][ T4464] usb 9-1: USB disconnect, device number 13 [ 1213.238957][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1213.275793][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1213.324943][T16549] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1216.533308][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1216.571733][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1216.990434][T16512] device veth0_vlan entered promiscuous mode [ 1216.997404][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1217.016026][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1217.164414][T16512] device veth1_vlan entered promiscuous mode [ 1217.193863][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1217.208672][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1217.243801][T15223] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1217.393484][T16275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1217.411498][T16275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1217.457234][T16275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1217.497991][T16275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1217.529378][T16275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1217.567239][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.897756][T16512] device veth0_macvtap entered promiscuous mode [ 1217.927173][T16271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1217.943754][T16271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1217.999428][T16271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1218.036240][T16512] device veth1_macvtap entered promiscuous mode [ 1218.175239][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.215373][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.237926][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.299718][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.334939][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.389121][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.421450][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.458163][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.503411][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.535955][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.570356][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1218.623563][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.646790][T16512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.660650][T16549] device veth0_vlan entered promiscuous mode [ 1220.259897][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1220.281000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1220.298364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1220.340743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1220.361047][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.383389][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.404637][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.427545][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.452276][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.486092][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.526432][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.550035][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.603705][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.654141][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.697235][T16512] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1220.719751][T16512] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1220.750017][T16512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.788815][T16549] device veth1_vlan entered promiscuous mode [ 1220.915628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1220.945106][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1220.962209][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1221.008778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1221.053381][T16512] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.093060][T16512] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.101855][T16512] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.155151][T16512] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.240000][ T4571] device hsr_slave_0 left promiscuous mode [ 1223.017673][ T4571] device hsr_slave_1 left promiscuous mode [ 1223.231457][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1223.244364][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1224.048172][ T4571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1224.074915][ T4571] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.146123][ T4571] device bridge_slave_1 left promiscuous mode [ 1224.193527][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.211825][ T4571] device bridge_slave_0 left promiscuous mode [ 1224.260558][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.632192][ T4571] device veth1_macvtap left promiscuous mode [ 1224.638345][ T4571] device veth0_macvtap left promiscuous mode [ 1224.652801][T11851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1224.663321][T11851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1224.673844][T11851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1224.688318][T11851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1224.706002][T11851] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1224.713850][T11851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1224.729835][ T4571] device veth1_vlan left promiscuous mode [ 1224.736422][ T4571] device veth0_vlan left promiscuous mode [ 1226.973288][T11851] Bluetooth: hci5: command 0x0409 tx timeout [ 1228.107148][T11851] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1228.139212][T11851] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1228.148420][T11851] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1228.160063][T11851] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1228.169725][T11851] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1228.177276][T11851] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1229.294706][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 1229.413374][T17086] loop8: detected capacity change from 0 to 256 [ 1229.506192][T17086] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 1230.807297][ T4281] Bluetooth: hci8: command 0x0409 tx timeout [ 1231.516487][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 1232.274573][T17097] loop8: detected capacity change from 0 to 512 [ 1232.324191][T17097] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=8802c018, mo2=0000] [ 1232.342048][T17097] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1232.374098][T17097] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2790: invalid indirect mapped block 28777 (level 2) [ 1232.417397][ T4571] team0 (unregistering): Port device team_slave_1 removed [ 1232.469655][T17097] EXT4-fs (loop8): 1 truncate cleaned up [ 1232.475400][T17097] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1232.565554][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 1232.572257][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 1232.584735][T17097] EXT4-fs: Ignoring removed bh option [ 1232.593292][T17097] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 1232.605507][T17097] [EXT4 FS bs=1024, gc=1, bpg=255, ipg=32, mo=a006c018, mo2=0000] [ 1232.619790][ T4571] team0 (unregistering): Port device team_slave_0 removed [ 1232.652235][T17097] System zones: 1-12 [ 1232.667910][T17097] EXT4-fs (loop8): re-mounted. Quota mode: writeback. [ 1232.742466][T15915] EXT4-fs (loop8): unmounting filesystem. [ 1232.871871][T17101] futex_wake_op: syz.4.2788 tries to shift op by -1; fix this program [ 1232.931889][ T4571] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1233.102974][ T4281] Bluetooth: hci8: command 0x041b tx timeout [ 1233.419115][ T4571] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1233.750801][ T4274] Bluetooth: hci5: command 0x0419 tx timeout [ 1234.606526][ T28] INFO: task syz.6.2550:15745 blocked for more than 143 seconds. [ 1234.614385][ T28] Not tainted syzkaller #0 [ 1234.624004][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1234.634513][ T28] task:syz.6.2550 state:D stack:26464 pid:15745 ppid:6420 flags:0x00004004 [ 1234.764853][ T28] Call Trace: [ 1234.779516][ T28] [ 1234.786153][ T28] __schedule+0x10ec/0x40b0 [ 1234.791212][ T4281] Bluetooth: hci6: command 0x0406 tx timeout [ 1234.802261][ T28] ? __sched_text_start+0x8/0x8 [ 1234.813324][ T28] ? lock_chain_count+0x20/0x20 [ 1234.821395][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 1234.826857][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1234.839309][ T28] ? rwsem_down_read_slowpath+0x50a/0x840 [ 1234.849616][ T28] schedule+0xb9/0x180 [ 1234.862866][ T28] schedule_preempt_disabled+0xf/0x20 [ 1234.873648][ T28] rwsem_down_read_slowpath+0x4f4/0x840 [ 1234.882237][ T28] ? down_write_killable_nested+0x90/0x90 [ 1234.897081][ T28] ? read_lock_is_recursive+0x10/0x10 [ 1234.909461][ T28] ? __rwlock_init+0x140/0x140 [ 1234.914763][ T28] ? ksys_sync+0x150/0x150 [ 1234.923936][ T28] down_read+0x94/0x2d0 [ 1234.933007][ T28] ? ksys_sync+0x150/0x150 [ 1234.942404][ T28] iterate_supers+0xa4/0x1d0 [ 1234.947357][ T28] ksys_sync+0x91/0x150 [ 1234.956364][ T28] ? sync_filesystem+0x220/0x220 [ 1234.968655][ T28] ? syscall_enter_from_user_mode+0x21/0x80 [ 1234.979815][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1234.990250][ T28] __ia32_sys_sync+0xa/0x10 [ 1235.284426][ T28] do_syscall_64+0x4c/0xa0 [ 1235.289071][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1235.301065][ T4281] Bluetooth: hci8: command 0x040f tx timeout [ 1235.308750][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1235.319549][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1235.332766][ T28] RIP: 0033:0x7ff4fc18f749 [ 1235.342368][ T28] RSP: 002b:00007ff4fcfe1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1235.360353][ T28] RAX: ffffffffffffffda RBX: 00007ff4fc3e5fa0 RCX: 00007ff4fc18f749 [ 1235.372732][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1235.392941][ T28] RBP: 00007ff4fc3e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.411868][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.427719][ T28] R13: 00007ff4fc3e6038 R14: 00007ff4fc3e5fa0 R15: 00007fff2d251228 [ 1235.438520][ T28] [ 1235.448707][ T28] INFO: task syz.6.2550:15752 blocked for more than 144 seconds. [ 1235.460890][ T28] Not tainted syzkaller #0 [ 1235.472971][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1235.490254][ T28] task:syz.6.2550 state:D stack:29024 pid:15752 ppid:6420 flags:0x00004004 [ 1235.514068][ T28] Call Trace: [ 1235.528167][ T28] [ 1235.533625][ T28] __schedule+0x10ec/0x40b0 [ 1235.544284][ T28] ? __sched_text_start+0x8/0x8 [ 1235.553818][ T28] ? lock_chain_count+0x20/0x20 [ 1235.574168][ T28] ? _raw_spin_lock_irq+0xab/0xe0 [ 1235.579373][ T28] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 1235.584812][ T28] ? rwsem_down_read_slowpath+0x50a/0x840 [ 1235.590684][ T28] schedule+0xb9/0x180 [ 1235.594905][ T28] schedule_preempt_disabled+0xf/0x20 [ 1235.600394][ T28] rwsem_down_read_slowpath+0x4f4/0x840 [ 1235.606012][ T28] ? down_write_killable_nested+0x90/0x90 [ 1235.611870][ T28] ? read_lock_is_recursive+0x10/0x10 [ 1235.617305][ T28] ? __rwlock_init+0x140/0x140 [ 1235.622424][ T28] ? ksys_sync+0x150/0x150 [ 1235.627421][ T28] down_read+0x94/0x2d0 [ 1235.631659][ T28] ? ksys_sync+0x150/0x150 [ 1235.636196][ T28] iterate_supers+0xa4/0x1d0 [ 1235.641061][ T28] ksys_sync+0x91/0x150 [ 1235.647391][ T28] ? sync_filesystem+0x220/0x220 [ 1235.652478][ T28] ? syscall_enter_from_user_mode+0x21/0x80 [ 1235.662924][ T28] ? lockdep_hardirqs_on+0x94/0x140 [ 1235.669199][ T28] __ia32_sys_sync+0xa/0x10 [ 1235.673777][ T28] do_syscall_64+0x4c/0xa0 [ 1235.678696][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1235.683446][ T28] ? clear_bhb_loop+0x60/0xb0 [ 1235.688484][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1235.694446][ T28] RIP: 0033:0x7ff4fc18f749 [ 1235.699153][ T28] RSP: 002b:00007ff4fcfc0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1235.707892][ T28] RAX: ffffffffffffffda RBX: 00007ff4fc3e6090 RCX: 00007ff4fc18f749 [ 1235.715985][ T28] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1235.724260][ T28] RBP: 00007ff4fc3e6090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.733319][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.741614][ T28] R13: 00007ff4fc3e6128 R14: 00007ff4fc3e6090 R15: 00007fff2d251228 [ 1235.749761][ T28] [ 1235.769297][ T28] [ 1235.769297][ T28] Showing all locks held in the system: [ 1235.777155][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1235.783321][ T28] #0: ffffffff8c92bb70 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1235.794165][ T28] 1 lock held by rcu_tasks_trace/13: [ 1235.799492][ T28] #0: ffffffff8c92c390 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xf00 [ 1235.810634][ T28] 1 lock held by khungtaskd/28: [ 1235.815769][ T28] #0: ffffffff8c92b1e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1235.825813][ T28] 1 lock held by dhcpcd/3933: [ 1235.830537][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x6f0 [ 1235.840357][ T28] 2 locks held by getty/4030: [ 1235.845740][ T28] #0: ffff88802fd4d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1235.855673][ T28] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41b/0x1380 [ 1235.865992][ T28] 3 locks held by kworker/0:4/4275: [ 1235.873640][ T28] #0: ffff88802f0d1538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1235.893575][ T28] #1: ffffc90003ee7d00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1235.905942][ T28] #2: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x14d0 [ 1235.915612][ T28] 2 locks held by kworker/0:18/4464: [ 1235.920999][ T28] #0: ffff888017472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1235.931450][ T28] #1: ffffc90004c37d00 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1235.943263][ T28] 5 locks held by kworker/u4:14/4571: [ 1235.948753][ T28] #0: ffff888017616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1235.960040][ T28] #1: ffffc90004f1fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1235.971203][ T28] #2: ffffffff8db2f310 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x132/0xb80 [ 1235.980846][ T28] #3: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe5/0xa50 [ 1235.991840][ T28] #4: ffffffff8c930eb8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x455/0x830 [ 1236.003660][ T28] 3 locks held by kworker/1:13/4675: [ 1236.009109][ T28] #0: ffff88802f0d1538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1236.020264][ T28] #1: ffffc900052cfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1236.032801][ T28] #2: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xc4/0x14d0 [ 1236.042875][ T28] 3 locks held by kworker/0:20/5589: [ 1236.048302][ T28] #0: ffff888017470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1236.059376][ T28] #1: ffffc90003997d00 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1236.070523][ T28] #2: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 1236.081343][ T28] 3 locks held by kworker/u4:11/10535: [ 1236.087076][ T28] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1236.098400][ T28] #1: ffffc90005c9fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a1/0x1160 [ 1236.111712][ T28] #2: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1236.120915][ T28] 1 lock held by syz-executor/14390: [ 1236.126421][ T28] #0: ffff8880757120e0 (&type->s_umount_key#101){++++}-{3:3}, at: deactivate_super+0xa0/0xd0 [ 1236.136912][ T28] 1 lock held by syz.6.2550/15745: [ 1236.142149][ T28] #0: ffff8880757120e0 (&type->s_umount_key#101){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1236.152664][ T28] 1 lock held by syz.6.2550/15752: [ 1236.157963][ T28] #0: ffff8880757120e0 (&type->s_umount_key#101){++++}-{3:3}, at: iterate_supers+0xa4/0x1d0 [ 1236.168359][ T28] 3 locks held by kworker/u4:22/16272: [ 1236.174436][ T28] 1 lock held by syz-executor/16512: [ 1236.179900][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 1236.189503][ T28] 1 lock held by syz-executor/16549: [ 1236.194951][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 1236.204882][ T28] 1 lock held by syz-executor/17051: [ 1236.210532][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 1236.220132][ T28] 1 lock held by syz-executor/17075: [ 1236.227118][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 1236.236772][ T28] 1 lock held by syz.4.2793/17109: [ 1236.241976][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x740/0xed0 [ 1236.251459][ T28] 1 lock held by syz.4.2793/17110: [ 1236.256676][ T28] #0: ffffffff8db3bfe8 (rtnl_mutex){+.+.}-{3:3}, at: __netlink_dump_start+0x11f/0x6f0 [ 1236.271035][ T28] [ 1236.273434][ T28] ============================================= [ 1236.273434][ T28] [ 1236.299408][ T28] NMI backtrace for cpu 0 [ 1236.303849][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1236.311101][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.321237][ T28] Call Trace: [ 1236.324559][ T28] [ 1236.327513][ T28] dump_stack_lvl+0x168/0x22e [ 1236.332237][ T28] ? irq_work_queue+0xb8/0x140 [ 1236.337020][ T28] ? show_regs_print_info+0x12/0x12 [ 1236.342292][ T28] ? load_image+0x3b0/0x3b0 [ 1236.346907][ T28] ? vprintk_emit+0x571/0x680 [ 1236.351624][ T28] ? printk_sprint+0x460/0x460 [ 1236.356437][ T28] nmi_cpu_backtrace+0x3f4/0x470 [ 1236.361498][ T28] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 1236.367705][ T28] ? _printk+0xcc/0x110 [ 1236.371897][ T28] ? load_image+0x3b0/0x3b0 [ 1236.376540][ T28] ? load_image+0x3b0/0x3b0 [ 1236.381108][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1236.387224][ T28] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 1236.393284][ T28] watchdog+0xeee/0xf30 [ 1236.397530][ T28] ? watchdog+0x1ed/0xf30 [ 1236.401923][ T28] kthread+0x29d/0x330 [ 1236.406061][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1236.411126][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1236.415758][ T28] ret_from_fork+0x1f/0x30 [ 1236.420453][ T28] [ 1236.424228][ T28] Sending NMI from CPU 0 to CPUs 1: [ 1236.429796][ C1] NMI backtrace for cpu 1 [ 1236.429807][ C1] CPU: 1 PID: 3620 Comm: syslogd Not tainted syzkaller #0 [ 1236.429824][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.429833][ C1] RIP: 0010:kasan_save_free_info+0xe/0x50 [ 1236.429864][ C1] Code: c8 74 01 c3 48 89 f7 89 d6 e9 6e dc ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 63 bf c0 00 00 00 48 81 ff ff ff ff 7f <0f> 94 c0 48 01 f7 0f 94 c1 08 c1 75 25 53 48 89 f3 48 83 c7 08 be [ 1236.429891][ C1] RSP: 0018:ffffc900032a78a8 EFLAGS: 00000293 [ 1236.429905][ C1] RAX: ffffed1005046300 RBX: ffff888028231800 RCX: 0000000000000000 [ 1236.429918][ C1] RDX: 0000000000000040 RSI: ffff888028231800 RDI: 0000000000000000 [ 1236.429929][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1005046300 [ 1236.429940][ C1] R10: fffffbfff211965e R11: 1ffffffff211965d R12: 0000000000000000 [ 1236.429952][ C1] R13: ffffc900032a7940 R14: ffff888017442dc0 R15: ffffffff81d070f6 [ 1236.429965][ C1] FS: 00007fa0d603dc80(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1236.429979][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1236.429990][ C1] CR2: 00007f94b2db7198 CR3: 000000007e693000 CR4: 00000000003506e0 [ 1236.430005][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1236.430014][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1236.430025][ C1] Call Trace: [ 1236.430029][ C1] [ 1236.430034][ C1] ____kasan_slab_free+0x126/0x1e0 [ 1236.430059][ C1] slab_free_freelist_hook+0x131/0x1a0 [ 1236.430080][ C1] ? skb_release_data+0x5db/0x7c0 [ 1236.430097][ C1] __kmem_cache_free+0xb6/0x1f0 [ 1236.430116][ C1] skb_release_data+0x5db/0x7c0 [ 1236.430136][ C1] consume_skb+0xa2/0x100 [ 1236.430151][ C1] __unix_dgram_recvmsg+0xa06/0xd70 [ 1236.430171][ C1] ? aa_file_perm+0x117/0xec0 [ 1236.430191][ C1] ? unix_unhash+0x10/0x10 [ 1236.430211][ C1] ? aa_af_perm+0x2b0/0x2b0 [ 1236.430230][ C1] ? aa_file_perm+0x3ef/0xec0 [ 1236.430248][ C1] ? bpf_lsm_socket_recvmsg+0x5/0x10 [ 1236.430265][ C1] ? security_socket_recvmsg+0x85/0xb0 [ 1236.430289][ C1] ? unix_dgram_recvmsg+0xa9/0xd0 [ 1236.430313][ C1] sock_read_iter+0x2bf/0x370 [ 1236.430332][ C1] ? kernel_sock_ip_overhead+0x590/0x590 [ 1236.430356][ C1] ? common_file_perm+0x171/0x1c0 [ 1236.430386][ C1] ? fsnotify_perm+0x248/0x550 [ 1236.430434][ C1] vfs_read+0x434/0x920 [ 1236.430459][ C1] ? kernel_read+0x1e0/0x1e0 [ 1236.430481][ C1] ? rcu_is_watching+0x11/0xa0 [ 1236.430506][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 1236.430525][ C1] ? __bpf_trace_rseq_ip_fixup+0x40/0x40 [ 1236.430548][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 1236.430572][ C1] ? __fdget_pos+0x1d4/0x360 [ 1236.430596][ C1] ksys_read+0x143/0x240 [ 1236.430619][ C1] ? vfs_write+0x960/0x960 [ 1236.430644][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 1236.430664][ C1] do_syscall_64+0x4c/0xa0 [ 1236.430688][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1236.430709][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1236.430731][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1236.430751][ C1] RIP: 0033:0x7fa0d618d407 [ 1236.430764][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1236.430778][ C1] RSP: 002b:00007fff855c9810 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1236.430794][ C1] RAX: ffffffffffffffda RBX: 00007fa0d603dc80 RCX: 00007fa0d618d407 [ 1236.430806][ C1] RDX: 00000000000000ff RSI: 000055a521699950 RDI: 0000000000000000 [ 1236.430816][ C1] RBP: 000055a521699910 R08: 0000000000000000 R09: 0000000000000000 [ 1236.430826][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055a521699999 [ 1236.430836][ C1] R13: 0000000000000000 R14: 000055a521699950 R15: 000055a50c422d98 [ 1236.430855][ C1] [ 1236.432117][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1236.432150][ T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 1236.432205][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1236.432238][ T28] Call Trace: [ 1236.432259][ T28] [ 1236.432274][ T28] dump_stack_lvl+0x168/0x22e [ 1236.432372][ T28] ? memcpy+0x3c/0x60 [ 1236.432429][ T28] ? show_regs_print_info+0x12/0x12 [ 1236.432515][ T28] ? load_image+0x3b0/0x3b0 [ 1236.432607][ T28] panic+0x2c9/0x710 [ 1236.432663][ T28] ? schedule_preempt_disabled+0x20/0x20 [ 1236.432765][ T28] ? bpf_jit_dump+0xd0/0xd0 [ 1236.432839][ T28] ? __irq_work_queue_local+0x12c/0x190 [ 1236.432941][ T28] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 1236.433035][ T28] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 1236.433128][ T28] watchdog+0xf2d/0xf30 [ 1236.433199][ T28] ? watchdog+0x1ed/0xf30 [ 1236.433276][ T28] kthread+0x29d/0x330 [ 1236.433370][ T28] ? hungtask_pm_notify+0x40/0x40 [ 1236.433433][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1236.433519][ T28] ret_from_fork+0x1f/0x30 [ 1236.433613][ T28] [ 1236.436194][ T28] Kernel Offset: disabled [ 1236.917661][ T28] Rebooting in 86400 seconds..