last executing test programs: 2m8.510302383s ago: executing program 0 (id=209): mkdirat(0xffffffffffffff9c, 0x0, 0x1c1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = io_uring_setup(0x1694, &(0x7f00000003c0)={0x0, 0xfac7}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 2m5.956318898s ago: executing program 0 (id=221): socket$inet6(0xa, 0x800000000000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000440)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x2d, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x2, 0x0, 0x0, 0xfa, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4, 0x4}, {0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x1, 0x0, 0x800000002}, {0xeda7, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x9, 0x20, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0x1000000000080, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x4, 0x100000000000000, 0x0, 0x0, 0xfffffffffffff2eb, 0x2000000000002ff, 0x4, 0x0, 0x4c3], 0x0, 0x200306}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m4.535833513s ago: executing program 0 (id=226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8041, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$igmp(0x2, 0x3, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x10}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x40003}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0x4, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80000000, 0x7, 0x3, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2m3.076783649s ago: executing program 0 (id=232): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r5 = socket$inet(0x2, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="fc0000000301010200000000000000000a000004dc0002800c00028005000100840000002c00018014000300fe80000000000000000000000000002f14000400000000000000000000000000000000011400018008000100ac1e010108000200ac1414aa0c00028005000100060000001400018008000100ffffffff08000200000000001400018008000100ac1414bb080002000a0101022c000180140003000000000000000000000000000000000114000400ff0100000000000000000000000000010c000280050001008800000006000340000400000c000280050001"], 0xfc}, 0x1, 0x0, 0x0, 0x4050}, 0x40080c0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x9}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0x7, 0x5, 0x1}, @multicast2, @multicast2, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) write$tun(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="000008004500001c000100004011"], 0xfdef) 2m1.969949017s ago: executing program 0 (id=235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x2424, 0x4822}, [@IFLA_NET_NS_PID={0x8, 0x13, r1}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0008c1}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$loop(0x0, 0x4, 0x2001) ioctl$LOOP_GET_STATUS(r3, 0x4c03, 0x0) getpid() 1m59.644808795s ago: executing program 0 (id=244): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ac) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x39, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m59.188365617s ago: executing program 32 (id=244): openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ac) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000880)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x39, 0x18, 0x0, &(0x7f0000000180)={0x30, 0x30, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) 1m59.021399551s ago: executing program 1 (id=248): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x4, &(0x7f0000000680)={0x3, 0x3, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'lo\x00', {0x2, 0x4e21, @remote}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001040)={'lo\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x30}}}) 1m57.768712312s ago: executing program 1 (id=251): r0 = syz_create_resource$binfmt(0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80000) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) 1m56.192004542s ago: executing program 1 (id=257): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/190, 0xfffffffffffffeff, 0x0, 0x0}, &(0x7f0000001380)=0x40) sendmsg$inet6(r0, &(0x7f0000004200)={0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002f40)="b9b20de7dea999109709c55fe4e7fb4ea933a2a751f09fbde3060a59caea9189c0a5cb07a69dd119033e7347a99adec91697c539eaf6e38bd0e7b7c18ee9004ea382286ac3de19dbbd4fe971a6127924b460e59719529a34f95084c623ab148bc1976ab0d1d842c660f0c99a5323d7f6343e256e9275efe91832d3cd541aaf43d62c55941f001976b78117563b3393ada0089ab6f98ef684a24a47909105a022a37baf26a122871e646e6d25234f720b60f80081f7a4acdc33f79b4d2c8d6319643861d0b9214e8a3f12cf51d23e2354969572d8c3a1845a6c8fd8308881e0d50d28eba81ebed1edd4b1b7244f0c2460c7995a20f37a47f7551b1d9559bc7e069fc44788147d66b881754236745f7f89f42334ce70899261ea1dff0be18b1f10bb10e44dd12d0f13cd45a8ff707122db00a51a6d818d1fc93d46474293e43b48bd630c2de609503cace9e22395a2d3795a2339c0590b4d3be6f64b4ba16d62325843e880e38798121bee6cef16b87dff1c52e322be935a4f01b4c1c0eeaccabf974161f556530f8eeee83f2eea881bb97a43f1f175f7e28db716e886f4342b20a854190c4febf36bcc3bb6b371120a3e15f4b6e04481645e3698300c2995384baeb6eba8656ac3796087f927bd88168478cff4f59dbe73a33fb366076c4015a374069b9316f91cdc5891edbb75946bfd27b81588c8f2c13ae66309e517f52d3662d2d6e38c595ea46dd6b2df971896f62213f901f12bc1e2b6b50e0f03a0225743a34d7e1a067e652f4e5649fc16c9072721da71bb2de237e30177cb19a69ea0b6351ac5358ade777fcd218102b573e2a9f5faf5c85058cbfd009dd316fbd28d2c670b1769f21ce444ab552f329dbc0b65fbea397182457c19264837d9a8423da5e85a89bf90ac5d8d74fc6b5acd76e1565d7a4ceb39dfe076a5a9ce17ebd7be3ba2adb5d08ed39fdda0888e996d58e0818eeb335fe91fedbb5102d95e859dcbd580a587b88748c54e0033832f008b6d8ad4247e1d5553dcab34544d426cccedb1cd6314f6b7352a255709a23a00eeb6ac0ebd95210c7ebf269f217ec116b60f79d7dfb6ab501125a853892c3589008e2f6354cd883835929b0924df6cfb31fb2e84e3b3223fb501f48607e14e26f4b9edb67c11209f61eaf5087fdfcaddebd73013c9f92f8d1ab7e89a25c6d83e07663910560e407d8133929d637a3d81bc13a6f17d0f732f08da403f3711329684c7b161357ba1fc54060243b637ba52ad781b4a48bb67809612c2c126b8a9fc8342e3bf55dc16df5ae9a3d4b68f5096163345638a61553c768bca59c93f71eb6432e2756206c11ecab99528ec2afbfba0b1236a0ecfbbf7fc3bdb28401992dc85ba1eb9a2631b13d6497a10c02230f9c023aeebc97ad12de341c5eb623fd65d254630a2bfd90cd845ec400dddfed66621970ac61b0c8015784bfbdd539390cb54cc032fb823380fae48bed95fb2c16ed5af441a0bb9374cb295199530e267837faacb2379817295e2f4b55b8d732164ca69bf894a920a3c7bb97ce2c4f47436da138f459b92ebf1c7001af2803dbb057569380ff4e2679f21ef0a457cfb93d477df26a0f26e3a3511be8f4f4f3ab155eec86bfedf50821f628455598db34d835ad599f6bb04e849b77913398c3f5e489c3977fe858a66f557d9b7c555b945c378bf29405853b1ad07738c672ce03a43789199ed8dccf9dd030f65eb571fc7b80706ac0ea37f520074156124601ac1d4192ba3784262f3c77163be767b1befa6db16802937b5b4b00e5ae76fba792bae1c61e8de579068df78228dc89c776c2f46a225f6fa7af5a002349cfdb7b1182d962a4ca9b771aa80d4fd48f15c8fb34ddb5f836898290e8b295eca6ee3734f337031782e376f39a7bf074cbffdc774101a77787c1e6c9f89fba2599d61850a2b4553eb6ffc46e2fd177053a31eb6c6bc93a4cd8ddd7d1b9d31bcf82f24e8f6c4d0a6630a5414aeef37064596309d61a60fdb7fe70fffefe30a578cd4395790395a8ae863efeb910200a01439ff647d65aed64acd0cc508e829e9761a40933a01d61fb1a74fcc82ba8748b3c3785f76bf0b29f2cf682ec84de405531c22127175302351f4c90a00e91336d687dc0a164417fceaf85559414eb115377505cbb105da207a0b8a8cf12a3cd8b3b1ae2b648fe0ffd74be418ae32990e4b7af298730ce06a0c34c5b572f2dbde5cdd16498e9ee8b5e3ef0cd28480ca4e0d09138c8873718a4a4de26a57f2cdee4a2caeb9d1757aa1d3380844487e9400152abdd42e95a7243d93889f8118d4f680ac30f1515ff74983a49234569045d549b356e0249c6bd7bed84615c9cd334b5229118c6b766f9bc9dd8bc6aa90e4ec62d20a52012c0fcf65c97a1a3c6b9d863a50c9ad8e6a4deacf84f5dbdc58031b929477bb6af2cfe7e53fb0746529d7332ff315d367b2e0fdc0a31589029479179702fe2ab564887628d21feb4d2ad13a5fe0cf6f95cb4ac9190cf9b254b763276f63c73b52b37e8efa7083bc4e992769da8d2e4a8f29c50460d35e3c3af99dc93fdf91e96fdc217aec6417ddf6b141fff9a39ab9507a138d78b0b418b6e7073d02bdf8d71ea7c98b2e2551009af6e388c489240333648af1b38203961b654cb55d05a5d968eed6637f2bc87023c1a122c8b1a129047538cc1a370e7e3f844c71f4375e491fe88943f23a153db52a8d8ec7a6420a2dfffbef40570154a1f22bfdb9359c60c0dca7e7ca014cc56e699830ab5f9a7e631ba3874b84361aa3380df6249bd6d4d8d3be3859cccad8d8f4c957bfb04a3d78fd969c74c3bccb1197e6cf6353db0b973858440714b8c379399bbeaec8a05fd0c440075d38d20ece57825e0f983860a9f056332d09f88ab4545777616fc744a10189c85c07368ba477829e831a20694c664976abaf9fe0f6c242518cb83f08a87a0613495592e02bdab7941b1bb50c2e809d648242bbb401ca1ddec4dec70e1c35a3b484837e934e4c0b1bfdca55d6080e8404fc3e0ef5c1573dff660b310a6949edadae644376a2bdcfed9cba491536e4df4401dfed80711b62a84f0b81ece7079d6d32ff0c9abe7f799b97da32cb7e9f8a463d23c158476ee0762967ef6dd53a7e7b20d24595440269ae5b6934c8140a3fe01ad423b732782f8ea3548d2734d01d42dcec0021681ec9130a15916fdae3d55575bbd8859845e238f875df478207d3212193db62545d26fd90b81ba28bdf94a5d1d7520e796bdebdafd845c6cbf6db26b723e5d5e3b870ea0cd82b313770e86f070c7b9bb57babb19198ed881c2d63091ac039a1756fd9d9548ae3f46d30f02fe56940df0bfc151674eb8b4bd8794ab7707bf40f6b65f18d418c1a1ac19ac39e24073fcd2c76b5e5a82c15e500ce12e4d75a7a49ee5f207ddff8f4a0e68ac4d912c6413a28e4bcc9903774998f497158f5b5f8a4687858656647e39f94b193cb928400a690a2083e25bcde662f09903dc840badcbd93243d7bcf41575cac9efda6e8426956e524325ffd93383d4cd75a182953633b7ee923c6019dac10be140f7cf229b64cf6ac90b94d20bf6fd5d216ac770f7978c4429b6d95d69f2429ef9d236e5849cced8ed25c2a377ebe2e67e02a07f2f6468762025985ad1e9a892f34f282fbbec9ac0f2f9b5716a32fce0d5d32c4d78d329b4b0e056da485c074716a1ed384b2db102e87a2f4eab3b9ad374e67b7780f378e5a24aead4b353b2eac77c06905a964c3dd52fd09d0bb1b4b6320a55b93e444af1538ffc896624b4945bd94773b710b30b0ad361e019c1bed9d0e2ea4a66d14df79d7e54543a31a2dadf39bb069fa6e85571d442d55ffd43765174f11174ff29cbd05097a92e774b30d8d7cd7357b34fb928a49acd9aaa1495a4d62ea5fe52626d2c1eda912ca1d1d91d83a06aac47e9e27382e47ee85b4ad2b460f888de835c592436bec189e5ef91c0f396ecf56e8593a6c035c03abdaa2a40f6f68039c4b369be93b91f34c89fe0f82b44dbf246f75160557e6ade1eeb7cb0c20f3a363dc92c01a442cc6f087052383180b4970d315d34483e5b4278c939693fef935d910010dbe40be9675934d530926bac6f17b164b09fcf473162b1654649aa63ee862d5adea2b283a072c04ba6b2c21f64860f060a7d1ed51b28faf535f7ecd19b1e0e40a043819126ecd0c1d83776f84b16929f5edc370911b1c64e51e6f90c0d45f601399a95e48179a98d68a1f8fde44c5a78166321e5f93b58798e5e8f62024da557872833d4dc03465226c13a42487c9e2ef63f86142a2138f75868d32aa123dd6038d7f12e782364779beca0f2f1d8a3d04b7004a5248a7ef36e550f34b8dea0c96b63b45b45f5878a04bf7b2d25a827068fae6cfc93098605828ab08b0faa25899dc07f493bd9f02c748fe4aa9ef5a8823796765eb36c65a1bd0fa2885c23515b141d95985d8507c31b901564302c69ed36ae9783d54a4fa2d7d1018b10d79dd18a58faa120da05b4b46e7956407957104484141cc6ad53961ed2f04af29e3abfe661476731126011a71320380f4c10e6cadf922cdcc1c055a843bef7ebc3fc44ea39b0ea6cd4ac9dba587743a25983cb310a279196363feb97ce5b27323f3dbe0812fc880abdcfb442d5d24672b558b02ae9084da68add2735111ba11396642bad4a83b055dcfc1831137f62c189895f347bbd512bbba9c5fc8cfe25e22b948430d319231c7fcb57cb3bc866f7f897d97e06214ef55a8b3c602355797f880553156a4f999e64d2938922e55cd2f99ca91c824f57a486bcb49d6d08b33dfb5eccc8f6580034a2fe26a543fca7f6d1b6f81b59edc055f7bf58ba12204f38f3861880ffbdcc4c652b47ce2cbcf3d20838fe3708b3d8c01c46c676c3a8af9409a558c49750832536ff9bc7af97975823eb7ef824bc99d00a5bc94186b68dc90f6cfcdad6c90986019700e813f01e1f9d28bcd4b970e24d1e39e2e764bc65d9cfa4626de39dd8145671e6ae59ddcfbd3135482b16f807b105a305bc2fb76d54810608f3ac8a3f3a874cb55eac0956c7a635c307d453a5722c1b4e0f2a1f8cb8c78ab2e9ca503edad5490277e57ae2624ca3baf762c9125e64e949b64a9ddab4ad402ef1b1eafd424bbcb20d9a659de61db6fb829b8e79bad75c3b0c6c4d8670b059c5711da0b77b08fe48914e600a9be1db9a3ccd9b8c8ab3966c7ba488a58697ab226bdfa523c5ed81b418353f45e75ffa15c6fdec50d5d27abdc27ea7ccadf791c6cea641ffb2c048cb465b7e37953c9becef3ae613ef8ae8acab7a27e3baa98eff8c9dcd0a2ee7cd776956fae6ba32fc93ab725a9e43d5b47ee1f99f10f5ad7eb305df5aa1bc52c2fe5150bb0cdf20eff8f68200647577fc90b99ea4d05df7f12ba9628e292a11174a18dc67b6b97577c0e895d956f0fadcf4f90da3f52ac3fb100cb8ceb07a1eb9c5a6766dc1e64c82bbcd016bf6750ab0d0c0c30cbd219ffaabdde3fad3d02e193c2f889110900d5d7b17f9ff81782f72e1d3193b89345a496446165bd446b6ef8d4e8bdf1f100a0f9e413e7ecc7314deeac59f74422630761c7d55f0b7fc560b5198440b809e1e6119288d1eaa8e4129e1e76daebecdecb30f7016877ac5a86603d0b7db8ab63aa0ae490dfdf6766f74e6285f1eac32f40964e3474b1ab6eda18df098121eb561a1aa496a5e2301de40778989a623da304b7d93694ea7037f1d729b9eed71192eaba5bbc9a81ace031949c209f05f068489a480471525ab6513c4304", 0x1000}], 0x1}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) 1m55.893158259s ago: executing program 1 (id=261): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000001c0)={[{@fat=@quiet}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@utf8}, {@utf8}, {@fat=@quiet}, {@utf8}, {@numtail}, {@fat=@flush}, {@shortname_winnt}, {@shortname_win95}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 1m54.772417387s ago: executing program 1 (id=265): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000c80)=ANY=[], 0x1, 0x5f2, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000240)=0x5) symlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000020980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1m50.124126294s ago: executing program 1 (id=284): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9}}]}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[], 0xdd12}], 0x1}, 0x40) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@secondary) socket$netlink(0x10, 0x3, 0x12) 1m49.112294499s ago: executing program 33 (id=284): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x6062, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9}}]}}, 0x0) socket$inet6(0xa, 0x1, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000005fc0)=[{&(0x7f0000000000)=ANY=[], 0xdd12}], 0x1}, 0x40) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000400)=@secondary) socket$netlink(0x10, 0x3, 0x12) 1m18.244242561s ago: executing program 3 (id=371): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x5, 0x0, 0x4, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000b00)={r4, r3}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) close_range(r1, 0xffffffffffffffff, 0x0) sched_setattr(0x0, 0x0, 0x0) 1m17.744237284s ago: executing program 3 (id=372): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 1m17.064094781s ago: executing program 3 (id=375): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv4/conf/all/forwarding\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='0\n', 0x2) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x0, @rand_addr=0x8080808}, {0x2, 0x0, @empty}, {0x2, 0x0, @broadcast}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)='syz_tun\x00'}) syz_emit_ethernet(0x7fa, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7ec, 0x1234, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x7d8, 0x0, @opaque='\x00'/2000}}}}}, 0x0) syz_emit_ethernet(0x7fa, &(0x7f0000000500)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x7ec, 0x1235, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x7d8, 0x0, @opaque='\x00'/2000}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000600)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1236, 0x4000, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0) syz_emit_ethernet(0x8e, &(0x7f0000000700)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x1237, 0x0, 0x40, 0x11, 0x0, @rand_addr=0x1020304, @rand_addr=0x8080808}, {0x1234, 0x5678, 0x6c, 0x0, @opaque='\x00'/100}}}}}, 0x0) 1m16.72684389s ago: executing program 3 (id=377): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x210000, &(0x7f00000006c0)={[{@user_xattr}, {@init_itable_val={'init_itable', 0x3d, 0xe}}, {@dioread_nolock}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@sb}, {@stripe={'stripe', 0x3d, 0xbb4b}}, {@data_err_abort}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x1, 0x589, &(0x7f0000000a00)="$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") setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x1) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x800) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_uid}]}}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f00000002c0)=0xc) lchown(&(0x7f0000000140)='./file0\x00', r4, 0x0) 1m14.072261916s ago: executing program 3 (id=384): socket(0x10, 0x3, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffec5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x101, 0x48000028, r2, 0x0) 1m11.095825571s ago: executing program 3 (id=392): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 1m10.922332495s ago: executing program 34 (id=392): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x1, 0x0, &(0x7f0000000000)) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) 20.117473616s ago: executing program 5 (id=554): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x75b, &(0x7f00000017c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x20) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 18.150123536s ago: executing program 5 (id=562): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0x3, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000300)={0x20, 0xfa59ebfcb3c59761}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) 14.547265946s ago: executing program 7 (id=569): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x1, 0x5800182b, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000030000001200000008000300", @ANYRES32=r3, @ANYBLOB="06001200000000000a0006"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) 13.310804307s ago: executing program 2 (id=572): syz_open_procfs(0x0, &(0x7f00000003c0)='uid_map\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000040)="0f", 0x1) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket(0xa, 0x3, 0xff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 13.235686268s ago: executing program 7 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ioperm(0xc, 0x8, 0xa) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x3, &(0x7f0000000240)=""/87, 0x57) 13.072937412s ago: executing program 2 (id=575): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x1fc) open_tree(0xffffffffffffff9c, 0x0, 0x89901) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r2, 0x401870cc, 0x0) 11.890386422s ago: executing program 2 (id=577): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, 0x0, 0x0) 11.889514642s ago: executing program 5 (id=587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x100, 0x4, 0xb47e, 0xb, 0x3, 0xd, 0xf, 0x1ff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0xedad, 0x80000003, 0x5, 0x6, 0x5d05}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x20044004) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000340)=',', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x40045) 10.488301528s ago: executing program 5 (id=579): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000001c0)={[{@fat=@quiet}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@utf8}, {@utf8}, {@fat=@quiet}, {@utf8}, {@numtail}, {@fat=@flush}, {@shortname_winnt}, {@shortname_win95}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$eJzs3MFr024YwPFn7bZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUpFYq4nbz6t8xPHpSUP+BXbx5Fy9DELzsIEbWJlvXRVenM936/cDIu/fJk7zhTcaTwN7Nm88fVMueUTYbkkirJETWZEskt90KjATbRLs9Lt3W5MLk1w+nr9+6faVQLM4vqi4Uli7mVXX6zJtHT16cfdeYvPFy+nVKNnJ3Nr/kP278t/H/5vel8OiOiKnLjtMwl21LVype1VC9ZlumZ2ml5lluQ011w3jZdur1lpq1lalM3bU8T81aS6tWSxuONtyWmvfMSk0Nw9CpjAyb5G9nlNYXF83CkQwGcZiI6nTdgpmMDJbW/8WgAADAYImr/r9f8bTiac3Zru9/Uf8npDt+QP0vMtT1/2HVfx6KrCdxvGzX/5ng+d2L+h8AAAAAAAAAAAAAAAAAAAAAgONgy/ezvu9nw234kxKRtIiEv8c9ThwN5n+4df3jXlrEftYsNUudbSdeKEtFbLFkdkzkW/t+CHTaC5eL87PalpO39mqQv9osJSUV5ody0flznXztzl+VMcl0nz8vWZmJzs9H5DdL43L+nJ8KzmyJIVl5f1ccsWWlfV/v5j+dU710tdiTP9HeDwAAAACAk8DQHfve39txQ8NlQ3rinc7d7wOSPeD7QM/79aicGo3vugEAAAAAGCbeuFRN27Zcr/X4pDfCxWz/ygFF4r6cdL87j4pI0PNqUOain0ZCRHpDY/t6ohvJP5vlzyJ7n4uZ2Kf70A0/uXOvfnrYeQL6SY/zrxIAAACAoxAW/SNxDwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHW7ypi4f6HWYSs63TJeK4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAw/AgAA//9crBNs") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 10.229194923s ago: executing program 6 (id=581): socket$nl_route(0x10, 0x3, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r3, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 9.939902951s ago: executing program 5 (id=582): syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000190000404f045db600000000000109022400010000000009040000010300"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000007e000/0x1000)=nil) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffd000/0x1000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x140980001, 0x204, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x40, 0x0, 0x4000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x4000000, [0xe8bd, 0x0, 0x4]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000400)="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01", 0x17) 7.481143572s ago: executing program 7 (id=584): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nullb/nullb1\x00', 0x1ed) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./config/nullb/nullb1/submit_queues\x00', 0x400002, 0x144) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0x6}}}}}, 0x0) write(r0, &(0x7f0000000180)='4\x00', 0x2) ioctl$MEMGETBADBLOCK(r0, 0x40084d0b, &(0x7f00000000c0)=0x9) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nullb/nullb1/power\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nullb/nullb1/submit_queues\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='2\x00', 0x2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x402) syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x5, "6eed57"}]}}}}}}}}, 0x0) close(r2) 7.428497654s ago: executing program 5 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x442802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='atkbd', 0x5) 6.261855263s ago: executing program 35 (id=585): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, 0x0) openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x442802, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio0/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='atkbd', 0x5) 6.233462224s ago: executing program 6 (id=589): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000300)={0x20000002}) epoll_pwait2(r1, &(0x7f00000001c0)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_pwait(r1, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x800001f}) openat$kvm(0xffffffffffffff9c, 0x0, 0x20100, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed40) shutdown(0xffffffffffffffff, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044064}, 0x24008004) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BTRFS_IOC_ENCODED_WRITE(0xffffffffffffffff, 0x40809440, 0x0) 6.231988284s ago: executing program 2 (id=590): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket(0x18, 0x0, 0x1) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x123, 0x2}}, @out_dx={0x6a, 0x28, {0x456, 0x4, 0xffffffff}}], 0x48}) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.092295297s ago: executing program 4 (id=591): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 5.945661191s ago: executing program 4 (id=592): socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x5) r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x12, r0, 0x100000000) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000080)={0x5, 0x3, 0x248, 0x5d92, 0x9, 0x1ce, 0x7fff, 0x2}, 0x0, &(0x7f0000000140)={0x3ff, 0x80, 0x5, 0x0, 0x101, 0xafc2, 0x5, 0x1}, 0x0, 0x0) 5.922982181s ago: executing program 4 (id=593): syz_open_procfs(0x0, &(0x7f00000003c0)='uid_map\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000040)="0f", 0x1) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket(0xa, 0x3, 0xff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 5.774914625s ago: executing program 4 (id=594): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r8, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 5.713394127s ago: executing program 6 (id=595): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x4000014) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setreuid(0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c00) ioctl$CEC_DQEVENT(r4, 0xc0506107, 0x0) 5.300273627s ago: executing program 4 (id=596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x84000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) ioperm(0xc, 0x8, 0xa) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syslog(0x3, &(0x7f0000000240)=""/87, 0x57) 4.629983814s ago: executing program 6 (id=597): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x44}}, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x2, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff", 0x0, 0x0, 0x0, 0x0, 0x1}) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r3, r3, r3}, 0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)={'sha384\x00'}}) 3.665447918s ago: executing program 4 (id=598): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x6, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 3.435291914s ago: executing program 2 (id=599): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20a201, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x8, 0x20000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x10) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x36}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000640)="442ea407603a16ff", 0x8}], 0x2}, 0x20000085) 2.38274134s ago: executing program 6 (id=600): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000001c0)={[{@fat=@quiet}, {@utf8no}, {@shortname_winnt}, {@utf8}, {@uni_xlate}, {@utf8}, {@utf8}, {@fat=@quiet}, {@utf8}, {@numtail}, {@fat=@flush}, {@shortname_winnt}, {@shortname_win95}]}, 0x0, 0x2b2, &(0x7f0000002c80)="$eJzs3MFr024YwPFn7bZ2HVt7GD/4CeKDXvQStvoXFNlALChzFfUgZC7V0tiUpFYq4nbz6t8xPHpSUP+BXbx5Fy9DELzsIEbWJlvXRVenM936/cDIu/fJk7zhTcaTwN7Nm88fVMueUTYbkkirJETWZEskt90KjATbRLs9Lt3W5MLk1w+nr9+6faVQLM4vqi4Uli7mVXX6zJtHT16cfdeYvPFy+nVKNnJ3Nr/kP278t/H/5vel8OiOiKnLjtMwl21LVype1VC9ZlumZ2ml5lluQ011w3jZdur1lpq1lalM3bU8T81aS6tWSxuONtyWmvfMSk0Nw9CpjAyb5G9nlNYXF83CkQwGcZiI6nTdgpmMDJbW/8WgAADAYImr/r9f8bTiac3Zru9/Uf8npDt+QP0vMtT1/2HVfx6KrCdxvGzX/5ng+d2L+h8AAAAAAAAAAAAAAAAAAAAAgONgy/ezvu9nw234kxKRtIiEv8c9ThwN5n+4df3jXlrEftYsNUudbSdeKEtFbLFkdkzkW/t+CHTaC5eL87PalpO39mqQv9osJSUV5ody0flznXztzl+VMcl0nz8vWZmJzs9H5DdL43L+nJ8KzmyJIVl5f1ccsWWlfV/v5j+dU710tdiTP9HeDwAAAACAk8DQHfve39txQ8NlQ3rinc7d7wOSPeD7QM/79aicGo3vugEAAAAAGCbeuFRN27Zcr/X4pDfCxWz/ygFF4r6cdL87j4pI0PNqUOain0ZCRHpDY/t6ohvJP5vlzyJ7n4uZ2Kf70A0/uXOvfnrYeQL6SY/zrxIAAACAoxAW/SNxDwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHW7ypi4f6HWYSs63TJeK4SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAw/AgAA//9crBNs") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={0xffffffffffffffff, r1}, 0xc) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 2.227631184s ago: executing program 7 (id=601): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1.98674683s ago: executing program 6 (id=602): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r1, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, 0x0, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) pread64(r3, 0x0, 0x0, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r4, &(0x7f0000000180), 0x1000) 1.230714959s ago: executing program 7 (id=603): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=@known='user.incfs.size\x00', &(0x7f00000003c0)='./cgroup/syz0\x00', 0xe, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./trace\x00', &(0x7f0000000600)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffff9c, &(0x7f0000000640)='./trace/events/mac80211/enable\x00', 0x40000, 0x0) readv(r2, &(0x7f0000000740)=[{&(0x7f0000000340)=""/122, 0x7a}], 0x1) 902.979µs ago: executing program 7 (id=604): syz_open_procfs(0x0, &(0x7f00000003c0)='uid_map\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000040)="0f", 0x1) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) socket(0xa, 0x3, 0xff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r2, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) 0s ago: executing program 2 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) kernel console output (not intermixed with test programs): ONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.307551][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.358160][ T4196] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.374841][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.387889][ T4196] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.397657][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.407008][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.425531][ T4196] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.437122][ T4196] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.456277][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.473417][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.490846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.500232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.524088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.534113][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.544389][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.551561][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.586433][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.600455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 69.609718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.619820][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.629234][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.636416][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.645514][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 69.657899][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.675033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 69.709851][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.718063][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.730937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.752875][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 69.766053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 69.777150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 69.786468][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 69.795785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 69.804671][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 69.828119][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.840435][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 69.860175][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.877595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 69.888474][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 69.899902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 69.909015][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.916290][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.926375][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 69.935419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 69.944701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 69.953251][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 69.962477][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 69.972117][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 69.980951][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.988132][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.999183][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.009672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.051657][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.063558][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.075013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.084406][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.097358][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.109846][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.117111][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.132613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.147475][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.156102][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.163217][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.171573][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.180456][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.189057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.197507][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.205892][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.229482][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.249477][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.263876][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.282082][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.290880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.301672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.310642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.320647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 70.337469][ T4186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.349536][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.371962][ T4231] Bluetooth: hci0: command 0x041b tx timeout [ 70.381585][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.390114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.399634][ T4231] Bluetooth: hci1: command 0x041b tx timeout [ 70.406242][ T4231] Bluetooth: hci2: command 0x041b tx timeout [ 70.414088][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.423625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.432377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.442031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 70.450586][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 70.458924][ T4230] Bluetooth: hci3: command 0x041b tx timeout [ 70.465830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 70.474416][ T4230] Bluetooth: hci4: command 0x041b tx timeout [ 70.480648][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 70.488917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 70.506507][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.519612][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.538304][ T4196] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.580847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 70.590785][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 70.599829][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 70.611709][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 70.619244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 70.640174][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.655973][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 70.691107][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 70.713455][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.720588][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.791157][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 70.806593][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 70.817210][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 70.827140][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 70.836492][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 70.845396][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.852531][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.861774][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 70.870609][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 70.886270][ T4191] device veth0_vlan entered promiscuous mode [ 70.912109][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 70.932425][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 70.956867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 70.972392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 70.987100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 70.997707][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.013824][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.027214][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.049806][ T4191] device veth1_vlan entered promiscuous mode [ 71.064683][ T4196] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.083491][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.116759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.132915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.140915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.153697][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.162406][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.171856][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.180395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.188499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.207858][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.232550][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.240757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.256286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.268623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.301480][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.312543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.323023][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.332027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.346371][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.352962][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.374383][ T4191] device veth0_macvtap entered promiscuous mode [ 71.410185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.419771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.433807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.443347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.452412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.467909][ T4185] device veth0_vlan entered promiscuous mode [ 71.482694][ T4195] device veth0_vlan entered promiscuous mode [ 71.492412][ T4191] device veth1_macvtap entered promiscuous mode [ 71.523150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.532302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.540647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.549940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.559404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.568561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.578386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.588274][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.597259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.606183][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.616119][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.624302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.632392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.645841][ T4185] device veth1_vlan entered promiscuous mode [ 71.671732][ T4186] device veth0_vlan entered promiscuous mode [ 71.688423][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.699432][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.709461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.718403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.727568][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.738467][ T4195] device veth1_vlan entered promiscuous mode [ 71.762188][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.772093][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.780040][ T4186] device veth1_vlan entered promiscuous mode [ 71.787978][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.797520][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.808243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.816494][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.824583][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.834157][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.852143][ T4185] device veth0_macvtap entered promiscuous mode [ 71.873468][ T4191] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.884123][ T4191] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.893344][ T4191] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.902664][ T4191] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.913437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.923692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.933123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.953475][ T4185] device veth1_macvtap entered promiscuous mode [ 71.965702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.974071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.984651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.024833][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.035806][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.056377][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.077828][ T4196] device veth0_vlan entered promiscuous mode [ 72.090240][ T4195] device veth0_macvtap entered promiscuous mode [ 72.097865][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.108296][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.117161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.126321][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.137003][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.146840][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.155991][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.164446][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.178701][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.187351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.195335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.207528][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.218800][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.231019][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.253697][ T4195] device veth1_macvtap entered promiscuous mode [ 72.269480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.284473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.293602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.304338][ T4186] device veth0_macvtap entered promiscuous mode [ 72.314607][ T4196] device veth1_vlan entered promiscuous mode [ 72.333967][ T4185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.343015][ T4185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.352701][ T4185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.362462][ T4185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.387542][ T4186] device veth1_macvtap entered promiscuous mode [ 72.419966][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.432808][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.444481][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.456034][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.466262][ T4260] Bluetooth: hci2: command 0x040f tx timeout [ 72.472744][ T4260] Bluetooth: hci1: command 0x040f tx timeout [ 72.480209][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.488087][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 72.518679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.528566][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.536867][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 72.543679][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 72.549066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 72.558598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.567630][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.576660][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.591972][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.603202][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.614818][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.626233][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.641701][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.654573][ T4195] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.663721][ T4195] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.672919][ T4195] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.682158][ T4195] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.700708][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.712459][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.723079][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.734129][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.744786][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.755966][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.769102][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.794334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.804249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.814164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 72.826118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 72.838274][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.847252][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.868476][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.873363][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.887203][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.889277][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.905850][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.917678][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.928077][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.939776][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.951787][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.965565][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.974722][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.985113][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.994433][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.016917][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.026395][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.040689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.057002][ T4196] device veth0_macvtap entered promiscuous mode [ 73.110089][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.120688][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.134890][ T4196] device veth1_macvtap entered promiscuous mode [ 73.161109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.174827][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.183376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.229306][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.229353][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.249281][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.263308][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.273482][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.284249][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.294360][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.305365][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.315438][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.327684][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.340503][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.363238][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.378416][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.387493][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.413540][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.418477][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.438684][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.449029][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.459886][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.469854][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.471531][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.488481][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.499454][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.511076][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.524761][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.554721][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.570663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.591455][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.611518][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.619409][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.634148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.656941][ T4196] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.670893][ T4196] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.680452][ T4196] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.689931][ T4196] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.739673][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.751809][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.764939][ T4224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.798634][ T4224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.856743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.868059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.875660][ T4266] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 73.955240][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.979023][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.050140][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.120511][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.169324][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.206136][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.266039][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.279005][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.337795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.542863][ T4263] Bluetooth: hci0: command 0x0419 tx timeout [ 74.551915][ T4263] Bluetooth: hci1: command 0x0419 tx timeout [ 74.581566][ T4263] Bluetooth: hci2: command 0x0419 tx timeout [ 74.630852][ T4225] Bluetooth: hci3: command 0x0419 tx timeout [ 74.678413][ T4225] Bluetooth: hci4: command 0x0419 tx timeout [ 76.921278][ T4276] loop0: detected capacity change from 0 to 32768 [ 77.050191][ T4276] XFS (loop0): Mounting V5 Filesystem [ 77.105836][ T4276] XFS (loop0): log mount failed [ 77.327848][ T4331] usb usb7: usbfs: process 4331 (syz.2.16) did not claim interface 0 before use [ 78.123140][ T4352] binder_alloc: 4351: pid 4351 spamming oneway? 2 buffers allocated for a total size of 5120 [ 78.672368][ T4230] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.061501][ T4230] usb 3-1: Using ep0 maxpacket: 8 [ 79.162049][ T4364] loop4: detected capacity change from 0 to 128 [ 79.291507][ T4230] usb 3-1: config 0 has no interfaces? [ 79.407313][ T4377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.31'. [ 79.512166][ T4230] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 79.573725][ T4230] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 79.683476][ T4230] usb 3-1: Product: syz [ 79.733749][ T4230] usb 3-1: Manufacturer: syz [ 79.794969][ T4230] usb 3-1: SerialNumber: syz [ 80.011096][ T4230] usb 3-1: config 0 descriptor?? [ 80.491041][ T4225] usb 3-1: USB disconnect, device number 2 [ 81.276326][ T4405] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 81.370093][ T4410] Cannot find set identified by id 0 to match [ 82.656089][ T4430] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 83.812576][ T4443] loop2: detected capacity change from 0 to 40427 [ 83.865798][ T4443] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 83.872756][ T4443] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 83.892467][ T4443] F2FS-fs (loop2): invalid crc value [ 84.016800][ T4443] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 84.136787][ T4443] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 84.144218][ T4443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.239389][ T26] audit: type=1800 audit(1787857883.933:2): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 84.307068][ T4443] ======================================================= [ 84.307068][ T4443] WARNING: The mand mount option has been deprecated and [ 84.307068][ T4443] and is ignored by this kernel. Remove the mand [ 84.307068][ T4443] option from the mount to silence this warning. [ 84.307068][ T4443] ======================================================= [ 84.342789][ T4443] F2FS-fs (loop2): Unrecognized mount option "´Ø½ç謻ó¿3&òú¥•*3*ÒÎÔ ˜¢¯ú-­Ml?Ÿóÿ¨E UH«b" or missing value [ 84.367636][ T26] audit: type=1800 audit(1787857884.063:3): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 84.416240][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 84.478355][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 84.787127][ T4443] attempt to access beyond end of device [ 84.787127][ T4443] loop2: rw=2049, want=57344, limit=40427 [ 84.828387][ T4443] attempt to access beyond end of device [ 84.828387][ T4443] loop2: rw=2049, want=53248, limit=40427 [ 84.922288][ T4443] attempt to access beyond end of device [ 84.922288][ T4443] loop2: rw=2049, want=69632, limit=40427 [ 84.949703][ T4443] attempt to access beyond end of device [ 84.949703][ T4443] loop2: rw=2049, want=69640, limit=40427 [ 84.961442][ T4443] attempt to access beyond end of device [ 84.961442][ T4443] loop2: rw=2049, want=69648, limit=40427 [ 84.973888][ T4443] attempt to access beyond end of device [ 84.973888][ T4443] loop2: rw=2049, want=69656, limit=40427 [ 84.985636][ T4443] attempt to access beyond end of device [ 84.985636][ T4443] loop2: rw=2049, want=69664, limit=40427 [ 84.997159][ T4443] attempt to access beyond end of device [ 84.997159][ T4443] loop2: rw=2049, want=69672, limit=40427 [ 85.008743][ T4443] attempt to access beyond end of device [ 85.008743][ T4443] loop2: rw=2049, want=69680, limit=40427 [ 85.020241][ T4443] attempt to access beyond end of device [ 85.020241][ T4443] loop2: rw=2049, want=69688, limit=40427 [ 85.060051][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/73.tmp-b7:2' failed: Read-only file system [ 85.162877][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:2' failed: Read-only file system [ 85.312627][ T4225] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 85.329007][ T4469] loop3: detected capacity change from 0 to 128 [ 85.434124][ T4471] loop0: detected capacity change from 0 to 512 [ 85.454888][ T4469] EXT4-fs (loop3): Test dummy encryption mode enabled [ 85.478918][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/74.tmp-b7:3' failed: Read-only file system [ 85.517054][ T4469] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 85.553345][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 85.568226][ T4471] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 85.601288][ T4225] usb 5-1: Using ep0 maxpacket: 16 [ 85.623690][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-diskseq/74.tmp-b7:3' failed: Read-only file system [ 85.659810][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-diskseq/75.tmp-b7:0' failed: Read-only file system [ 85.677169][ T4469] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.691298][ T4471] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 85.731525][ T4225] usb 5-1: config 0 has no interfaces? [ 85.738117][ T4179] udevd[4179]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system [ 85.776888][ T4471] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 85.877532][ T4175] udevd[4175]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system [ 85.931467][ T4225] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 85.940807][ T4225] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.996532][ T4471] EXT4-fs (loop0): 1 truncate cleaned up [ 86.057771][ T4471] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,journal_ioprio=0x0000000000000006,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 86.435114][ T4225] usb 5-1: Product: syz [ 86.439431][ T4225] usb 5-1: Manufacturer: syz [ 86.444171][ T4225] usb 5-1: SerialNumber: syz [ 86.453559][ T4225] usb 5-1: config 0 descriptor?? [ 86.695154][ T1108] cfg80211: failed to load regulatory.db [ 87.070762][ T4467] udc-core: couldn't find an available UDC or it's busy [ 87.099223][ T4467] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 87.113792][ T4489] binder: BINDER_SET_CONTEXT_MGR already set [ 87.142684][ T4489] binder: 4485:4489 ioctl 4018620d 200000004a80 returned -16 [ 87.241441][ T1323] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 87.503748][ T1323] usb 1-1: Using ep0 maxpacket: 16 [ 87.781787][ T1323] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 87.795178][ T4505] tipc: Started in network mode [ 87.800387][ T4505] tipc: Node identity 4, cluster identity 4711 [ 87.811348][ T1323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.829455][ T1323] usb 1-1: Product: syz [ 87.834607][ T1323] usb 1-1: Manufacturer: syz [ 87.840939][ T4505] tipc: Node number set to 4 [ 87.850015][ T1323] usb 1-1: SerialNumber: syz [ 87.917913][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.961824][ T4508] capability: warning: `syz.1.72' uses deprecated v2 capabilities in a way that may be insecure [ 88.026197][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 88.045533][ T4510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.73'. [ 88.191580][ T4225] usb 3-1: Using ep0 maxpacket: 8 [ 88.267169][ T4226] usb 5-1: USB disconnect, device number 2 [ 88.615027][ T1108] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.022565][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 89.192366][ T1108] usb 4-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 89.216065][ T1108] usb 4-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 89.352103][ T1323] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 89.366476][ T4523] loop4: detected capacity change from 0 to 512 [ 89.373825][ T1323] usb 1-1: USB disconnect, device number 2 [ 89.399750][ T4521] device syzkaller0 entered promiscuous mode [ 89.421804][ T1108] usb 4-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 89.443097][ T4225] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 89.452773][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 89.461102][ T4523] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.472143][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.478799][ T4523] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 89.492415][ T4225] usb 3-1: Product: syz [ 89.501869][ T4225] usb 3-1: Manufacturer: syz [ 89.506528][ T4225] usb 3-1: SerialNumber: syz [ 89.511385][ T1108] usb 4-1: Product: syz [ 89.515639][ T1108] usb 4-1: Manufacturer: syz [ 89.529981][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 89.542060][ T4225] usb 3-1: config 0 descriptor?? [ 89.549784][ T1108] usb 4-1: SerialNumber: syz [ 89.590920][ T4225] gspca_main: sq905-2.14.0 probing 2770:9120 [ 89.609814][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 89.711779][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 90.283002][ T4178] udevd[4178]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 90.336830][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/79.tmp-b7:4' failed: Read-only file system [ 90.417199][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 90.440594][ T4533] device syzkaller0 entered promiscuous mode [ 90.532229][ T4225] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 90.541478][ T4225] sq905: probe of 3-1:0.0 failed with error -71 [ 90.579148][ T4225] usb 3-1: USB disconnect, device number 3 [ 90.698042][ T4179] udevd[4179]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 91.212856][ T1108] ati_remote2 4-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 91.227978][ T1108] usb 4-1: USB disconnect, device number 2 [ 91.685337][ T4179] udevd[4179]: symlink '../../loop2' '/dev/disk/by-diskseq/76.tmp-b7:2' failed: Read-only file system [ 91.805360][ T4179] udevd[4179]: symlink '../../loop0' '/dev/disk/by-diskseq/77.tmp-b7:0' failed: Read-only file system [ 91.983219][ T4179] udevd[4179]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 92.221403][ T4225] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.334501][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 92.422576][ T4575] loop2: detected capacity change from 0 to 2048 [ 92.540036][ T4575] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #2: comm syz.2.91: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2727(2727) [ 92.599520][ T4575] EXT4-fs (loop2): get root inode failed [ 92.605945][ T4575] EXT4-fs (loop2): mount failed [ 92.621842][ T4584] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 92.681468][ T4225] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 92.701135][ T4225] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.728486][ T4225] usb 2-1: config 0 descriptor?? [ 92.779836][ T4584] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.793383][ T4225] cp210x 2-1:0.0: cp210x converter detected [ 92.930386][ T4591] bond1: (slave gretap1): making interface the new active one [ 92.998738][ T4591] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 93.039097][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 93.052766][ T4599] netlink: 'syz.2.94': attribute type 10 has an invalid length. [ 93.079311][ T4599] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.087927][ T4599] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.150397][ T4599] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.157604][ T4599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.167131][ T4599] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.174311][ T4599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.190303][ T4599] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 93.228176][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 93.256600][ T4553] loop1: detected capacity change from 0 to 1024 [ 93.275564][ T4602] device bridge_slave_1 left promiscuous mode [ 93.289226][ T4602] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.327996][ T4602] device bridge_slave_0 left promiscuous mode [ 93.343269][ T4602] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.380937][ T4605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.95'. [ 93.398024][ T4591] syz.4.93 (4591) used greatest stack depth: 20208 bytes left [ 93.491387][ T4225] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 93.505058][ T4602] bond0: (slave bridge0): Releasing backup interface [ 93.583506][ T4225] usb 2-1: cp210x converter now attached to ttyUSB0 [ 93.790151][ T4226] usb 2-1: USB disconnect, device number 2 [ 93.820281][ T4226] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 93.870652][ T4226] cp210x 2-1:0.0: device disconnected [ 93.894328][ T4616] syz.4.98 uses obsolete (PF_INET,SOCK_PACKET) [ 94.177152][ T26] audit: type=1326 audit(1787857893.873:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4623 comm="syz.3.99" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e933df0d9 code=0x0 [ 94.358586][ T4631] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 94.419127][ T154] hfsplus: b-tree write err: -5, ino 25 [ 94.446722][ T154] hfsplus: b-tree write err: -5, ino 4 [ 94.465864][ T154] hfsplus: b-tree write err: -5, ino 2 [ 94.554606][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-diskseq/83.tmp-b7:1' failed: Read-only file system [ 94.626451][ T4175] udevd[4175]: symlink '../../loop4' '/dev/disk/by-diskseq/80.tmp-b7:4' failed: Read-only file system [ 94.643882][ T4179] udevd[4179]: symlink '../../loop1' '/dev/disk/by-diskseq/83.tmp-b7:1' failed: Read-only file system [ 95.719704][ T4646] Zero length message leads to an empty skb [ 95.978799][ T4646] bond0: (slave veth0): Enslaving as an active interface with an up link [ 96.202870][ T4662] netlink: 76 bytes leftover after parsing attributes in process `syz.0.108'. [ 96.248443][ T4662] device syzkaller0 entered promiscuous mode [ 96.771336][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.048078][ T4686] netlink: 'syz.1.112': attribute type 10 has an invalid length. [ 97.075469][ T4686] bond0: (slave wlan1): Opening slave failed [ 97.141496][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.164432][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 97.204440][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.212272][ T4692] loop3: detected capacity change from 0 to 256 [ 97.251896][ T7] usb 1-1: config 0 descriptor?? [ 97.696054][ T4712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 97.783396][ T4714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 97.802502][ T7] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 97.987454][ T4712] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 98.090624][ T7] usb 1-1: USB disconnect, device number 3 [ 98.137328][ T4714] netlink: 40 bytes leftover after parsing attributes in process `syz.4.118'. [ 98.276616][ T13] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 98.300869][ T4726] fido_id[4726]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 98.345890][ T4722] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 98.379002][ T13] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 98.392998][ T4722] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 98.980572][ T4756] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 103.222949][ T4826] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 103.895410][ T4826] team0: Port device dummy0 added [ 103.909080][ T4828] netlink: 'syz.3.141': attribute type 10 has an invalid length. [ 104.053519][ T4828] team0: Port device dummy0 removed [ 104.064260][ T4828] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 104.297658][ T4844] netlink: 'syz.2.147': attribute type 10 has an invalid length. [ 104.348928][ T4844] bond0: (slave wlan1): Opening slave failed üÿüÿÿÿ  ¨/dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)èÜF@sÿÿÿ [ 105.652782][ T4877] netlink: 20 bytes leftover after parsing attributes in process `syz.3.155'. [ 105.685302][ T4883] device syzkaller0 entered promiscuous mode [ 105.794539][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 105.894337][ T4890] process 'syz.1.161' launched './file0' with NULL argv: empty string added [ 106.085878][ T4892] pit: kvm: requested 48609 ns i8254 timer period limited to 200000 ns [ 106.106824][ T4892] pit: kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 106.124675][ T4892] pit: kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 106.141323][ T4892] pit: kvm: requested 144152 ns i8254 timer period limited to 200000 ns [ 106.157904][ T4892] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 106.168447][ T4892] pit: kvm: requested 51961 ns i8254 timer period limited to 200000 ns [ 106.383598][ T4880] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.391147][ T4880] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.661272][ T26] audit: type=1800 audit(1787857906.353:5): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.161" name="/" dev="fuse" ino=4 res=0 errno=0 [ 106.816089][ T4906] loop1: detected capacity change from 0 to 1024 [ 107.075118][ T4880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.114605][ T4880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.351590][ T4263] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 107.604688][ T4880] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.613776][ T4880] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.623387][ T4880] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.632400][ T4880] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.731413][ T4263] usb 2-1: config 2 has an invalid interface number: 228 but max is 0 [ 107.739642][ T4263] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 107.753353][ T4263] usb 2-1: config 2 has no interface number 0 [ 107.759498][ T4263] usb 2-1: config 2 interface 228 altsetting 177 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.773088][ T4263] usb 2-1: config 2 interface 228 has no altsetting 0 [ 107.825092][ T4880] syz.4.158 (4880) used greatest stack depth: 19920 bytes left [ 107.945918][ T4263] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 107.957268][ T4263] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.986209][ T4263] usb 2-1: Product: syz [ 107.990459][ T4263] usb 2-1: Manufacturer: syz [ 107.996115][ T4263] usb 2-1: SerialNumber: syz [ 108.161516][ T4225] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.383278][ T4263] ims_pcu: probe of 2-1:2.228 failed with error -22 [ 108.412168][ T4263] usb 2-1: USB disconnect, device number 3 [ 108.421503][ T4225] usb 3-1: Using ep0 maxpacket: 32 [ 108.561898][ T4225] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 108.589414][ T4929] loop3: detected capacity change from 0 to 32768 [ 108.744134][ T4225] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 108.785234][ T4225] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 108.803051][ T4225] usb 3-1: Product: syz [ 108.809168][ T4225] usb 3-1: Manufacturer: syz [ 108.818779][ T4225] usb 3-1: SerialNumber: syz [ 108.836571][ T4225] usb 3-1: config 0 descriptor?? [ 108.864350][ T4913] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 108.912279][ T4225] hub 3-1:0.0: bad descriptor, ignoring hub [ 108.918285][ T4225] hub: probe of 3-1:0.0 failed with error -5 [ 108.947262][ T4936] bond0: (slave veth0): Releasing backup interface [ 109.134356][ T4939] loop1: detected capacity change from 0 to 16 [ 109.180187][ T4939] erofs: (device loop1): mounted with root inode @ nid 36. [ 109.209151][ T4939] handle_bad_sector: 1509 callbacks suppressed [ 109.209172][ T4939] attempt to access beyond end of device [ 109.209172][ T4939] loop1: rw=524288, want=32, limit=16 [ 109.231018][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 109.247373][ T26] audit: type=1800 audit(1787857908.943:6): pid=4939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.176" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 109.271749][ T4225] usb 3-1: USB disconnect, device number 4 [ 109.330849][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 109.382064][ T4939] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 109.391921][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[4096] [ 109.411753][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 109.434152][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 109.456629][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 109.477801][ T4939] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -23 in[46, 4050] out[8192] [ 110.000529][ T4953] loop1: detected capacity change from 0 to 2048 [ 110.039842][ T4951] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input6 [ 110.260682][ T4956] tipc: Started in network mode [ 110.277602][ T4956] tipc: Node identity 2000004, cluster identity 4711 [ 110.302129][ T4956] tipc: Node number set to 33554436 [ 110.404592][ T4953] loop1: unable to read partition table [ 110.448502][ T4953] loop1: partition table beyond EOD, truncated [ 110.467686][ T4953] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 110.746552][ T3557] loop1: unable to read partition table [ 110.769923][ T3557] loop1: partition table beyond EOD, truncated [ 111.503815][ T4970] binder_alloc: 4969: binder_alloc_buf, no vma [ 111.805080][ T4975] device syzkaller0 entered promiscuous mode [ 111.812697][ T4972] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 111.854430][ T4972] pit: kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 111.879022][ T4972] pit: kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 111.904513][ T4972] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 111.958260][ T4972] pit: kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 112.031857][ T4972] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 112.044761][ T4972] pit: kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 112.082724][ T4972] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 112.112303][ T4972] pit: kvm: requested 180190 ns i8254 timer period limited to 200000 ns [ 112.161745][ T4972] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 113.191612][ T4984] typec_fusb302 0-0022: I2C/SMBus block functionality not supported! [ 113.213193][ T4984] i2c i2c-0: new_device: Instantiated device typec_fusb302 at 0x22 [ 113.240340][ T4984] Invalid option length (1047276) for dns_resolver key [ 113.381355][ T4227] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.631439][ T4227] usb 4-1: Using ep0 maxpacket: 32 [ 113.911697][ T4227] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 113.941551][ T4227] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.949751][ T4227] usb 4-1: Product: syz [ 113.971448][ T4227] usb 4-1: Manufacturer: syz [ 113.981871][ T4227] usb 4-1: SerialNumber: syz [ 114.005819][ T4227] usb 4-1: config 0 descriptor?? [ 114.051911][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.073713][ T4227] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 114.103098][ T4227] dvb-usb: bulk message failed: -22 (2/0) [ 114.138428][ T4227] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.181766][ T4227] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 114.217005][ T4227] usb 4-1: media controller created [ 114.260800][ T4227] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.411459][ T13] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 114.551666][ T5017] dvb-usb: bulk message failed: -22 (3/0) [ 115.254233][ T5019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.197'. [ 116.775091][ T13] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 117.403621][ T13] usb 2-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 117.413325][ T4227] usb 4-1: selecting invalid altsetting 7 [ 117.419099][ T4227] cxusb: set interface failed [ 117.424110][ T4227] dvb-usb: bulk message failed: -22 (1/0) [ 117.430469][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.470759][ T4227] DVB: Unable to find symbol lgdt330x_attach() [ 117.477419][ T13] usb 2-1: can't set config #1, error -71 [ 117.492203][ T4227] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 117.500506][ T13] usb 2-1: USB disconnect, device number 4 [ 117.742213][ T4227] rc_core: IR keymap rc-dvico-portable not found [ 117.748779][ T4227] Registered IR keymap rc-empty [ 117.799644][ T4227] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 117.856645][ T4227] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input7 [ 117.930041][ T4227] dvb-usb: schedule remote query interval to 100 msecs. [ 117.963888][ T4227] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 117.973997][ T5054] loop1: detected capacity change from 0 to 8 [ 118.024749][ T4227] usb 4-1: USB disconnect, device number 3 [ 118.289054][ T5064] device syzkaller0 entered promiscuous mode [ 118.297674][ T4227] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 118.478954][ T5067] netlink: 'syz.4.207': attribute type 10 has an invalid length. [ 118.517421][ T5067] bond0: (slave wlan1): Opening slave failed [ 118.849426][ T5074] ODEBUG: Out of memory. ODEBUG disabled [ 119.941199][ C0] sched: RT throttling activated [ 122.668893][ T5135] device syzkaller0 entered promiscuous mode [ 122.707421][ T5135] tipc: Started in network mode [ 122.915405][ T5135] tipc: Node identity bed094721711, cluster identity 4711 [ 123.116170][ T5135] tipc: Enabled bearer , priority 0 [ 123.729895][ T5133] tipc: Resetting bearer [ 123.781615][ T5133] tipc: Disabling bearer [ 123.895360][ T5157] loop1: detected capacity change from 0 to 256 [ 124.209121][ T5157] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 124.530551][ T5157] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 124.686024][ T5157] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 126.200068][ T5196] netlink: 'syz.3.238': attribute type 10 has an invalid length. [ 126.282001][ T5196] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.320783][ T5196] bond0: (slave team0): Enslaving as an active interface with an up link [ 126.565254][ T5201] bridge0: port 3(syz_tun) entered blocking state [ 126.590119][ T5201] bridge0: port 3(syz_tun) entered disabled state [ 126.634037][ T5201] device syz_tun entered promiscuous mode [ 126.650638][ T5201] bridge0: port 3(syz_tun) entered blocking state [ 126.657510][ T5201] bridge0: port 3(syz_tun) entered forwarding state [ 129.101237][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.121210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.131214][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.141212][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.151216][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.161209][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.171213][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.181219][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.191210][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.201218][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 129.954079][ T5246] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 129.981471][ T5246] CIFS: Attempting to mount \\127.0.0.1\share [ 129.991635][ T5246] CIFS: VFS: Error connecting to socket. Aborting operation. [ 129.999301][ T5246] CIFS: VFS: cifs_mount failed w/return code = -111 [ 131.230069][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 131.268502][ T5266] loop1: detected capacity change from 0 to 128 [ 131.555432][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.651340][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 131.682746][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.861060][ T5239] device bridge_slave_0 entered promiscuous mode [ 132.048434][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.169991][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.292806][ T5239] device bridge_slave_1 entered promiscuous mode [ 132.309910][ T5283] loop2: detected capacity change from 0 to 512 [ 132.344000][ T4186] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 132.424476][ T5283] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.448209][ T4186] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 132.469241][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.538295][ T5283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: comm syz.2.264: inode #88: comm syz.2.264: iget: illegal inode # [ 132.575661][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.605484][ T5239] team0: Port device team_slave_0 added [ 132.607646][ T5283] EXT4-fs (loop2): Remounting filesystem read-only [ 132.619943][ T5239] team0: Port device team_slave_1 added [ 132.650829][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.658702][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.685834][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.698608][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.706358][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.720166][ C0] vkms_vblank_simulate: vblank timer overrun [ 132.738515][ T5283] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.264: error while reading EA inode 88 err=-117 [ 132.751249][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.763397][ T5283] EXT4-fs (loop2): Remounting filesystem read-only [ 132.770247][ T5283] EXT4-fs (loop2): 1 orphan inode deleted [ 132.780346][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.786696][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.801553][ T5283] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,noinit_itable,debug_want_extra_isize=0x000000000000002a,jqfmt=vfsold,nodelalloc,bsdgroups,. Quota mode: none. [ 132.820123][ C0] vkms_vblank_simulate: vblank timer overrun [ 133.033298][ T5239] device hsr_slave_0 entered promiscuous mode [ 133.054376][ T5239] device hsr_slave_1 entered promiscuous mode [ 133.085164][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 133.101487][ T5239] Cannot create hsr debugfs directory [ 133.968273][ T4174] Bluetooth: hci2: command 0x041b tx timeout [ 134.937270][ T5316] device bridge_slave_0 left promiscuous mode [ 134.990427][ T5316] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.082866][ T5316] device bridge_slave_1 left promiscuous mode [ 135.089151][ T5316] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.183169][ T5316] bond0: (slave bond_slave_0): Releasing backup interface [ 135.212895][ T5316] bond0: (slave bond_slave_1): Releasing backup interface [ 135.376639][ T5316] team0: Port device team_slave_0 removed [ 135.558462][ T5316] team0: Port device team_slave_1 removed [ 135.699029][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.869750][ T5316] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.036861][ T5316] bond1: (slave gretap1): Releasing active interface [ 136.051888][ T4227] Bluetooth: hci2: command 0x040f tx timeout [ 136.461923][ T5239] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.563430][ T5239] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.633491][ T5239] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.703925][ T5239] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 136.868650][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.466895][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.592001][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.653923][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.835659][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.905321][ T5352] raw_sendmsg: syz.2.283 forgot to set AF_INET. Fix it! [ 137.917884][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 138.049936][ T4224] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.057155][ T4224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.131804][ T4174] Bluetooth: hci2: command 0x0419 tx timeout [ 138.343179][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 138.475797][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 138.628628][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 138.637301][ T4224] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.644425][ T4224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.681370][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.724664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 138.814674][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 138.855513][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 138.922651][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 138.964431][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 138.992238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 139.021942][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 139.044993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 139.075138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.095699][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 139.110397][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 139.345669][ T4248] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.487007][ T4248] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.666057][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.721530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.734432][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.770083][ T4248] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.881441][ T4263] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 140.005696][ T4248] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.050282][ T5371] chnl_net:caif_netlink_parms(): no params data found [ 140.151282][ T4263] usb 3-1: Using ep0 maxpacket: 32 [ 140.281605][ T4263] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 140.303901][ T4248] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.312954][ T4263] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.358254][ T4263] usb 3-1: config 0 descriptor?? [ 140.364453][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.381540][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.392051][ T5371] device bridge_slave_0 entered promiscuous mode [ 140.474865][ T4263] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 140.513265][ T4248] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.551746][ T4248] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.633756][ T4248] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.648585][ T4248] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.671806][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 140.693505][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 141.383268][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 141.409955][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.421788][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.454884][ T5371] device bridge_slave_1 entered promiscuous mode [ 141.481543][ T5420] ceph: No mds server is up or the cluster is laggy [ 141.532265][ T5239] device veth0_vlan entered promiscuous mode [ 141.584023][ T5239] device veth1_vlan entered promiscuous mode [ 141.669691][ T4248] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.721564][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 141.752250][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 141.785933][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 141.820391][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 141.866619][ T4248] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.913010][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 141.927590][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 141.964904][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 141.984835][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 142.002363][ T5239] device veth0_macvtap entered promiscuous mode [ 142.018444][ T5239] device veth1_macvtap entered promiscuous mode [ 142.053160][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.074543][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.145550][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.162111][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.222335][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.455369][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.589070][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.128881][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.167819][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.213376][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.264689][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.305515][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.351391][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.401300][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.423457][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.433519][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.529792][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.561365][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.161397][ T4263] gspca_vc032x: reg_r err -71 [ 144.166166][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.189077][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.201202][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.221293][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.226663][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.250378][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.255553][ T4174] Bluetooth: hci0: command 0x041b tx timeout [ 144.264445][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.281480][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.288171][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.292213][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.311480][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.327161][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.337293][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.347424][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.357241][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.371209][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.381529][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.391457][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.396788][ T4263] gspca_vc032x: I2c Bus Busy Wait 00 [ 144.412511][ T4263] gspca_vc032x: Unknown sensor... [ 144.422656][ T4263] vc032x: probe of 3-1:0.0 failed with error -22 [ 144.449360][ T4263] usb 3-1: USB disconnect, device number 5 [ 144.503750][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.521715][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.530874][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.549296][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.561501][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 144.570742][ T4295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 144.662978][ T5239] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.672493][ T5239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.684124][ T5239] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.693842][ T5239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.709965][ T4248] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.732565][ T5457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 144.839404][ T5371] team0: Port device team_slave_0 added [ 144.864919][ T5371] team0: Port device team_slave_1 added [ 144.875960][ T5470] jffs2: notice: (5470) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 144.902554][ T4174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 144.981984][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.989069][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.107337][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.146701][ T4248] netdevsim netdevsim0 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.156212][ T4174] usb 4-1: Using ep0 maxpacket: 8 [ 145.187314][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.201748][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.238158][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.258431][ T4248] netdevsim netdevsim0 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.282915][ T4174] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 145.294257][ T4174] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.306150][ T4174] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.316522][ T4174] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.326965][ T4174] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.341418][ T4174] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.350635][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.386294][ T5485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.306'. [ 145.424116][ T4248] netdevsim netdevsim0 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.469032][ T4248] netdevsim netdevsim0 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.484456][ T5371] device hsr_slave_0 entered promiscuous mode [ 145.512242][ T5371] device hsr_slave_1 entered promiscuous mode [ 145.534657][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.551493][ T5371] Cannot create hsr debugfs directory [ 145.576903][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.615719][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.623604][ T4174] usb 4-1: usb_control_msg returned -32 [ 145.629240][ T4174] usbtmc 4-1:16.0: can't read capabilities [ 145.733353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.752742][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.773832][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.798578][ T4248] tipc: Left network mode [ 145.823093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 146.051703][ T5507] usbtmc 4-1:16.0: stb usb_control_msg returned -32 [ 146.089314][ T1108] usb 4-1: USB disconnect, device number 4 [ 146.232410][ T5371] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.269064][ T5371] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.296038][ T4174] Bluetooth: hci0: command 0x040f tx timeout [ 146.351436][ T5371] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.375510][ T5371] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 148.475085][ T5534] loop3: detected capacity change from 0 to 40427 [ 148.529153][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 149.244257][ T5534] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 149.250759][ T5534] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 149.263504][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.272460][ T5534] F2FS-fs (loop3): invalid crc value [ 149.284843][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 149.314938][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 149.335290][ T5371] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.349482][ T5534] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 149.446969][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 149.457332][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 149.502146][ T4530] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.509361][ T4530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.532527][ T5534] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 149.539698][ T5534] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 149.795006][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 150.428081][ T5548] attempt to access beyond end of device [ 150.428081][ T5548] loop3: rw=10241, want=53256, limit=40427 [ 150.882638][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 150.973203][ T4530] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.980335][ T4530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.013399][ T4196] attempt to access beyond end of device [ 151.013399][ T4196] loop3: rw=2049, want=45104, limit=40427 [ 151.195991][ T5554] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 151.251935][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 151.262146][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 151.293455][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 151.323681][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 151.343898][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 151.362082][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 151.393764][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 151.448710][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 151.530575][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 151.636653][ T5564] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.524320][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.349223][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.542288][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.554618][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.520239][ T5588] loop2: detected capacity change from 0 to 131072 [ 155.655222][ T5588] F2FS-fs (loop2): invalid crc value [ 155.670534][ T5588] F2FS-fs (loop2): Found nat_bits in checkpoint [ 155.718125][ T5588] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2 [ 155.778762][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.793279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.840487][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.863278][ T5588] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 155.902796][ T26] audit: type=1800 audit(1787857955.603:7): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.312" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 157.092978][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 158.117088][ T4248] device hsr_slave_0 left promiscuous mode [ 158.273641][ T4248] device hsr_slave_1 left promiscuous mode [ 158.313973][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.336021][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.356642][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.373075][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.389317][ T4248] device bridge_slave_1 left promiscuous mode [ 158.646553][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.954256][ T4248] device bridge_slave_0 left promiscuous mode [ 159.066507][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.183329][ T4248] device hsr_slave_0 left promiscuous mode [ 159.210251][ T4248] device hsr_slave_1 left promiscuous mode [ 159.225574][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.260525][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.292324][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.299812][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.343315][ T4248] device bridge_slave_1 left promiscuous mode [ 159.350131][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.365161][ T4248] device bridge_slave_0 left promiscuous mode [ 159.392649][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.453212][ T4248] device veth1_macvtap left promiscuous mode [ 159.467671][ T4248] device veth0_macvtap left promiscuous mode [ 159.481708][ T4248] device veth1_vlan left promiscuous mode [ 159.492412][ T4248] device veth0_vlan left promiscuous mode [ 159.518832][ T4248] device veth1_macvtap left promiscuous mode [ 159.525203][ T4248] device veth0_macvtap left promiscuous mode [ 159.531947][ T4248] device veth1_vlan left promiscuous mode [ 159.537865][ T4248] device veth0_vlan left promiscuous mode [ 160.822202][ T5660] loop2: detected capacity change from 0 to 512 [ 160.999195][ T5660] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 161.374367][ T5660] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2812: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 161.512742][ T5660] EXT4-fs (loop2): 1 truncate cleaned up [ 161.569581][ T5660] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 161.715514][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 161.739012][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 161.754861][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.775606][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.890746][ T4248] bond0 (unregistering): Released all slaves [ 162.147370][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 162.165202][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 162.183718][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.200580][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.296202][ T4248] bond0 (unregistering): Released all slaves [ 162.460130][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 162.472043][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.532762][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.575267][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.603238][ T5371] device veth0_vlan entered promiscuous mode [ 163.623193][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.650014][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.696184][ T5371] device veth1_vlan entered promiscuous mode [ 163.762615][ T5687] device syzkaller0 entered promiscuous mode [ 163.856101][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.875261][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.023786][ T5371] device veth0_macvtap entered promiscuous mode [ 164.062618][ T5371] device veth1_macvtap entered promiscuous mode [ 164.118664][ T5698] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 164.145420][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.704294][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.713001][ T5704] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.046161][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.056327][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.069084][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.079467][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.100661][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.113184][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.135680][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 165.148399][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 165.166716][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.184698][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.202711][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.223536][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.241197][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.262259][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.340863][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.362508][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.383011][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.403594][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.425282][ T4530] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.453705][ T5371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.567491][ T5371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.691213][ T5371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.800512][ T5371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.698422][ T4530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.731241][ T4530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.806186][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.879562][ T4369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.892222][ T4369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.924685][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.982510][ T5745] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 167.004849][ T5745] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 168.427437][ T4174] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 168.525112][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 169.268079][ T5791] device bridge2 entered promiscuous mode [ 169.301313][ T4174] usb 7-1: unable to get BOS descriptor or descriptor too short [ 169.462088][ T4174] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 169.517946][ T4174] usb 7-1: can't read configurations, error -71 [ 169.722588][ T5796] tipc: Enabled bearer , priority 0 [ 169.993667][ T5801] loop0: detected capacity change from 0 to 3904 [ 170.119423][ T5801] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 170.141446][ T5801] ldm_validate_privheads(): Disk read failed. [ 170.182063][ T5801] ldm_parse_tocblock(): TOCBLOCK's second bitmap is 'log', should be ''. [ 170.299993][ T5801] ldm_parse_tocblock(): Cannot find TOCBLOCK, database may be corrupt. [ 170.349615][ T5801] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 2. [ 170.421701][ T5801] ldm_validate_tocblocks(): Disk read failed for TOCBLOCK 3. [ 170.651482][ T5801] ldm_validate_tocblocks(): Failed to find a valid TOCBLOCK. [ 170.724181][ T5801] loop0: [ 170.923889][ T5801] loop0: partition table partially beyond EOD, truncated [ 171.066498][ T5816] loop3: detected capacity change from 0 to 1024 [ 171.214688][ T5816] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.483455][ T5816] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,init_itable=0x000000000000000e,dioread_nolock,noblock_validity,debug_want_extra_isize=0x0000000000000070,sb=0x0000000000000000,stripe=0x000000000000bb4b,data_err=abort,max_batch_time=0x00000000000003fe,user_xattr,,errors=continue. Quota mode: none. [ 171.591548][ T5830] overlayfs: missing 'lowerdir' [ 173.225235][ T26] audit: type=1800 audit(1787857972.923:8): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.383" name="addr_trtype" dev="configfs" ino=39491 res=0 errno=0 [ 173.380652][ T26] audit: type=1800 audit(1787857972.983:9): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.383" name="addr_traddr" dev="configfs" ino=39547 res=0 errno=0 [ 173.401767][ T5848] nvmet: Invalid value '9 [ 173.401767][ T5848] ½' for trtype [ 173.551344][ T26] audit: type=1800 audit(1787857972.993:10): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.383" name="addr_trsvcid" dev="configfs" ino=39548 res=0 errno=0 [ 173.572504][ T26] audit: type=1800 audit(1787857973.003:11): pid=5842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.383" name="addr_adrfam" dev="configfs" ino=39549 res=0 errno=0 [ 174.457958][ T5842] nvmet: transport type 0 not supported [ 174.979838][ T4196] bridge0: port 3(syz_tun) entered disabled state [ 175.256008][ T4196] device syz_tun left promiscuous mode [ 175.317475][ T4196] bridge0: port 3(syz_tun) entered disabled state [ 177.841677][ T5912] netlink: 28 bytes leftover after parsing attributes in process `syz.6.399'. [ 178.125292][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 178.538488][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.650763][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.679943][ T5896] device bridge_slave_0 entered promiscuous mode [ 178.699305][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.719639][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.732897][ T5896] device bridge_slave_1 entered promiscuous mode [ 178.819197][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.868727][ T4248] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.929288][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.960448][ T5926] loop6: detected capacity change from 0 to 32768 [ 178.986780][ T5896] team0: Port device team_slave_0 added [ 179.001456][ T1108] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 179.023287][ T4248] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.028090][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 179.124863][ T5896] team0: Port device team_slave_1 added [ 179.188776][ T4248] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.246352][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.266227][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.331396][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.531474][ T1108] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 179.545026][ T1108] usb 6-1: config 0 has no interface number 0 [ 179.555474][ T4248] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.566061][ T1108] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.589538][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.955221][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.072650][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.073286][ T1108] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 181.143163][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.169859][ T1108] usb 6-1: Product: syz [ 181.184593][ T1108] usb 6-1: Manufacturer: syz [ 181.214934][ T1108] usb 6-1: SerialNumber: syz [ 181.246773][ T1108] usb 6-1: config 0 descriptor?? [ 181.265806][ T4300] Bluetooth: hci4: command 0x041b tx timeout [ 181.315527][ T1108] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 181.445275][ T4248] netdevsim netdevsim3 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.478094][ T5896] device hsr_slave_0 entered promiscuous mode [ 181.486428][ T5896] device hsr_slave_1 entered promiscuous mode [ 181.578321][ T4248] netdevsim netdevsim3 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.644487][ T5989] netlink: 20 bytes leftover after parsing attributes in process `syz.5.405'. [ 181.679194][ T4248] netdevsim netdevsim3 eth11: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.823006][ T4248] netdevsim netdevsim3 eth12: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.292477][ T2302] usb 6-1: USB disconnect, device number 2 [ 182.311233][ C0] usb 6-1: yurex_control_callback - control failed: -71 [ 182.386097][ T2302] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 182.582643][ T4248] tipc: Disabling bearer [ 182.590140][ T4248] tipc: Left network mode [ 182.617064][ T6002] netlink: 52 bytes leftover after parsing attributes in process `syz.2.416'. [ 182.700819][ T6002] netlink: 76 bytes leftover after parsing attributes in process `syz.2.416'. [ 182.738692][ T6002] netlink: 52 bytes leftover after parsing attributes in process `syz.2.416'. [ 182.913777][ T6006] xt_TCPMSS: Only works on TCP SYN packets [ 183.331444][ T4300] Bluetooth: hci4: command 0x040f tx timeout [ 183.622516][ T5896] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 183.664205][ T5896] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 183.707789][ T5896] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 184.220616][ T5896] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 184.588562][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.645863][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 184.673419][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 184.705113][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.731335][ T4263] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 184.835027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 184.845401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 184.873592][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.880891][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.908953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 184.921819][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 184.932651][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.939762][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.990234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 185.032078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 185.050167][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 185.105942][ T4263] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 185.118623][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 185.137555][ T4263] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.164945][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 185.212602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 185.248954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 185.257464][ T4263] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 185.287377][ T4263] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 185.318250][ T5896] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 185.358198][ T4263] usb 7-1: Manufacturer: syz [ 185.400398][ T4263] usb 7-1: config 0 descriptor?? [ 185.409741][ T5896] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 185.544026][ T4174] Bluetooth: hci4: command 0x0419 tx timeout [ 185.603518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 185.621394][ T4263] rc_core: IR keymap rc-hauppauge not found [ 185.627411][ T4263] Registered IR keymap rc-empty [ 185.650007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 185.670832][ T4263] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 185.708767][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 185.732317][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 185.741483][ T4263] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 185.773543][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 185.814481][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 185.865700][ T23] usb 7-1: USB disconnect, device number 4 [ 185.970880][ T4248] device hsr_slave_0 left promiscuous mode [ 185.992749][ T4248] device hsr_slave_1 left promiscuous mode [ 186.026576][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.056286][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.089387][ T4248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.121565][ T4248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.185469][ T4248] device bridge_slave_1 left promiscuous mode [ 186.196730][ T4248] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.225840][ T4248] device bridge_slave_0 left promiscuous mode [ 186.245585][ T4248] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.304433][ T4248] device veth1_macvtap left promiscuous mode [ 186.326891][ T4248] device veth0_macvtap left promiscuous mode [ 186.345334][ T4248] device veth1_vlan left promiscuous mode [ 186.358163][ T4248] device veth0_vlan left promiscuous mode [ 186.787288][ T4248] team0 (unregistering): Port device team_slave_1 removed [ 186.817734][ T4248] team0 (unregistering): Port device team_slave_0 removed [ 186.841013][ T4248] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.885636][ T4248] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.958645][ T4248] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 186.985242][ T4248] bond0 (unregistering): (slave team0): Releasing backup interface [ 187.101397][ T4229] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 187.168712][ T4248] bond0 (unregistering): Released all slaves [ 187.545542][ T6055] device syzkaller0 entered promiscuous mode [ 188.231304][ T4229] usb 7-1: Using ep0 maxpacket: 32 [ 188.316249][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.353694][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 188.368146][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 188.386253][ T4229] usb 7-1: config 139 has an invalid interface number: 49 but max is 0 [ 189.336679][ T4229] usb 7-1: config 139 has no interface number 0 [ 189.343425][ T4229] usb 7-1: config 139 interface 49 has no altsetting 0 [ 190.383942][ T4229] usb 7-1: string descriptor 0 read error: -71 [ 190.390260][ T4229] usb 7-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 190.411282][ T4229] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.501413][ T4229] usb 7-1: can't set config #139, error -71 [ 190.515668][ T4229] usb 7-1: USB disconnect, device number 5 [ 190.640142][ T6113] nvme_fabrics: missing parameter 'transport=%s' [ 190.653110][ T6125] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 190.661866][ T6113] nvme_fabrics: missing parameter 'nqn=%s' [ 190.937208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.955802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 191.255020][ T4174] Bluetooth: hci1: command 0x0406 tx timeout [ 191.281290][ T4174] Bluetooth: hci3: command 0x0406 tx timeout [ 191.883376][ T6137] loop5: detected capacity change from 0 to 131072 [ 191.921930][ T6137] XFS: ikeep mount option is deprecated. [ 191.975158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.018282][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.076558][ T5896] device veth0_vlan entered promiscuous mode [ 192.112156][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.194313][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.235744][ T6137] XFS (loop5): Mounting V5 Filesystem [ 192.258417][ T5896] device veth1_vlan entered promiscuous mode [ 192.342600][ T6137] XFS (loop5): Starting recovery (logdev: internal) [ 192.427789][ T6137] XFS (loop5): Ending recovery (logdev: internal) [ 192.439710][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.466233][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.526580][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.557329][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.589473][ T5896] device veth0_macvtap entered promiscuous mode [ 192.663133][ T5896] device veth1_macvtap entered promiscuous mode [ 192.673289][ T6175] overlayfs: unrecognized mount option "fscontext=system_u" or missing value [ 192.700537][ T6178] netlink: 276 bytes leftover after parsing attributes in process `syz.6.448'. [ 192.745050][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.767177][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.788624][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.818363][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.848313][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.893749][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.926121][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.957322][ T6178] tipc: Enabling of bearer rejected, failed to enable media [ 192.981430][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.993972][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 193.035105][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 193.098923][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 193.133482][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.172266][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.212768][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.263929][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.331202][ T5896] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 193.353039][ T5896] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.396444][ T5239] XFS (loop5): Unmounting Filesystem [ 193.411432][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.479798][ T5896] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.598841][ T5896] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.624698][ T5896] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.654319][ T5896] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.925796][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 194.027336][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 194.567406][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.573798][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.337057][ T4369] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.437213][ T4369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.722084][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 197.359010][ T4224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.391201][ T4224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.181119][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.233871][ T6244] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.699217][ T6244] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.708708][ T6244] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.718393][ T6244] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.727572][ T6244] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.815511][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 201.021453][ T6277] netlink: 14 bytes leftover after parsing attributes in process `syz.6.464'. [ 201.200921][ T6277] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.218299][ T6286] netlink: 156 bytes leftover after parsing attributes in process `syz.4.467'. [ 201.317912][ T6287] loop2: detected capacity change from 0 to 512 [ 201.448332][ T6277] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.421051][ T6277] bond0 (unregistering): Released all slaves [ 203.400177][ T6302] device syzkaller0 entered promiscuous mode [ 203.761752][ T6315] tipc: Enabled bearer , priority 0 [ 204.984730][ T6334] block device autoloading is deprecated and will be removed. [ 205.766855][ T6329] md: invalid raid superblock magic on ram0 [ 205.819098][ T6329] md: ram0 does not have a valid v0.0 superblock, not importing! [ 205.925766][ T6329] md: md_import_device returned -22 [ 208.573058][ T4229] Bluetooth: hci0: command 0x0401 tx timeout [ 208.646610][ T6361] bridge0: port 1(syz_tun) entered blocking state [ 208.658963][ T6361] bridge0: port 1(syz_tun) entered disabled state [ 208.753121][ T6361] device syz_tun entered promiscuous mode [ 209.041525][ T6379] syzkaller0: create flow: hash 1179373458 index 2 [ 209.091942][ T4229] syzkaller0: tun_net_xmit 76 [ 209.098546][ T4229] syzkaller0: tun_net_xmit 48 [ 209.149454][ T7] syzkaller0: tun_net_xmit 76 [ 209.332404][ T4229] syzkaller0: tun_net_xmit 76 [ 209.625772][ T7] syzkaller0: tun_net_xmit 76 [ 209.888979][ T6379] syzkaller0: delete flow: hash 1179373458 index 2 [ 209.898603][ T4229] syzkaller0: tun_net_xmit 76 [ 210.166709][ T6392] tipc: Enabling of bearer rejected, already enabled [ 210.231033][ T6396] loop7: detected capacity change from 0 to 1024 [ 210.281925][ T6396] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 210.392042][ T6396] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,barrier,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,barrier=0x0000000000000005,user_xattr,noinit_itable,,errors=continue. Quota mode: none. [ 210.492874][ T26] audit: type=1804 audit(1787858010.193:12): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.492" name="/newroot/4/file1/bus" dev="loop7" ino=18 res=1 errno=0 [ 211.308216][ T6406] MPTCP: addr_signal error, add_addr=1, echo=0 [ 211.344736][ T6406] MPTCP: addr_signal error, rm_addr=1 [ 211.592381][ T6421] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.607345][ T6421] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.616154][ T6421] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.624949][ T6421] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.768403][ T6421] team0: Port device vxlan0 added [ 214.630363][ T6463] MTDSB: Device #1 doesn't appear to exist [ 214.630363][ T6463] [ 215.075553][ T6441] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.083027][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.193479][ T6467] loop2: detected capacity change from 0 to 32768 [ 216.033297][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.087446][ T6441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.556587][ T6441] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.565850][ T6441] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.576261][ T6441] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.585528][ T6441] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.738265][ T6441] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.747983][ T6441] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.756953][ T6441] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.766159][ T6441] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 221.689816][ T6556] CIFS: Attempting to mount \\127.0.0.1\share [ 221.697746][ T6556] CIFS: VFS: Error connecting to socket. Aborting operation. [ 221.705285][ T6556] CIFS: VFS: cifs_mount failed w/return code = -111 [ 221.716619][ T4229] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 222.441472][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 222.581521][ T4229] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 222.620389][ T4229] usb 3-1: config 0 has no interface number 0 [ 222.648863][ T4229] usb 3-1: config 0 interface 184 has no altsetting 0 [ 223.701364][ T4229] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 223.717828][ T6585] loop7: detected capacity change from 0 to 512 [ 223.725011][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.807990][ T4229] usb 3-1: Product: syz [ 223.840088][ T4229] usb 3-1: Manufacturer: syz [ 223.913279][ T4229] usb 3-1: config 0 descriptor?? [ 223.966368][ T6585] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 224.023220][ T6585] EXT4-fs (loop7): orphan cleanup on readonly fs [ 224.048480][ T6602] loop6: detected capacity change from 0 to 256 [ 224.055730][ T6585] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.535: iget: bogus i_mode (5) [ 224.082340][ T4229] usb 3-1: can't set config #0, error -71 [ 224.166217][ T6602] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 224.178303][ T4229] usb 3-1: USB disconnect, device number 6 [ 224.220757][ T6585] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.535: couldn't read orphan inode 15 (err -117) [ 224.260251][ T6602] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 224.274064][ T6585] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 224.325609][ T6602] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 225.360826][ T6632] tipc: Started in network mode [ 225.381290][ T6632] tipc: Node identity 080211000001, cluster identity 4711 [ 225.415131][ T6632] tipc: Enabled bearer , priority 0 [ 225.451735][ T6637] device syzkaller0 entered promiscuous mode [ 225.476561][ T6632] tipc: Resetting bearer [ 225.584269][ T6644] loop5: detected capacity change from 0 to 1024 [ 226.183084][ T6654] hfsplus: extend alloc file! (16384,256,150995124) [ 226.873774][ T6656] loop6: detected capacity change from 0 to 2048 [ 226.883725][ T7] tipc: Node number set to 134418688 [ 227.044067][ T6656] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 227.129309][ T6656] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 227.233111][ T6666] loop5: detected capacity change from 0 to 2048 [ 227.447414][ T6666] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none. [ 227.479850][ T6666] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 227.983304][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 227.990950][ T6684] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.000508][ T6684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.008778][ T6684] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.845330][ T6684] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 228.922572][ T6684] syz.5.554 (6684) used greatest stack depth: 19376 bytes left [ 229.521585][ T1108] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 230.291074][ T6698] TC_ACT_REPEAT abuse ? [ 230.501273][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 231.291440][ T1108] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 231.308205][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.329576][ T1108] usb 6-1: config 0 descriptor?? [ 231.382891][ T1108] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 233.231372][ T1108] gspca_sonixj: reg_r err -110 [ 233.781001][ T1108] sonixj: probe of 6-1:0.0 failed with error -110 [ 233.789113][ T6723] netlink: 44 bytes leftover after parsing attributes in process `syz.7.569'. [ 233.833974][ T6729] qfq: no options [ 234.211377][ T2302] usb 6-1: USB disconnect, device number 3 [ 234.602917][ T6737] netlink: 'syz.6.574': attribute type 10 has an invalid length. [ 234.691742][ T6740] sd 0:0:1:0: PR command failed: 2 [ 234.697375][ T6740] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 234.704426][ T6740] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 234.912231][ T6737] team0: Device veth1_vlan failed to register rx_handler [ 236.802205][ T6765] loop5: detected capacity change from 0 to 128 [ 237.171932][ T5239] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 237.279499][ T5239] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 240.362366][ T4224] netdevsim netdevsim5 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.637055][ T4224] netdevsim netdevsim5 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.756601][ T4224] netdevsim netdevsim5 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.769991][ T4224] netdevsim netdevsim5 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.912034][ T4224] bond1: (slave ip6gretap1): Releasing backup interface [ 241.143977][ T6807] loop2: detected capacity change from 0 to 512 [ 241.265023][ T6807] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 241.408097][ T6807] EXT4-fs (loop2): 1 truncate cleaned up [ 241.440192][ T6807] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 243.397291][ T4174] Bluetooth: hci2: command 0x0409 tx timeout [ 243.420401][ T6803] chnl_net:caif_netlink_parms(): no params data found [ 243.580862][ T6840] kobject_add_internal failed for iosched (error: -2 parent: (null)) [ 244.773596][ T6851] loop6: detected capacity change from 0 to 128 [ 244.794042][ T4224] device hsr_slave_0 left promiscuous mode [ 244.800697][ T4224] device hsr_slave_1 left promiscuous mode [ 244.818943][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.832695][ T4224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.849591][ T4224] device bridge_slave_1 left promiscuous mode [ 244.891518][ T4224] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.910484][ T4224] device bridge_slave_0 left promiscuous mode [ 244.947420][ T4224] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.132791][ T5371] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 245.277372][ T5371] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 245.277642][ T4224] team0 (unregistering): Port device vxlan0 removed [ 245.792046][ T4224] bond1 (unregistering): Released all slaves [ 245.847015][ T4174] Bluetooth: hci2: command 0x041b tx timeout [ 246.500003][ T4224] team0 (unregistering): Port device team_slave_1 removed [ 246.538879][ T4224] team0 (unregistering): Port device team_slave_0 removed [ 246.567600][ T4224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.599097][ T4224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.763205][ T4224] bond0 (unregistering): Released all slaves [ 247.112002][ T6872] ================================================================== [ 247.120911][ T6872] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 247.129604][ T6872] Read of size 2 at addr ffff88807d9c2dfb by task syz.2.613/6872 [ 247.137377][ T6872] [ 247.139729][ T6872] CPU: 0 PID: 6872 Comm: syz.2.613 Not tainted syzkaller #0 [ 247.147042][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.157160][ T6872] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.160465][ T6872] [ 247.163503][ T6872] dump_stack_lvl+0x188/0x250 [ 247.168227][ T6872] ? show_regs_print_info+0x20/0x20 [ 247.173467][ T6872] ? _printk+0xda/0x130 [ 247.177667][ T6872] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 247.183976][ T6872] ? load_image+0x410/0x410 [ 247.188528][ T6872] print_address_description+0x60/0x2d0 [ 247.194127][ T6872] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 247.200420][ T6872] kasan_report+0xdf/0x130 [ 247.204875][ T6872] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 247.211168][ T6872] ieee80211_monitor_select_queue+0x23a/0x240 [ 247.217287][ T6872] ? ieee80211_recalc_smps_work+0x20/0x20 [ 247.223152][ T6872] netdev_core_pick_tx+0x12c/0x300 [ 247.228318][ T6872] __dev_queue_xmit+0x797/0x2e50 [ 247.233293][ T6872] ? __might_sleep+0xf0/0xf0 [ 247.237941][ T6872] ? dev_queue_xmit+0x20/0x20 [ 247.242656][ T6872] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 247.248258][ T6872] ? packet_cached_dev_get+0x270/0x270 [ 247.253766][ T6872] packet_sendmsg+0x3b4f/0x4de0 [ 247.258656][ T6872] ? sched_move_task+0x2c0/0x4f0 [ 247.263660][ T6872] ? place_entity+0x4f0/0x4f0 [ 247.268399][ T6872] ? aa_sk_perm+0x7dc/0x910 [ 247.272951][ T6872] ? packet_getsockopt+0x9a0/0x9a0 [ 247.275269][ T6803] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.278108][ T6872] ? unpack_rlimits+0x1136/0x1230 [ 247.290361][ T6872] ? apparmor_socket_sendmsg+0x88/0x230 [ 247.295960][ T6872] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 247.301338][ T6872] ? security_socket_sendmsg+0x7c/0xa0 [ 247.306839][ T6872] ? packet_getsockopt+0x9a0/0x9a0 [ 247.311999][ T6872] ____sys_sendmsg+0x5be/0x8f0 [ 247.316814][ T6872] ? __sys_sendmsg_sock+0x30/0x30 [ 247.321888][ T6872] ? import_iovec+0x6f/0xa0 [ 247.326457][ T6872] ___sys_sendmsg+0x236/0x2e0 [ 247.331182][ T6872] ? __sys_sendmsg+0x290/0x290 [ 247.335994][ T6872] ? sock_do_ioctl+0x29d/0x320 [ 247.340843][ T6872] __se_sys_sendmsg+0x1b7/0x2a0 [ 247.341674][ T6803] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.345739][ T6872] ? __x64_sys_sendmsg+0x80/0x80 [ 247.357729][ T6872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 247.363774][ T6872] ? lockdep_hardirqs_on+0x94/0x140 [ 247.369129][ T6872] do_syscall_64+0x4c/0xa0 [ 247.373596][ T6872] ? clear_bhb_loop+0x30/0x80 [ 247.378319][ T6872] ? clear_bhb_loop+0x30/0x80 [ 247.383046][ T6872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.389025][ T6872] RIP: 0033:0x7f6f5a0530d9 [ 247.393482][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.413141][ T6872] RSP: 002b:00007f6f582ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.421606][ T6872] RAX: ffffffffffffffda RBX: 00007f6f5a2dafa0 RCX: 00007f6f5a0530d9 [ 247.429618][ T6872] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 247.437627][ T6872] RBP: 00007f6f5a0ea024 R08: 0000000000000000 R09: 0000000000000000 [ 247.445632][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.453646][ T6872] R13: 00007f6f5a2db038 R14: 00007f6f5a2dafa0 R15: 00007ffc7f3c8998 [ 247.461675][ T6872] [ 247.464730][ T6872] [ 247.467080][ T6872] Allocated by task 6761: [ 247.471433][ T6872] __kasan_kmalloc+0xaf/0xe0 [ 247.476060][ T6872] tomoyo_realpath_from_path+0xed/0x5e0 [ 247.481657][ T6872] tomoyo_path_number_perm+0x251/0x6b0 [ 247.487176][ T6872] security_file_ioctl+0x6c/0xa0 [ 247.492153][ T6872] __se_sys_ioctl+0x48/0x170 [ 247.496786][ T6872] do_syscall_64+0x4c/0xa0 [ 247.501238][ T6872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.507168][ T6872] [ 247.509518][ T6872] Freed by task 6761: [ 247.509965][ T6803] device bridge_slave_0 entered promiscuous mode [ 247.513513][ T6872] kasan_set_track+0x4b/0x70 [ 247.513539][ T6872] kasan_set_free_info+0x1f/0x40 [ 247.513561][ T6872] ____kasan_slab_free+0xd5/0x110 [ 247.513582][ T6872] slab_free_freelist_hook+0xec/0x170 [ 247.513604][ T6872] kfree+0xef/0x2a0 [ 247.543810][ T6872] tomoyo_realpath_from_path+0x5ad/0x5e0 [ 247.549485][ T6872] tomoyo_path_number_perm+0x251/0x6b0 [ 247.555068][ T6872] security_file_ioctl+0x6c/0xa0 [ 247.560056][ T6872] __se_sys_ioctl+0x48/0x170 [ 247.564694][ T6872] do_syscall_64+0x4c/0xa0 [ 247.569149][ T6872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.575094][ T6872] [ 247.577453][ T6872] The buggy address belongs to the object at ffff88807d9c2000 [ 247.577453][ T6872] which belongs to the cache kmalloc-4k of size 4096 [ 247.591556][ T6872] The buggy address is located 3579 bytes inside of [ 247.591556][ T6872] 4096-byte region [ffff88807d9c2000, ffff88807d9c3000) [ 247.605057][ T6872] The buggy address belongs to the page: [ 247.610740][ T6872] page:ffffea0001f67000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d9c0 [ 247.620961][ T6872] head:ffffea0001f67000 order:3 compound_mapcount:0 compound_pincount:0 [ 247.629338][ T6872] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 247.637486][ T6872] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016c42140 [ 247.646115][ T6872] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 247.654721][ T6872] page dumped because: kasan: bad access detected [ 247.661176][ T6872] page_owner tracks the page as allocated [ 247.666914][ T6872] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3563, ts 40509660253, free_ts 40499092728 [ 247.685272][ T6872] get_page_from_freelist+0x24f6/0x2670 [ 247.690874][ T6872] __alloc_pages+0x1ee/0x480 [ 247.695504][ T6872] new_slab+0xc0/0x4b0 [ 247.699614][ T6872] ___slab_alloc+0x807/0xdd0 [ 247.704292][ T6872] __kmalloc+0x11d/0x340 [ 247.708566][ T6872] tomoyo_realpath_from_path+0xed/0x5e0 [ 247.714144][ T6872] tomoyo_path_number_perm+0x251/0x6b0 [ 247.719641][ T6872] tomoyo_path_mknod+0x147/0x190 [ 247.724745][ T6872] security_path_mknod+0xec/0x140 [ 247.729815][ T6872] path_openat+0xba5/0x2fb0 [ 247.734360][ T6872] do_filp_open+0x1df/0x400 [ 247.738908][ T6872] do_sys_openat2+0x14b/0x500 [ 247.743618][ T6872] __x64_sys_openat+0x135/0x160 [ 247.748502][ T6872] do_syscall_64+0x4c/0xa0 [ 247.752962][ T6872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 247.758946][ T6872] page last free stack trace: [ 247.763643][ T6872] free_unref_page_prepare+0x637/0x6c0 [ 247.769159][ T6872] free_unref_page+0x8f/0x2a0 [ 247.773879][ T6872] __unfreeze_partials+0x188/0x1e0 [ 247.779040][ T6872] put_cpu_partial+0x12d/0x190 [ 247.783846][ T6872] qlist_free_all+0x35/0x90 [ 247.788379][ T6872] kasan_quarantine_reduce+0x150/0x160 [ 247.793870][ T6872] __kasan_slab_alloc+0x2f/0xc0 [ 247.799006][ T6872] slab_post_alloc_hook+0x4c/0x380 [ 247.804158][ T6872] kmem_cache_alloc_node+0x184/0x2c0 [ 247.809480][ T6872] __alloc_skb+0xf4/0x750 [ 247.813853][ T6872] alloc_skb_with_frags+0xa7/0x720 [ 247.819004][ T6872] sock_alloc_send_pskb+0x87f/0x9a0 [ 247.824235][ T6872] unix_dgram_sendmsg+0x6f8/0x19c0 [ 247.829381][ T6872] sock_write_iter+0x2a6/0x3a0 [ 247.834191][ T6872] vfs_write+0x748/0xd70 [ 247.838507][ T6872] ksys_write+0x153/0x260 [ 247.842870][ T6872] [ 247.845226][ T6872] Memory state around the buggy address: [ 247.850889][ T6872] ffff88807d9c2c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.858985][ T6872] ffff88807d9c2d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.867087][ T6872] >ffff88807d9c2d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.875181][ T6872] ^ [ 247.883198][ T6872] ffff88807d9c2e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.891454][ T6872] ffff88807d9c2e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 247.899558][ T6872] ================================================================== [ 247.907658][ T6872] Disabling lock debugging due to kernel taint [ 247.913975][ T6872] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 247.921191][ T6872] CPU: 0 PID: 6872 Comm: syz.2.613 Tainted: G B syzkaller #0 [ 247.929885][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.939991][ T6872] Call Trace: [ 247.943300][ T6872] [ 247.946258][ T6872] dump_stack_lvl+0x188/0x250 [ 247.950972][ T6872] ? show_regs_print_info+0x20/0x20 [ 247.956203][ T6872] ? load_image+0x410/0x410 [ 247.960746][ T6872] panic+0x2f8/0x850 [ 247.964676][ T6872] ? bpf_jit_dump+0xd0/0xd0 [ 247.969237][ T6872] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 247.975170][ T6872] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 247.981101][ T6872] ? _raw_spin_unlock+0x40/0x40 [ 247.985980][ T6872] ? print_memory_metadata+0x314/0x400 [ 247.991477][ T6872] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 247.997763][ T6872] check_panic_on_warn+0x80/0xa0 [ 248.002735][ T6872] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 248.009006][ T6872] end_report+0x6d/0xf0 [ 248.013188][ T6872] kasan_report+0x102/0x130 [ 248.017721][ T6872] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 248.023994][ T6872] ieee80211_monitor_select_queue+0x23a/0x240 [ 248.030101][ T6872] ? ieee80211_recalc_smps_work+0x20/0x20 [ 248.035850][ T6872] netdev_core_pick_tx+0x12c/0x300 [ 248.041001][ T6872] __dev_queue_xmit+0x797/0x2e50 [ 248.045971][ T6872] ? __might_sleep+0xf0/0xf0 [ 248.050601][ T6872] ? dev_queue_xmit+0x20/0x20 [ 248.055315][ T6872] ? virtio_net_hdr_to_skb+0xb00/0x11e0 [ 248.060901][ T6872] ? packet_cached_dev_get+0x270/0x270 [ 248.066394][ T6872] packet_sendmsg+0x3b4f/0x4de0 [ 248.071297][ T6872] ? sched_move_task+0x2c0/0x4f0 [ 248.076276][ T6872] ? place_entity+0x4f0/0x4f0 [ 248.080988][ T6872] ? aa_sk_perm+0x7dc/0x910 [ 248.085520][ T6872] ? packet_getsockopt+0x9a0/0x9a0 [ 248.090669][ T6872] ? unpack_rlimits+0x1136/0x1230 [ 248.095733][ T6872] ? apparmor_socket_sendmsg+0x88/0x230 [ 248.101313][ T6872] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 248.106636][ T6872] ? security_socket_sendmsg+0x7c/0xa0 [ 248.112131][ T6872] ? packet_getsockopt+0x9a0/0x9a0 [ 248.117280][ T6872] ____sys_sendmsg+0x5be/0x8f0 [ 248.122083][ T6872] ? __sys_sendmsg_sock+0x30/0x30 [ 248.127172][ T6872] ? import_iovec+0x6f/0xa0 [ 248.131707][ T6872] ___sys_sendmsg+0x236/0x2e0 [ 248.136418][ T6872] ? __sys_sendmsg+0x290/0x290 [ 248.141236][ T6872] ? sock_do_ioctl+0x29d/0x320 [ 248.146041][ T6872] __se_sys_sendmsg+0x1b7/0x2a0 [ 248.150919][ T6872] ? __x64_sys_sendmsg+0x80/0x80 [ 248.155882][ T6872] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 248.161900][ T6872] ? lockdep_hardirqs_on+0x94/0x140 [ 248.167134][ T6872] do_syscall_64+0x4c/0xa0 [ 248.171587][ T6872] ? clear_bhb_loop+0x30/0x80 [ 248.176292][ T6872] ? clear_bhb_loop+0x30/0x80 [ 248.181007][ T6872] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.186946][ T6872] RIP: 0033:0x7f6f5a0530d9 [ 248.191387][ T6872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.211121][ T6872] RSP: 002b:00007f6f582ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 248.219568][ T6872] RAX: ffffffffffffffda RBX: 00007f6f5a2dafa0 RCX: 00007f6f5a0530d9 [ 248.227583][ T6872] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 248.235595][ T6872] RBP: 00007f6f5a0ea024 R08: 0000000000000000 R09: 0000000000000000 [ 248.243606][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.251614][ T6872] R13: 00007f6f5a2db038 R14: 00007f6f5a2dafa0 R15: 00007ffc7f3c8998 [ 248.259685][ T6872] [ 248.263053][ T6872] Kernel Offset: disabled [ 248.267403][ T6872] Rebooting in 86400 seconds..