last executing test programs: 17m15.865808052s ago: executing program 32 (id=30): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') fchdir(r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r2) close(r2) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) 16m37.874235681s ago: executing program 33 (id=282): ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0xd4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x7, 0xef, 0x8, 0x8, 0x5, 0x9, 0x7, 0x0, [{0x1000, 0x4, 0x401, 0x6}, {0x8, 0x7, 0x1009, 0x5}, {0xfffffff9, 0x43, 0x7ffd, 0x5}, {0x7fde, 0x40, 0x51, 0x3ff}, {0x8, 0xb, 0x1, 0x42}, {0x6, 0x400004, 0x8, 0x8}, {0x8001, 0x0, 0x0, 0x8001}, {0x1, 0x1800000, 0xa525}]}}, @TCA_U32_LINK={0x8, 0x3, 0x1000000}, @TCA_U32_CLASSID={0x8, 0x1, {0xa, 0xfff2}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x40) 16m25.473558817s ago: executing program 34 (id=338): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup2(r0, r1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) sendto$inet6(r1, &(0x7f0000000600)='e', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xe35a}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x2, 0xb, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000040)={0x0, 0x401}, 0x8) 16m3.28227042s ago: executing program 35 (id=432): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00003f0000003f00a7ea3163fdfa964eccac45d3456808f1e3fe0c472c8d954f8999b06ca46207f2b7bd7d2944fafc2276cc6b8f9629dc50c76a16f810156cb132f51eb69c"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="01", @ANYBLOB="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", @ANYRES64=r0]) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000500)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00b58f5f21000904080001030000000905ca43"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 15m49.465217813s ago: executing program 36 (id=510): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x14a4014, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) read$FUSE(r0, &(0x7f000000b040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) syz_fuse_handle_req(r0, &(0x7f0000009040)="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", 0x2000, &(0x7f0000006b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x90, 0x0, 0x45, {0x6, 0xfffffffffffffffe, 0x0, 0xfa0, 0xffffffff, 0x0, {0x8000, 0x8, 0x400000000, 0x2, 0x22, 0xf7fe, 0x10000, 0x0, 0xfffffff7, 0xc000, 0x1, r5, r3, 0x0, 0xfffff8ad}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c000000810000000000000006"], 0xfeffffff) 14m54.073107391s ago: executing program 37 (id=779): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000001c0)={'nicvf0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 14m30.386562684s ago: executing program 38 (id=898): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0xffffe000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 14m29.897972409s ago: executing program 39 (id=901): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 14m26.588657327s ago: executing program 40 (id=909): openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x10, 0xee, 0xd1, 0x40, 0x471, 0x209e, 0xe279, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x3, 0x50, 0x55, "", [{{0x9, 0x4, 0x21, 0xc0, 0x0, 0xcf, 0xf4, 0x4f, 0x31}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x3c) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f00000001c0)) openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) open_by_handle_at(0xffffffffffffffff, 0x0, 0x711100) 14m13.251286689s ago: executing program 41 (id=962): syz_mount_image$fuse(0x0, 0x0, 0x42028, 0x0, 0x21, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000040)='./bus\x00', 0x322020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x20) unlinkat(r0, &(0x7f00000011c0)='./file0\x00', 0x0) 13m17.331610301s ago: executing program 42 (id=1254): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x600, 0x20) 12m30.06516817s ago: executing program 43 (id=1518): ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000840)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x184, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000180)='lo\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r2, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @loopback}, {0x2, 0x0, @private}}) 12m18.435206378s ago: executing program 44 (id=1573): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000000000)=ANY=[], 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 11m30.071811298s ago: executing program 45 (id=1815): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 11m1.629112859s ago: executing program 46 (id=1969): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) wait4(r2, 0x0, 0x40000000, 0x0) ptrace$getsig(0x4202, r2, 0x10000, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0xa0040, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000040)) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x8c4, 0x2c, 0xd2b, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x890, 0x2, [@TCA_U32_ACT={0x5c, 0x7, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x2, 0x3, 0xe, 0x6}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x7}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x0, 0x20008000, 0x4, 0x8}]}}, @TCA_U32_POLICE={0x80c, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x1c79, 0x3, 0x2, 0x7, 0xff, 0x8, 0x1, 0x1, 0x2d0, 0x2, 0x1, 0xb, 0x6, 0x0, 0x2, 0x2, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x1, 0x5, 0xc4, 0xa117, 0x8, 0xab, 0xfffffffa, 0x1, 0x0, 0x4, 0x1fc0000, 0x4, 0x200, 0x80, 0x1, 0x1, 0x0, 0x4, 0x7, 0x2, 0x1, 0x610, 0x2, 0xb, 0xfb, 0x4, 0xa29, 0x7f, 0x82, 0x200, 0x44, 0x2, 0x1, 0x2, 0x101, 0x10005, 0xdd, 0x5, 0x8, 0x431d3ae0, 0xc03, 0x9, 0x5, 0x9349, 0x6, 0x100, 0x5, 0x1, 0x1, 0x8, 0x401, 0x3, 0x6, 0x5, 0x6, 0x19e, 0x2, 0x2, 0xf, 0xc00000, 0x4003ff, 0x7, 0x3326ea0a, 0x8007, 0x80000001, 0x25, 0x1, 0x8, 0x8001, 0x9, 0x6, 0x54773818, 0x8, 0x8001, 0x6, 0x7f, 0x373, 0x4, 0x4, 0x80, 0xc000000, 0x7ff, 0x6138, 0x49e, 0x3ff, 0x8, 0x0, 0x3, 0x0, 0x2, 0x10000, 0x3, 0x2, 0x9, 0x1, 0x7fffffff, 0x101, 0x3, 0xc42, 0x4, 0x7, 0x401, 0x5, 0x0, 0x4, 0x80000001, 0x8000, 0x5, 0x2fb, 0x5907, 0x8, 0x81, 0x7, 0x4, 0xffff7ffc, 0xffff0001, 0x2, 0xffff, 0x8, 0x2396, 0x8000, 0xfffffffc, 0x5, 0x1, 0xfff, 0x91e0000, 0x4, 0x3, 0xfae, 0x40, 0x900, 0x6, 0x0, 0x2, 0x6, 0x6, 0xdc, 0x9, 0x7ff, 0xfffffff7, 0x4, 0x2, 0x30, 0xff, 0x3, 0x80, 0x6, 0x7, 0x9, 0x4, 0x0, 0x5, 0x4342, 0xfa52, 0x4, 0x7fff, 0x9, 0x381, 0xfffffff2, 0xfffffff6, 0x100, 0x8, 0xf73, 0x80000001, 0x0, 0x5, 0xe, 0x1e3, 0x3, 0xfffffc01, 0x2, 0xe, 0x4, 0x4, 0xf5f, 0x2, 0x0, 0x6, 0x1, 0x9, 0x80, 0x2, 0x0, 0x0, 0xfe, 0x3, 0x8, 0x0, 0x80000001, 0x5, 0x0, 0xb, 0x3159, 0x6, 0xfffffff7, 0xe4f7, 0x6, 0xffffffff, 0xfffffffc, 0x8, 0x9, 0x6, 0xa098, 0x0, 0x0, 0x6, 0xb, 0x6, 0x2, 0x80000001, 0x9, 0xfffffed0, 0x2, 0x7, 0x56, 0x2, 0x4, 0x7, 0x2009, 0xb, 0x6, 0x4, 0x1, 0x3, 0x7, 0x9, 0x7, 0xe, 0x0, 0x1, 0x9, 0x1, 0x0, 0x40, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x8, 0xffffffff, 0xffff0d7b, 0x6, 0x3, 0xc79, 0x74100000, 0x800, 0x7, 0xfffffffd, 0x76e8, 0x4, 0x0, 0x9, 0xb046, 0x7, 0x101, 0x8, 0x0, 0x6, 0x3ff, 0xfffffffe, 0x0, 0x7f, 0x3, 0x7c68080b, 0x4, 0x9, 0x3, 0x80000001, 0x0, 0xa, 0x7, 0x2, 0x4, 0x62f1, 0x2, 0x995, 0x1, 0xf, 0xb, 0x7f, 0x9, 0x7, 0x4, 0x6, 0xc39, 0x6, 0x7, 0x2, 0x5, 0x4b0f, 0x3ff, 0x3, 0x93, 0x5, 0x2, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x9, 0xffffffff, 0x5, 0x9, 0xa2c, 0xda0b, 0x7, 0x40, 0x9, 0xefa8, 0x1, 0xe6, 0x0, 0x1ff, 0x2, 0x4, 0x6, 0xfffffff9, 0x40000004, 0x8, 0x4, 0x0, 0xea, 0xbed1, 0x10001, 0x8, 0x7fff, 0x3, 0x4, 0x0, 0x9, 0x5dac, 0xdb, 0x1, 0x8, 0x9, 0x2, 0x2000, 0xfc000000, 0xfffffff9, 0x3, 0x4, 0x0, 0x0, 0x4, 0xfffffffc, 0xfffffff9, 0x5, 0x3, 0xe2000, 0x6, 0x8001, 0xa, 0x6, 0x5, 0x0, 0xef83, 0x8, 0x4, 0x3ff, 0x0, 0x5, 0x10000, 0xf6, 0x7, 0x3, 0x3ff, 0x5, 0xaf7e, 0x5, 0x7ff, 0xeab9, 0x3, 0x8, 0x525, 0x9, 0x0, 0x3, 0x401, 0x9, 0x6, 0x8, 0x1, 0x8, 0x7, 0xfffffffb, 0x7, 0x80000001, 0xfffffffd, 0x4, 0x8fb3, 0x7fffffff, 0xfffffff9, 0x800, 0x2, 0x7fff, 0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x82, 0xff, 0x6, 0x3, 0x46, 0x1, 0x958, 0x3, 0x80000001, 0x7, 0x9, 0x5, 0xfffffffa, 0x0, 0x5, 0x4d4, 0x9, 0x8, 0x75968511, 0x0, 0x46cc, 0x8, 0x6, 0x40, 0x9, 0x7, 0x4, 0x7054, 0x3, 0x3, 0x1, 0x70, 0x9, 0x9, 0x9, 0x400, 0x3dc1, 0x0, 0xe6a2, 0x8, 0x6, 0x8, 0x6, 0x80000001, 0xff, 0x2, 0x6, 0x80000000, 0x0, 0xd42700, 0x8001, 0x8, 0x8000, 0x9, 0x4, 0x6302, 0x1eeacb39, 0xe, 0x2, 0x5, 0xd9a, 0x9, 0x0, 0x8, 0x3, 0x2, 0x80, 0x100, 0x3ff, 0x5, 0x3ff, 0x40, 0x7ffffffe, 0xff, 0x5, 0x6, 0x1000, 0x37, 0x81, 0x7fffffff, 0x9, 0x5ca, 0x5, 0x5d6a, 0x2, 0x3, 0x6, 0x81, 0x10000]}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x6}}]}, 0x8c4}, 0x1, 0x0, 0x0, 0x1}, 0x2404c084) 10m52.579137648s ago: executing program 47 (id=1995): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42792000) ioctl$DRM_IOCTL_MODE_CURSOR2(0xffffffffffffffff, 0xc02464bb, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xa8282, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, r1, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd86) 9m31.07310257s ago: executing program 48 (id=2401): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$F2FS_IOC_GET_FEATURES(0xffffffffffffffff, 0x8004f50c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_mount_image$xfs(&(0x7f0000000200), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x97f1, &(0x7f000000a240)="$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") getpid() r0 = open(&(0x7f0000000000)='.\x00', 0x8000, 0x91) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000008) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) 9m9.09059561s ago: executing program 49 (id=2430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getitimer(0x0, &(0x7f0000000000)) 8m53.848950517s ago: executing program 50 (id=2509): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlinkprop={0x74, 0x6c, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x14091, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_PROP_LIST={0x40, 0x34, 0x0, 0x1, [{0x14, 0x35, 'pim6reg0\x00'}, {0x14, 0x35, 'caif0\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x1, r2, 0x1, 0x9}, 0x14) readv(r1, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r2, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7a680000) 7m54.036370412s ago: executing program 51 (id=2919): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, 0x0, 0x0) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002a00)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0xffffffffffffff73, &(0x7f0000000000)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70b52c, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x0, 0xfff1}, {0x3, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0xb65943b125f5237e}, 0x840) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x37ea}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000) 7m34.773499453s ago: executing program 52 (id=3054): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x11, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000002000010026bd7000fbdbdf2502101000054a0f00000001000800020064010101080018004e214e2208000100"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000804) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00!'], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @remote, 0xc00003}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2, {[], @echo_reply={0x81, 0x0, 0x0, 0x2, 0x4}}}}}}, 0x0) 5m37.525199386s ago: executing program 53 (id=3609): syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x3) fcntl$setsig(r0, 0xa, 0x11) fcntl$setlease(r0, 0x400, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000100)={0x2, r2}) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r0, 0x8, r3) truncate(&(0x7f0000000000)='./file0\x00', 0x0) 4m38.768035729s ago: executing program 3 (id=3860): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r3, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000880)={r4, @in6={{0x2, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x1}}, 0x0, 0xeffc}, &(0x7f0000000300)=0x90) 4m38.621771021s ago: executing program 3 (id=3862): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='auxv\x00') fchdir(r2) r3 = inotify_init() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) inotify_add_watch(r3, &(0x7f0000000000)='./file0\x00', 0x1) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 4m38.377086084s ago: executing program 3 (id=3874): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a300000000048000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000210c0009800800014000000005600000000c0a010300000000000000000700fffe0900020073797a31000000000900010073797a300000000034000380300000802c000180250001002130404c6bfef3a31e2587ebd76200eb3ea056f39e3ab8a93c358099bf8cf3007d00000014000000110001"], 0xf0}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 4m35.92259544s ago: executing program 3 (id=3878): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10852, &(0x7f0000000400)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYBLOB, @ANYBLOB="d9b2de1a2f0751da7120c88a88f0955139afd5c85d409cd57977db7b7c40ade28a33a618636ff400fb97e6caf4db25c1ccd8fee922c9ca87d19e19bed2941af9fc3561a936e805795a9965b5eb669fb143b894f24dbf2cd930f3967172749732bead8f13f18ad0a6d2451810d29d7c5e9dbda0be77473bb0431e71cfa02a873d927ec49990e8ac2bb9469d53e0420e67beaa46cb9850de015b11ed84f357d67ae57d156d5a089f321ec719835c6eeb76ad4a79ca0a80f230d9110b57272d24eb8d5effb24faddf3ffcb309d9a27c57181780f56a1b34", @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8, @ANYRESOCT, @ANYRES8, @ANYRES8, @ANYRES16=0x0, @ANYRES64, @ANYRES32], 0xfe, 0x1508, &(0x7f0000000a00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x14c) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0}) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fsync(r0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586819) preadv2(r1, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 4m35.410524765s ago: executing program 3 (id=3881): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, [@generic={0x91, 0x1, 0x1, 0xb7}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) socket(0x2a, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x48, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) sendmmsg(r4, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 4m33.404609438s ago: executing program 3 (id=3894): syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000002000000007bdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) exit(0xffff) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$sock(r1, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4m33.16607127s ago: executing program 54 (id=3894): syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013000002000000007bdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) exit(0xffff) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$sock(r1, &(0x7f0000001fc0)={0x0, 0x0, 0x0}, 0x40000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 4m3.438106396s ago: executing program 5 (id=4025): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/4, 0x2}, 0x20) 4m1.758334424s ago: executing program 5 (id=4028): r0 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4m1.101333892s ago: executing program 5 (id=4036): dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x2, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x30000004}) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x7, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x806, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x800, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0xc, 0x4, 0x80080000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0xc57, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x1, 0x4, 0x10001, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff5, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6ca, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x7c, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x1, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x9, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0x7e78, 0x2, 0x4, 0x9, 0x3, 0x5, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x4, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x1, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x2, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0xb, 0x803, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x8, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0xb, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x56, 0xfffffff2, 0x6bd8490e, 0x101, 0x10000, 0x80000001, 0x7fff, 0xffff, 0xa61e, 0x1, 0x5, 0x1, 0xfffffffe, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0x5, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x7, 0x30b1d693, 0xa1f, 0x40000f40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x200fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m0.981764202s ago: executing program 5 (id=4038): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x88, &(0x7f00000005c0)={[{@nogrpid}, {@min_batch_time}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobarrier}, {@nodiscard}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, 0x0, 0x10104a8, 0x0, 0x81, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 4m0.523586258s ago: executing program 5 (id=4044): openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="080005000200000087a00848a58899c130d046f1ae6847bcd559b502a17fd524749a3ec2e0757088"], 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0e00"}) 3m58.656203558s ago: executing program 5 (id=4054): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 3m57.53898507s ago: executing program 55 (id=4054): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) timerfd_create(0x0, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 2m44.072972094s ago: executing program 1 (id=4303): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r2, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 2m43.967241296s ago: executing program 1 (id=4306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) socket(0x10, 0x803, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xc858}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m43.655907419s ago: executing program 1 (id=4309): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x3) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x6, 0x4, 0x4, 0x45}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000001200)={0x0, 0x0, 0x1f, 0x11, 0x845, &(0x7f0000000e00)="40639ebeaa2a64606b03f1d2e55a08d25ad300392b28a178cab61a8d65264aad9b1391ea8c9cf947e86a6ed829f3d0c3d60cc1dfd5a7cf7ec826b5501134ff8115a648966016a0d8efe753ba0c353e9f6a552d9913dee0546df79a248836d23b93ea04c29eaeb862540b39dbfbec0fbfd45143dd7f4a87f1b70af8fab7d922c70f670d3f7b853d8d7464beefb1478d7864de34dfaadba7a54c7def45a2680b3ba8e02aa4a499b4f7d0d78a56477b3d6d17ab2e7593b17314a395f3a39eb22e6b55b90e8799845e19161ef51308796b10e6a981d5bf8e19d453171bc2571b0f909905e81a598a14dcaa712e08aa373adb7aabdc223a79c1b54f52abd23989e7e78b2b9aea804b5272b1a54292a17141745a7c1df9d3e3bf4107cb5bcadf1cba3017606ccc16c00726ccde758f548795790dd853f382c0b89c17be40be968ab759c9e6f649e8fbd4abcdd8f825c00b968a909a2948d153f40662564cac1d22b29f0a8f63191c24da9a6d52317e7b1529ace3b5c2f1474019b8402196abade9afbb6c0e9cdf49c7a0aac8eb744962a9a7c7c220e1160faa2d20c2738b58e37c944a9117c4b23e2073b48d33b25bc3ac8c2936ecd4709504317c9faca518a80c77ad41dbb2a9a677267543cb6b71be9b705281d15572e5e4a0b44ea5734e0b507b41ab482cc76c15f705ea20109948903d726e65b40c2d1fe325aafcd570ce1d514776a7f30293b0e1d45f727a50d421daa4b72e6b20e3468c4526297b1ac70c5ea00321aedb156baadd4fbe15cdf32832fbe49729be9476c4cfc754583d9a9c4feee5b9719fbe7f2cc113440480e1ced18991dd289b923d138a3eba8fbf0870dad7ed2e59d47235b3600a5329310626f50d720bc98f42bd9da55188df97f1c5c3c4c075a04f8e40880223affabf9f7eac86c72eee7287194668d07e3c857e622bbc6d0bb6412daf831d07162d988e221cff9fbeb1d8901f74e1ab28573a9195e81f133baf721e4d678688d887a105b8cb4cfe85b832f42e68de803cc5224ae16280ba8e10d1f8237115190d95259699c9df1fdf27d6a313ba4382d966b20253cce553980959a6e217b4fc34531cec0b8a69f3a51d87b406c4846952161903038d305ec5b605a4425fa2641c3c8494321d454984f76d6a2f40fef46b816de903b8cc01cdb18248a8536f40f65d0374d477c999c2dcac197f347b13bf173d09c8b65cb52bc8a9e6e5b0c42f814d313049e534540b282db73176bb2b661d084ec1570c6ddfd7e04f49e36983c718341f873fd09c1368221046dd9fc1636d904a57d8756dbd77d66d5bc41441c9a4fd9115ecbb579753879521b6e57454c24bba41c1268f03d8cdfc6abae233dda6d34fba42cbd4d62df7b33805a8a71e84358bb573385b9a6501fa95d830c9f58628cbf2a825a09ba51f7b25433488a46678a12be35a"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, &(0x7f0000000400)=""/4096, 0x1000) getdents64(r3, &(0x7f0000000280)=""/94, 0x5e) 2m41.223612395s ago: executing program 1 (id=4312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c0000000000000000000000180100002020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 2m39.800306221s ago: executing program 1 (id=4316): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000200)={0x15, 0x65, 0xffff, 0x5f254ef8, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff6, 0x1000, 0x23, 0x7, 0x0, 0x0, 0x4, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0), 0x280cc02, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r3, &(0x7f0000004c40)={0x2020}, 0x2020) 2m38.536126335s ago: executing program 1 (id=4320): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x2c040000) 2m21.901638417s ago: executing program 56 (id=4320): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x62040200) syz_open_procfs(0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) unshare(0x2c040000) 2m14.826715844s ago: executing program 6 (id=4401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0xb1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x1}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, 0x0, 0x0, 0x20000000, &(0x7f00000001c0)={0x11, 0x5, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 2m12.072919824s ago: executing program 6 (id=4409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000ffb0000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000fc9400000006000000b7020000000000007b9af8ff00000000d509000013ffffff7baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m10.376640853s ago: executing program 6 (id=4424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380), 0xffffffffffffffff, 0x6, r3}, 0x38) 2m2.032388864s ago: executing program 6 (id=4441): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffff00}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000240)=0x1020fff, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b) 2m0.342674363s ago: executing program 6 (id=4443): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1m44.033744901s ago: executing program 57 (id=4443): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r3, 0x0, 0x20000000002) 1m26.076547038s ago: executing program 4 (id=4565): unshare(0x22020600) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x408, 0x0, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random, @rand_addr, @rand_addr, 0x8}}}, {{@arp={@multicast1, @dev={0xac, 0x14, 0x14, 0x25}, 0xffffffff, 0xff000000, 0x3, 0x10, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0x0, 0x181, 0x0, 0x0, 0xff, 0xff]}}, 0x1, 0xc147, 0x8000, 0x8, 0x0, 0x7ff, 'veth1_macvtap\x00', 'caif0\x00', {0xff}, {}, 0x0, 0x348}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "00fc6318467e3c83c37e66cec1e44eb18a67f9ab80f453c14b046598b980"}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x652b910927df25be]}}, {@empty, {[0x0, 0xff]}}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="0400", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x458) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x80087601, 0x0) 1m25.359426776s ago: executing program 4 (id=4571): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) getrandom(&(0x7f0000000380)=""/300, 0xcebaa945, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000100)='./file1\x00') timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r3 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r3) execveat$binfmt(0xffffffffffffff9c, r1, 0x0, &(0x7f0000004780)={[], 0xf000}, 0x1000) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1m22.560327316s ago: executing program 4 (id=4581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0x8}, {}, {0xffe0, 0xffec}}}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xffff, 0xc}, {}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004004) 1m22.16007566s ago: executing program 4 (id=4584): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x44, 0x0, &(0x7f0000000500)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m21.029964333s ago: executing program 4 (id=4588): io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x4000000000091}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0500000005000000fd09000085"], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6c, r3}, 0x38) 1m16.201274776s ago: executing program 4 (id=4606): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9001) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1ac1, 0x0) process_mrelease(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xb8}}, 0x0) 59.727238326s ago: executing program 58 (id=4606): setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x9001) timer_create(0x2, 0x0, &(0x7f0000000100)=0x0) timer_settime(r0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_settime(r0, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1ac1, 0x0) process_mrelease(r1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0xb8}}, 0x0) 14.258322554s ago: executing program 7 (id=4792): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.053356437s ago: executing program 7 (id=4799): syz_clone(0xb100, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) select(0x40, &(0x7f0000000240)={0x2, 0x8, 0xa, 0x5, 0xffffffff, 0x6, 0x2, 0x4}, 0x0, &(0x7f0000000080)={0x9, 0x7, 0x10000, 0x2, 0x5, 0x2, 0x9, 0x100000000}, &(0x7f0000000200)) timer_create(0x3, 0x0, &(0x7f00000001c0)=0x0) timer_getoverrun(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x14011, 0x0) setresuid(0xee01, 0x0, 0x0) setpriority(0x2, 0x0, 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48841}, 0x80008b0) 12.988440438s ago: executing program 9 (id=4800): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x478, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff32, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x1, 0xd5c, 0x4, 0xa0, 0x4, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x44, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x8e5e00, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x1, 0x1, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x2, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x2, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90c, 0xff, 0x2, 0x7, 0xd, 0xc7, 0x4, 0x7, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x1, 0x7, 0x5, 0x7fff, 0xc, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x3ff, 0x80000000, 0x2, 0x603c, 0x4, 0x4, 0x0, 0xfffffff8, 0x7, 0x3, 0x800010, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x8a, 0x10, 0x6, 0x0, 0x7ff, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0x400d87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x2, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x5, 0x3, 0x10001, 0xffff, 0x4d, 0xd, 0x8, 0x2, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x5, 0xfffffffe, 0xd, 0xfffff0c5, {0xb, 0x2, 0x200, 0x8001, 0xfffa, 0xbe}, {0xd9, 0x2, 0x5, 0xfff8, 0xfff}, 0x3, 0x9, 0x2}}]}]}}]}, 0x478}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6", 0x90}, {0x0}], 0x2}}], 0x1, 0x20008000) 11.774122911s ago: executing program 7 (id=4801): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10148, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000008c0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000200)='\f', 0x1}], 0x1}}, {{&(0x7f0000000540)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001c80)}}], 0x2, 0x4000800) 11.765951431s ago: executing program 9 (id=4811): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) 9.708079273s ago: executing program 9 (id=4807): r0 = gettid() timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xffff, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0xa) fchdir(r2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r3, &(0x7f0000001f80)=""/4108, 0x100c) 9.528134396s ago: executing program 2 (id=4809): getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xe, &(0x7f0000000380)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x10}, 0x94) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x2, 0x28e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="700000001500010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="140001000000000000000000000000000000000114000600000000000000000000000000000000002b0002"], 0x70}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004b00004000000000000690780a210104ac1414aa44140801ac1414bb00000000e0000001000000000704040300000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000008d0f4c63"], 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000340)={0x6b, 0x8, 0xfa00, {0xffffffffffffffff, 0x93d192c45c209ba3}}, 0x10) sendmsg$xdp(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0xf, r0}, 0x45, &(0x7f0000000680)=[{&(0x7f0000000380)="9e2e1faec0caf8133be46f889f63bf9bec3e9e0340d77ad27fbbeac1012f058400dd47e0a1f36a39b14a1511912cd708d39fb167ea2ab50012423d1197acbf760f11dcc85c8ae139ac189bc6274517af64e16710992fc8b70b09c8fd8ff72081d234713af20b8218dc49cfd87282611fbac76dde3217d9278a07e1230e68f7c0ed46ef0cf59e901ad237bedd845f708be6fad30b6485fa2b8019ca41fbf0242066fe7a630fc621f75c8c6089c0f97d6d55c008840c7e58db5be81a61b31c35edf52bf2d7befe692085dddb4f6f09f8adf6926d04fe85ba73d3b3ef2b1ba8817701e149056bc88db352d6", 0xea}, {&(0x7f0000000900)="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", 0x1ec}, {&(0x7f0000000480)="acfce2ec176636be8bb5c257e32e04639e9fa493dd991c4f926faf8b5f21996887c5dc103a6120d7296a0a40ac1bd568690fabc6a4688025519e53970293f9f0b2fc575569026618bbc20110f8db5e8325a72d8ce03911f21a1f521319738d33a49efba4f4702257f7559fe21b331765a6be342f7c59848e7e63e08988b36af3067a7574a5c5a8efe414a174e0799fbdeda1083ddf5609a14deb37cfe0859463771dce4ce7e6f95c4adbb886697e7b25cfaa9c1668cada11448862e995edbfa7b4307d4b2327ffb0b06928b44a28f28209", 0xd1}, {&(0x7f0000000700)="f7f6e6ae667aafe2abb17a0fda0c432229dec333edfb7f5df6abd1a5cf4c82be1e35d61ad72d4d2e0546ed91810523810aa7358d42bbefe41cc5e9a18f1d0c2b86413d27e56d50733cccc5f57035869de6ee7be4af8d3381ebd44b9b17b8098637540de7b4d8cef7447f0803827cfce932bfe9ad8c56119e2e0106578d27bf9cf29959d89fa54de4c0cbb77dbb678ad53fa87abda3", 0x95}, {&(0x7f0000000180)="987792cedabe24", 0x7}, {&(0x7f0000000200)="c5f190b97c2fae9c20c06e51715428d09470f157560074f30f21"}, {&(0x7f0000000580)="d169bffcf0121f4a99c9feb6fa7648ff10182878ab3666c33c809a28a537dd7f7597c6c338a57fb7e0249638a66c6626a2c3f6b082bdc92a6ddcd0070a5ea9ceff60b281cef702fcea9308551a72a24b362f653b7f000f005d20da191618b9904d66c309cd393d68e3b538a406a20284e1eae4f56f0f0d56172d1f8c56d3c6e7bd6833631079b8a8abbbc9e9af102c7f208dc78ac1e41809485658fdf782cc3158e1a0f78c152b9ed6b97f3efed662acebd93f82a17a8695dd2d4e329b16f513a73df68b813390bdc284688a4ea3b942bd7e83ee122f4a35bb6b1eea9c725a328cea8ead859697358a"}, {&(0x7f0000000840)="352ab79d47caf9f2a1558cc27dafda68083a998a21e0d83c76479bf5fc244d19790e9b5e53eef973e87f97fb0f62a7ece313c258a4468c360f7c64eef25bc0dfeaaf071c187b6a21a657531516f73ccffdd5059f121a6ffd6649a031f3f6bc44230ec2c21bbf8300aba85b465dbb9e04b96af487f1c30651062b8487154d710510e0b48160cc206185029d6515e99dbb5da0eeb3dc636c9c670c5529892c9e245d862ed8"}], 0x5, 0x0, 0x0, 0x4040000}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf254900000008000300", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000c40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40448c5}, 0x4000) 8.23224736s ago: executing program 8 (id=4810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x93}}, 0x20044000) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) 8.21077023s ago: executing program 2 (id=4812): timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x40071, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) pread64(r1, 0x0, 0x0, 0x78f2a36b) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000300)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000380)={0x0, 0x0, r3, 0x0, 0x7, 0x1f5, 0x1, 0x0, {0x4, 0x2, 0x0, 0x1, 0x0, 0x3, 0x9, 0x0, 0x6, 0x0, 0x0, 0x373, 0x8001, 0xfffffffb, "b4bc3244f77d1f000071849800000800"}}) 7.892808004s ago: executing program 2 (id=4813): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000001800010029"], 0x38}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$igmp6(0xa, 0x3, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x8000001, &(0x7f0000000300), 0x2, 0x1}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 6.887997915s ago: executing program 0 (id=4815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001440)=ANY=[], &(0x7f00000014c0)=""/2, 0x45, 0x2, 0x1}, 0x28) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={0x0}, 0x1, 0x0, 0x0, 0x20004050}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa8}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="540200001700010000000000000000002001000000000000000000000000000100000000", @ANYRES32=0x0, @ANYBLOB="1242ffff04000000000000000000", @ANYBLOB], 0x254}}, 0x0) 6.833171156s ago: executing program 8 (id=4816): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@fallback=r1, 0xc, 0x0, 0x7, &(0x7f0000000240)=[0x0], 0x1, 0x0, &(0x7f0000000280), &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f00000034c0)={0x2020}, 0xcac) 6.769235246s ago: executing program 2 (id=4817): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x1, 0x3, 0x6361, 0x5, 0xffffffff, 0x40000003}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x3, 0x8000, 0x0, 0xf, 0x3, 0xc0e}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4008814) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x5}, {0xfff3, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x0) sendmsg$kcm(r4, &(0x7f0000000340)={&(0x7f0000000440)=@xdp={0x2c, 0xdd86, r6, 0x5}, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000680)=',', 0x1}], 0x1}, 0x20008110) 6.693669237s ago: executing program 0 (id=4818): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.536076539s ago: executing program 2 (id=4819): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) close(0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) 5.535862319s ago: executing program 8 (id=4820): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r4, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) 5.4179234s ago: executing program 9 (id=4829): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x19}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r2, 0xff7f}}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.431902311s ago: executing program 8 (id=4821): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000440)) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x1000000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4.430772551s ago: executing program 0 (id=4832): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bind$xdp(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, 0x2, r1, 0x35}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r5, 0x2}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value=r4}}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f00000001c0), &(0x7f0000000040)=@tcp=r0}, 0x20) syz_emit_ethernet(0x2dc2d, &(0x7f0000000300)=ANY=[], 0x0) 4.407911922s ago: executing program 9 (id=4822): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000a00)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x1}}, {@inlinecrypt}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@noload}]}, 0xf5, 0x49f, &(0x7f00000004c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x8) 2.893584178s ago: executing program 2 (id=4823): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000500)=0x8, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574000000000c00078008000640"], 0x5c}}, 0x20084884) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.844776489s ago: executing program 8 (id=4824): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x70, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x2, 0x0) ptrace$getregset(0x4204, r3, 0x202, &(0x7f0000000480)={&(0x7f00000002c0)=""/232, 0xe8}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x81, 0x7, 0x0, 0x3, 0xd, 0x8, 0xd8, 0x80, 0x9, 0x6, 0x9, 0x0, 0x1, 0x3, 0x71, 0x4, 0x7a, 0x2, '\x00', 0x8, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.843955339s ago: executing program 0 (id=4836): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x8) 2.339139105s ago: executing program 7 (id=4825): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8849}, 0x448c4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041080) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffbfffff, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000005c0)=ANY=[], 0x0) 1.965494178s ago: executing program 7 (id=4826): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100), &(0x7f0000000900)="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", 0x1000, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x404, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r3, 0x15b4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) 663.364263ms ago: executing program 7 (id=4827): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './bus'}, 0x9) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r3, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r3, r2, 0x0, 0x40001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) 532.504994ms ago: executing program 8 (id=4828): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYBLOB="b0790a07e1e471aed209036fa5f5ca6bc1ad170371c5e2bd52cf99296e6cdd0882cc4c075a7c4b8ca0d78022160660db09219ebb75dc37499a8272c148662b3afc124ff55a705238d347a5a54bc22fc6e8539f02d1a14d4df87689f2e34e7449a843df2a4e9fbe059f2102bb7efa83db5ef26895be033858456061b9ac965c95f1928de05eb811731601", @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x4042, 0x80) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x20) 472.257735ms ago: executing program 0 (id=4830): r0 = syz_clone(0x26900000, 0x0, 0x0, 0x0, 0x0, 0x0) personality(0xfe47fef9f5ff7379) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x21, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x9, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x20) ptrace$setopts(0x4206, r0, 0x0, 0x100010) wait4(0x0, 0x0, 0x2, 0x0) 420.212765ms ago: executing program 9 (id=4831): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)) 0s ago: executing program 0 (id=4833): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) ioctl$UI_SET_FFBIT(0xffffffffffffffff, 0x4004556b, 0x50) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='.\x00', 0x400017e) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf25fc000000000000000000000000000001fe80004000000000000000000000e6fa00000004000000000a006080", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) kernel console output (not intermixed with test programs): man_adv: batadv0: Adding interface: batadv_slave_0 [ 774.145856][T22200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.244239][T22200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.333614][T22200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.379505][T22200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.483262][T22200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 775.225172][T22200] device hsr_slave_0 entered promiscuous mode [ 775.246377][T22200] device hsr_slave_1 entered promiscuous mode [ 775.291500][T22200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 775.361340][T22200] Cannot create hsr debugfs directory [ 775.782423][T22305] device syzkaller0 entered promiscuous mode [ 776.049434][T20822] Bluetooth: hci3: command 0x041b tx timeout [ 776.131185][T22320] tipc: Started in network mode [ 776.137297][T22320] tipc: Node identity 4, cluster identity 4711 [ 776.153801][T22320] tipc: Node number set to 4 [ 776.168767][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3687'. [ 779.443819][ T4196] Bluetooth: hci3: command 0x040f tx timeout [ 779.823069][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 779.830252][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 780.376969][T22200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 780.480052][T22200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 780.561376][T22200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 780.672741][T22200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 780.712598][T22360] batman_adv: batadv0: Adding interface: dummy0 [ 780.739209][T22360] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 780.815983][T22360] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 780.896633][ T4295] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.045281][ T4295] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.093796][T22371] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3699'. [ 781.144471][ T4295] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.145217][T22350] loop1: detected capacity change from 0 to 32768 [ 781.236960][T22350] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 781.268718][ T4295] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.321287][T22200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.345397][T22350] JBD2: Ignoring recovery information on journal [ 781.362736][T22378] netlink: 'syz.2.3701': attribute type 1 has an invalid length. [ 781.441018][T22350] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 781.485369][T22386] bond3: (slave gretap1): making interface the new active one [ 781.494825][T22386] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 781.536856][T22378] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 781.610797][T22384] netlink: 1319 bytes leftover after parsing attributes in process `syz.0.3702'. [ 781.666131][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 781.675372][ T4233] Bluetooth: hci3: command 0x0419 tx timeout [ 781.676843][T22350] (syz.1.3691,22350,1):ocfs2_read_blocks:239 ERROR: status = -12 [ 781.703630][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 781.745690][T22350] (syz.1.3691,22350,1):ocfs2_trim_mainbm:7603 ERROR: status = -12 [ 781.752820][T22200] 8021q: adding VLAN 0 to HW filter on device team0 [ 781.814720][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 781.851287][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 781.881173][T18931] ocfs2: Unmounting device (7,1) on (node local) [ 781.931951][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.939569][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 781.939647][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.998628][T22399] bridge0: port 3(team0) entered disabled state [ 782.005335][T22399] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.046548][T22403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 782.062503][ T5968] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 782.074859][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 782.097065][ C0] vkms_vblank_simulate: vblank timer overrun [ 782.104724][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 782.180387][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 782.222770][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.230593][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 782.324289][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 782.450175][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 782.464647][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 782.511337][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 782.520968][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 782.531411][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 782.540661][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 782.550464][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 783.596176][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 783.608981][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 783.617948][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 783.632710][T22412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3710'. [ 783.644625][ T5968] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.655196][ T5968] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 783.674061][T22424] loop1: detected capacity change from 0 to 16 [ 783.677441][ T5968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.706578][T22424] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 784.055347][ T5968] usb 4-1: config 0 descriptor?? [ 784.112854][ T5968] pwc: Askey VC010 type 2 USB webcam detected. [ 784.316666][ T4232] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 784.387155][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.476498][ T4295] bond1: (slave ip6gretap1): Removing an active aggregator [ 784.509191][ T4295] bond1: (slave ip6gretap1): Releasing backup interface [ 784.537383][T22450] netlink: 1319 bytes leftover after parsing attributes in process `syz.2.3715'. [ 784.580275][T22200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.598376][ T5968] pwc: recv_control_msg error -32 req 02 val 2b00 [ 784.606275][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 784.617551][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 784.631175][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 784.648466][T22457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3716'. [ 784.664883][ T5968] pwc: recv_control_msg error -32 req 02 val 2700 [ 784.707001][ T5968] pwc: recv_control_msg error -32 req 02 val 2c00 [ 784.762424][ T5968] pwc: recv_control_msg error -32 req 04 val 1000 [ 784.793798][ T4232] usb 2-1: config 0 has no interfaces? [ 784.799678][ T4232] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 784.823917][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.825986][ T5968] pwc: recv_control_msg error -32 req 04 val 1300 [ 784.857956][ T4232] usb 2-1: config 0 descriptor?? [ 784.868054][ T26] audit: type=1326 audit(1777940478.087:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 784.894006][ C0] vkms_vblank_simulate: vblank timer overrun [ 784.912714][ T5968] pwc: recv_control_msg error -32 req 04 val 1400 [ 784.913129][T22466] netlink: 'syz.0.3717': attribute type 1 has an invalid length. [ 784.930090][ T26] audit: type=1326 audit(1777940478.124:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 784.962996][ T26] audit: type=1326 audit(1777940478.124:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 784.992218][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.001835][ T5968] pwc: recv_control_msg error -32 req 02 val 2000 [ 785.051093][T22468] bond4: (slave gretap3): making interface the new active one [ 785.052397][ T26] audit: type=1326 audit(1777940478.124:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.064468][ T5968] pwc: recv_control_msg error -32 req 02 val 2100 [ 785.115595][T22468] bond4: (slave gretap3): Enslaving as an active interface with an up link [ 785.127794][ T26] audit: type=1326 audit(1777940478.124:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.134183][T22471] bond4: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 785.163902][ T4404] usb 2-1: USB disconnect, device number 16 [ 785.183087][ T26] audit: type=1326 audit(1777940478.124:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.229742][ T26] audit: type=1326 audit(1777940478.124:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.256949][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.267322][ T26] audit: type=1326 audit(1777940478.124:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.294961][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.312478][ T26] audit: type=1326 audit(1777940478.124:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.351520][ T26] audit: type=1326 audit(1777940478.124:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22465 comm="syz.2.3718" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fdf6a1b6dd9 code=0x7ffc0000 [ 785.380381][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.487331][ T5968] pwc: recv_control_msg error -71 req 02 val 2500 [ 785.530408][ T5968] pwc: recv_control_msg error -71 req 02 val 2400 [ 785.860976][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 785.986989][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 786.539773][ T5968] pwc: recv_control_msg error -71 req 02 val 2600 [ 786.606257][T22494] loop1: detected capacity change from 0 to 512 [ 786.626940][ T5968] pwc: recv_control_msg error -71 req 02 val 2900 [ 786.682520][ T5968] pwc: recv_control_msg error -71 req 02 val 2800 [ 786.733421][ T5968] pwc: recv_control_msg error -71 req 04 val 1100 [ 786.765918][ T5968] pwc: recv_control_msg error -71 req 04 val 1200 [ 786.822229][T22200] device veth0_vlan entered promiscuous mode [ 786.842653][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 786.855330][ T5968] pwc: Registered as video103. [ 786.886745][ T5968] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 786.896020][T22494] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 786.909705][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 787.305025][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 787.355287][T22494] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 787.741982][ T1107] Bluetooth: hci1: command 0x0406 tx timeout [ 787.765198][ T5968] usb 4-1: USB disconnect, device number 23 [ 787.975067][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 787.988878][T22200] device veth1_vlan entered promiscuous mode [ 788.006812][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 788.030456][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 789.236250][T22517] tipc: Started in network mode [ 789.256183][T22517] tipc: Node identity 4, cluster identity 4711 [ 789.337366][T22517] tipc: Node number set to 4 [ 789.373158][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.409451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.854293][T22200] device veth0_macvtap entered promiscuous mode [ 789.968168][T22200] device veth1_macvtap entered promiscuous mode [ 790.542949][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 790.585880][T22200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.635021][T22200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.702209][T22200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.711013][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 790.751367][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 790.986923][T22200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.059167][T22200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.069768][T22200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.081562][T22200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.092101][T22200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 791.226681][T22200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 791.463543][T22200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 792.015864][T22200] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.025341][T22200] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.076651][T22200] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.086607][T22200] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.244366][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 792.261639][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 794.170006][T22570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.304584][T22570] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.315786][T22570] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.334891][T22570] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.357138][T22570] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 794.444750][T22570] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.455824][T22570] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.464880][T22570] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.474582][T22570] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 794.663712][ T4295] device hsr_slave_0 left promiscuous mode [ 794.670810][ T4295] device hsr_slave_1 left promiscuous mode [ 794.704228][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.726977][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.755028][T22616] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 794.784268][ T4295] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.852397][ T4295] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.888477][ T4295] device bridge_slave_1 left promiscuous mode [ 794.905681][ T4295] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.915283][ T4295] device bridge_slave_0 left promiscuous mode [ 794.931581][ T4295] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.984014][ T4295] device veth1_macvtap left promiscuous mode [ 795.055361][ T4295] device veth0_macvtap left promiscuous mode [ 795.090328][ T4295] device veth1_vlan left promiscuous mode [ 795.154855][ T4295] device veth0_vlan left promiscuous mode [ 795.891697][T22647] loop1: detected capacity change from 0 to 32768 [ 795.948749][T22647] (syz.1.3751,22647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 795.967173][T22647] (syz.1.3751,22647,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 795.981259][ T4295] bond2 (unregistering): Released all slaves [ 796.056196][T22647] JBD2: Ignoring recovery information on journal [ 796.098989][ T4295] bond1 (unregistering): Released all slaves [ 796.144010][T22647] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 796.635773][ T4295] team0 (unregistering): Port device team_slave_1 removed [ 796.658492][ T4295] team0 (unregistering): Port device team_slave_0 removed [ 796.677742][ T4295] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.716545][T18931] ocfs2: Unmounting device (7,1) on (node local) [ 796.724243][ T4295] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.950275][ T4295] bond0 (unregistering): Released all slaves [ 797.242019][T22665] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3754'. [ 797.253310][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.495759][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.850081][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 798.310935][ T8596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.325483][ T8596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.368959][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 798.651737][ T4232] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 801.451457][ T4417] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 801.545352][ T4232] usb 4-1: unable to read config index 0 descriptor/all [ 801.558355][ T4232] usb 4-1: can't read configurations, error -71 [ 801.798547][ T4417] usb 7-1: Using ep0 maxpacket: 32 [ 801.949881][ T4417] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 801.958781][ T4417] usb 7-1: config 0 has no interface number 0 [ 802.217605][ T4417] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 802.248492][ T4417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 802.279217][ T4417] usb 7-1: Product: syz [ 802.283609][ T4417] usb 7-1: Manufacturer: syz [ 802.288444][ T4417] usb 7-1: SerialNumber: syz [ 802.321791][ T4417] usb 7-1: config 0 descriptor?? [ 802.405908][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 802.405930][ T26] audit: type=1804 audit(1777940750.267:623): pid=22723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.3765" name="bus" dev="ramfs" ino=104780 res=1 errno=0 [ 802.460596][ T4417] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 802.531482][ T26] audit: type=1804 audit(1777940750.304:624): pid=22723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.3765" name="bus" dev="ramfs" ino=104780 res=1 errno=0 [ 802.688805][ T4417] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 802.764710][ T4417] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 803.198391][ T1107] usb 7-1: USB disconnect, device number 8 [ 803.206753][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 803.235390][ T1107] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 803.458114][ T1107] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 803.483751][ T1107] quatech2 7-1:0.51: device disconnected [ 804.799913][ T1107] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 805.224027][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.254649][ T1107] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 805.284837][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.342406][ T1107] usb 7-1: config 0 descriptor?? [ 805.732081][ T1107] usbhid 7-1:0.0: can't add hid device: -71 [ 805.748888][ T1107] usbhid: probe of 7-1:0.0 failed with error -71 [ 805.784954][ T1107] usb 7-1: USB disconnect, device number 9 [ 806.312018][ T1107] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 806.455144][T22795] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 806.463862][T22795] IPv6: NLM_F_CREATE should be set when creating new route [ 806.496708][T22795] netlink: 'syz.1.3780': attribute type 4 has an invalid length. [ 806.599119][ T1107] usb 7-1: Using ep0 maxpacket: 32 [ 806.729468][ T1107] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.768368][ T1107] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 806.847667][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.934354][ T1107] usb 7-1: config 0 descriptor?? [ 807.016610][ T1107] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 807.134461][ T1107] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 808.214710][ T1107] usb 7-1: USB disconnect, device number 10 [ 808.226817][ T1107] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 808.293787][T22810] device syzkaller0 entered promiscuous mode [ 808.338429][ T26] audit: type=1326 audit(1777940755.739:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22811 comm="syz.3.3784" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f537453add9 code=0x0 [ 810.032990][T22844] loop6: detected capacity change from 0 to 2048 [ 810.534175][T22844] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 810.678618][T22200] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 810.943746][T22867] loop3: detected capacity change from 0 to 32768 [ 811.032447][T22867] (syz.3.3796,22867,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 811.053634][T22867] (syz.3.3796,22867,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 811.092599][T22867] JBD2: Ignoring recovery information on journal [ 811.160853][T22867] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 811.686213][T19520] ocfs2: Unmounting device (7,3) on (node local) [ 816.088900][T22964] netlink: 'syz.3.3814': attribute type 4 has an invalid length. [ 816.939795][T22958] infiniband syz0: set down [ 817.490966][T22958] infiniband syz0: added ipvlan0 [ 817.742022][T22958] RDS/IB: syz0: added [ 817.746598][T22958] smc: adding ib device syz0 with port count 1 [ 817.819078][T22958] smc: ib device syz0 port 1 has pnetid [ 819.055417][T22990] loop3: detected capacity change from 0 to 4096 [ 820.133655][T22999] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 820.207777][T23001] device team0 left promiscuous mode [ 820.213652][T23001] device team_slave_0 left promiscuous mode [ 820.220718][T23001] device team_slave_1 left promiscuous mode [ 820.228212][T23001] bridge0: port 3(team0) entered disabled state [ 820.260566][ T26] audit: type=1800 audit(1777940766.747:626): pid=22990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3820" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 820.299784][T23001] device bridge_slave_0 left promiscuous mode [ 820.311879][T23001] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.388290][T23001] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.411310][ T26] audit: type=1800 audit(1777940766.876:627): pid=23004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3820" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 820.458630][T23001] bond0: (slave bond_slave_0): Releasing backup interface [ 820.530294][T23001] bond0: (slave bond_slave_1): Releasing backup interface [ 820.568947][T23001] team0: Failed to send options change via netlink (err -105) [ 820.604971][T23001] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 820.664749][T23001] team0: Port device team_slave_0 removed [ 820.767346][T23001] team0: Failed to send options change via netlink (err -105) [ 820.783517][T23001] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 820.795860][T23001] team0: Port device team_slave_1 removed [ 820.809636][T23001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.827765][T23001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.839200][T23001] bond1: (slave gretap1): Releasing active interface [ 820.864922][T23001] team0: Failed to send options change via netlink (err -105) [ 820.878959][T23001] team0: Failed to send port change of device bridge2 via netlink (err -105) [ 820.891989][T23001] team0: Port device bridge2 removed [ 820.908099][T23001] bond3: (slave veth1): Releasing active interface [ 820.930838][T23001] bond4: (slave gretap3): Releasing active interface [ 820.935118][T23008] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3824'. [ 820.975562][T23003] team0: Failed to send options change via netlink (err -105) [ 821.001354][T23003] team0: Mode changed to "loadbalance" [ 821.021976][T23011] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3824'. [ 821.956411][T23026] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 824.052932][T23053] netlink: 'syz.2.3834': attribute type 4 has an invalid length. [ 824.233643][T23059] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 824.241690][T23059] IPv6: NLM_F_CREATE should be set when creating new route [ 824.923915][T23059] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.932568][T23059] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.407864][T23059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.448709][T23059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.832348][T23059] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.842085][T23059] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.852368][T23059] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.863501][T23059] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 827.721933][T14219] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 828.155589][T14219] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 828.176532][T14219] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.223417][T14219] usb 7-1: config 0 descriptor?? [ 828.309662][T14219] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 829.124077][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 829.196009][T23179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 829.466843][T23192] VFS: Mount too revealing [ 829.495619][T23192] VFS: Mount too revealing [ 830.063166][T23209] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 830.182415][T14219] gspca_stv06xx: HDCS-1020 sensor detected [ 830.540223][T14219] STV06xx: probe of 7-1:0.0 failed with error -71 [ 831.031389][T14219] usb 7-1: USB disconnect, device number 11 [ 831.059716][T23213] loop1: detected capacity change from 0 to 256 [ 831.400097][T23228] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3870'. [ 831.853706][T23256] loop3: detected capacity change from 0 to 256 [ 831.930426][T23256] exfat: Deprecated parameter 'utf8' [ 831.940328][T23256] exfat: Deprecated parameter 'namecase' [ 831.956001][T23256] exfat: Deprecated parameter 'namecase' [ 831.968232][T23256] exfat: Deprecated parameter 'utf8' [ 832.071939][T23256] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 832.817500][T23283] loop6: detected capacity change from 0 to 4096 [ 832.908916][T23283] EXT4-fs (loop6): inline encryption not supported [ 832.924392][T23283] EXT4-fs (loop6): Test dummy encryption mode enabled [ 832.970576][T23283] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a042c019, mo2=0003] [ 832.984608][T23289] 8021q: adding VLAN 0 to HW filter on device bond5 [ 832.999208][T23283] System zones: 0-5 [ 833.037924][T23283] EXT4-fs (loop6): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,nombcache,barrier,nodelalloc,,errors=continue. Quota mode: writeback. [ 833.082979][T23295] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 833.147319][T23295] bond5: (slave macvlan2): Enslaving as an active interface with a down link [ 833.705272][T23315] netlink: 'syz.2.3889': attribute type 4 has an invalid length. [ 833.922198][T23317] loop1: detected capacity change from 0 to 2048 [ 834.036395][T14577] loop1: p2 p3 < > p4 < p5 > [ 834.047322][T14577] loop1: partition table partially beyond EOD, truncated [ 834.117608][T14577] loop1: p2 start 53543428 is beyond EOD, truncated [ 834.130692][T23283] netlink: 276 bytes leftover after parsing attributes in process `syz.6.3884'. [ 834.134819][T14577] loop1: p3 start 4284289 is beyond EOD, truncated [ 834.173862][T14577] loop1: p5 start 53543428 is beyond EOD, truncated [ 834.220505][T23317] loop1: p2 p3 < > p4 < p5 > [ 834.225790][T23317] loop1: partition table partially beyond EOD, truncated [ 834.259279][T23317] loop1: p2 start 53543428 is beyond EOD, truncated [ 834.286654][T23317] loop1: p3 start 4284289 is beyond EOD, truncated [ 834.319857][T23317] loop1: p5 start 53543428 is beyond EOD, truncated [ 834.533150][T14577] udevd[14577]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 834.683008][T14577] udevd[14577]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 834.706787][T23340] overlayfs: overlapping lowerdir path [ 836.147658][T23352] loop1: detected capacity change from 0 to 131072 [ 836.277552][T23352] F2FS-fs (loop1): invalid crc value [ 836.316303][T23352] F2FS-fs (loop1): Found nat_bits in checkpoint [ 836.440827][T23352] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2 [ 836.460677][T23352] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 836.984380][T23353] chnl_net:caif_netlink_parms(): no params data found [ 837.279250][T23405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3909'. [ 837.319095][T23405] device lo entered promiscuous mode [ 837.371142][T23405] device tunl0 entered promiscuous mode [ 837.393288][T23405] device gre0 entered promiscuous mode [ 837.428613][T23405] device gretap0 entered promiscuous mode [ 837.450669][T23405] device erspan0 entered promiscuous mode [ 837.473261][T23405] device ip_vti0 entered promiscuous mode [ 837.494259][T23405] device ip6_vti0 entered promiscuous mode [ 837.516847][T23405] device sit0 entered promiscuous mode [ 837.519246][ T1107] Bluetooth: hci1: command 0x0409 tx timeout [ 837.538497][T23405] device ip6tnl0 entered promiscuous mode [ 837.562538][T23405] device ip6gre0 entered promiscuous mode [ 837.612796][T23405] device ip6gretap0 entered promiscuous mode [ 837.637376][T23405] device vcan0 entered promiscuous mode [ 837.650694][T23405] device bond0 entered promiscuous mode [ 837.666345][T23405] device bond_slave_0 entered promiscuous mode [ 837.701308][T23405] device team0 entered promiscuous mode [ 837.725497][T23405] device team_slave_0 entered promiscuous mode [ 837.757712][T23405] device team_slave_1 entered promiscuous mode [ 837.787509][T23405] device dummy0 entered promiscuous mode [ 837.819025][T23405] device nlmon0 entered promiscuous mode [ 837.844381][T23405] device 60X entered promiscuous mode [ 837.872474][T23405] device batadv0 entered promiscuous mode [ 837.901249][T23405] device veth0 entered promiscuous mode [ 837.934809][T23405] device veth1 entered promiscuous mode [ 837.959889][T23405] device wg0 entered promiscuous mode [ 838.004193][T23405] device wg1 entered promiscuous mode [ 838.023189][T23405] device wg2 entered promiscuous mode [ 838.042267][T23405] device veth0_to_bridge entered promiscuous mode [ 838.067265][T23405] device bridge_slave_0 entered promiscuous mode [ 838.118058][T23405] device veth1_to_bridge entered promiscuous mode [ 838.147814][T23405] device bridge_slave_1 entered promiscuous mode [ 838.170899][T23405] device veth0_to_bond entered promiscuous mode [ 838.199846][T23405] device veth0_to_team entered promiscuous mode [ 838.234662][T23405] device veth1_to_team entered promiscuous mode [ 838.246115][T23405] device veth0_to_batadv entered promiscuous mode [ 838.253009][T23405] device veth1_to_batadv entered promiscuous mode [ 838.310442][T23405] device batadv_slave_1 entered promiscuous mode [ 838.350391][T23405] device xfrm0 entered promiscuous mode [ 838.379015][T23405] device veth0_to_hsr entered promiscuous mode [ 838.414759][T23405] device veth1_to_hsr entered promiscuous mode [ 838.429672][T23405] device hsr0 entered promiscuous mode [ 838.440518][T23405] device veth1_virt_wifi entered promiscuous mode [ 838.458346][T23405] device veth0_virt_wifi entered promiscuous mode [ 838.469278][T23405] device virt_wifi0 entered promiscuous mode [ 838.486965][T23405] device vlan0 entered promiscuous mode [ 838.515043][T23405] device vlan1 entered promiscuous mode [ 838.525996][T23405] device macvlan0 entered promiscuous mode [ 838.569567][T23405] device macvlan1 entered promiscuous mode [ 838.597985][T23405] device ipvlan0 entered promiscuous mode [ 838.626923][T23405] device ipvlan1 entered promiscuous mode [ 838.633576][T23405] device macvtap0 entered promiscuous mode [ 838.668028][T23405] device macsec0 entered promiscuous mode [ 838.693386][T23405] device geneve0 entered promiscuous mode [ 838.700233][T23405] device geneve1 entered promiscuous mode [ 838.709261][T23405] device netdevsim0 entered promiscuous mode [ 838.734562][T23405] device netdevsim1 entered promiscuous mode [ 838.742418][T23405] device netdevsim2 entered promiscuous mode [ 838.759877][T23405] device netdevsim3 entered promiscuous mode [ 838.777447][T23405] device wlan0 entered promiscuous mode [ 838.783450][T23405] device wlan1 entered promiscuous mode [ 838.843281][T23405] device bridge0 entered promiscuous mode [ 838.856836][T23405] device bridge2 entered promiscuous mode [ 838.867648][T23405] device macvlan2 entered promiscuous mode [ 838.882054][T23405] device vxcan2 entered promiscuous mode [ 838.896834][T23405] device vxcan3 entered promiscuous mode [ 838.909079][T23405] device bond2 entered promiscuous mode [ 838.923022][T23405] device veth2 entered promiscuous mode [ 838.937291][T23405] device veth3 entered promiscuous mode [ 838.945056][T23405] device pimreg3 entered promiscuous mode [ 838.951811][T23405] device bond3 entered promiscuous mode [ 838.957402][T23405] device gretap1 entered promiscuous mode [ 838.984080][ T4295] device hsr_slave_0 left promiscuous mode [ 839.040128][ T4295] device hsr_slave_1 left promiscuous mode [ 839.059910][ T4295] batman_adv: batadv0: Removing interface: dummy0 [ 839.311013][ T4295] bond1 (unregistering): Released all slaves [ 839.528172][ T4295] bond0 (unregistering): Released all slaves [ 839.632589][ T1107] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 839.685342][T23353] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.724704][T23353] bridge0: port 1(bridge_slave_0) entered disabled state [ 839.752914][T23353] device bridge_slave_0 entered promiscuous mode [ 839.762927][T14219] Bluetooth: hci1: command 0x041b tx timeout [ 839.785791][T23353] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.792913][T23353] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.847956][T23353] device bridge_slave_1 entered promiscuous mode [ 840.709674][T23353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 840.763741][T23353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 840.803401][ T1107] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 840.826867][ T1107] usb 2-1: config 0 has an invalid interface number: 21 but max is 0 [ 840.843386][ T1107] usb 2-1: config 0 has no interface number 0 [ 840.854816][T23467] loop6: detected capacity change from 0 to 256 [ 840.863576][ T1107] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 840.905190][ T1107] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 840.908426][T23353] team0: Port device team_slave_0 added [ 840.941596][ T1107] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 840.998984][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.037455][ T1107] usb 2-1: config 0 descriptor?? [ 841.044263][T23353] team0: Port device team_slave_1 added [ 841.206096][T23353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 841.213133][T23353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.300228][T23353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 841.313717][T23353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 841.321181][T23353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 841.362915][T23477] x_tables: duplicate entry at hook 1 [ 841.377658][T23353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 841.557582][T23486] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 841.683419][T23353] device hsr_slave_0 entered promiscuous mode [ 841.705480][T23353] device hsr_slave_1 entered promiscuous mode [ 841.733283][T23353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 841.761949][T23353] Cannot create hsr debugfs directory [ 841.889868][ T1107] usb 2-1: USB disconnect, device number 17 [ 842.089821][ T4965] Bluetooth: hci1: command 0x040f tx timeout [ 842.511272][T23518] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 844.368669][ T4233] Bluetooth: hci1: command 0x0419 tx timeout [ 845.373360][T23353] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 845.438624][T23353] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 845.464846][T23353] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 845.485962][T23353] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 845.513456][T23527] loop1: detected capacity change from 0 to 32768 [ 845.587738][ T26] audit: type=1800 audit(1777940790.110:628): pid=23527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3937" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 845.616220][T23527] ERROR: (device loop1): dbAllocAG: Corrupt dmapctl page [ 845.616220][T23527] [ 845.650684][T23527] ERROR: (device loop1): remounting filesystem as read-only [ 846.180646][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 846.187411][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.466518][T23353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 847.057821][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 847.259711][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 847.352706][T23353] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.418176][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 847.428204][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 847.458270][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 847.465730][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 847.522787][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 847.561093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 847.599795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 847.616249][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 847.624007][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 847.655987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 847.890834][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 847.931203][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 847.946931][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 847.968953][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 847.999302][T23577] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 848.033984][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 848.046473][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 848.057833][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 848.068934][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 848.820949][T23353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.845872][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 848.885919][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 849.223313][T23584] overlayfs: failed to clone upperpath [ 850.469633][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 850.480743][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 850.481120][T23603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3961'. [ 850.514412][T23353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 850.628176][T23611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3961'. [ 850.932154][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 850.950789][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 850.998748][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 851.019095][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 851.052788][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 851.082436][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 851.092472][T23353] device veth0_vlan entered promiscuous mode [ 851.126306][T23353] device veth1_vlan entered promiscuous mode [ 851.192205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 851.212007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 851.222718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 851.247425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 851.302073][T23353] device veth0_macvtap entered promiscuous mode [ 851.320126][T23353] device veth1_macvtap entered promiscuous mode [ 851.363175][T23353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 851.378972][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 851.429906][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 851.482925][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 851.511655][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 851.540819][T23353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 851.560294][T23353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 851.637417][T23353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 851.667127][T23353] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.676438][T23353] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.688017][T23353] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.702117][T23353] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 851.737936][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 851.774504][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 851.855685][T23660] autofs4:pid:23660:autofs_fill_super: called with bogus options [ 852.833630][T23659] loop1: detected capacity change from 0 to 4096 [ 853.005003][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.096154][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 853.288334][ T26] audit: type=1800 audit(1777940797.131:629): pid=23659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3973" name="file1" dev="loop1" ino=33 res=0 errno=0 [ 853.720484][ T4241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 853.956849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 854.029451][ T4241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.084417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 854.305241][T23686] tipc: New replicast peer: 0.0.0.0 [ 854.312244][T23686] tipc: Enabled bearer , priority 10 [ 854.346276][T23686] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 855.590568][T23703] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 855.598068][T23703] IPv6: NLM_F_CREATE should be set when creating new route [ 855.605691][T23703] IPv6: NLM_F_CREATE should be set when creating new route [ 857.161604][T23731] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 857.242590][T23731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3992'. [ 857.414238][T23722] loop5: detected capacity change from 0 to 4096 [ 858.192319][T23741] overlayfs: failed to clone upperpath [ 858.203524][T23722] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 858.414473][T23722] ntfs3: loop5: failed to convert "0000" to iso8859-7 [ 858.419492][T23752] ntfs3: loop5: failed to convert "0000" to iso8859-7 [ 858.536228][T23752] ntfs3: loop5: failed to convert name for inode 1e. [ 858.536243][T23722] ntfs3: loop5: failed to convert name for inode 1e. [ 859.385255][T23775] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4002'. [ 859.758571][T23793] loop1: detected capacity change from 0 to 256 [ 862.646423][T23835] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.899900][T23842] netlink: 'syz.1.4018': attribute type 10 has an invalid length. [ 863.019171][T23842] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.027453][T23842] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.147134][T23842] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.154433][T23842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 863.162119][T23842] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.169804][T23842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.253942][T23842] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 863.326584][T23848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4018'. [ 863.348870][T23848] device bridge_slave_1 left promiscuous mode [ 863.355498][T23848] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.439819][T23848] device bridge_slave_0 left promiscuous mode [ 863.448628][T23848] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.061096][T23848] bond0: (slave bridge0): Releasing backup interface [ 866.138141][T23909] loop1: detected capacity change from 0 to 128 [ 866.240175][T23909] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 866.266208][T23916] xt_recent: hitcount (262144) is larger than allowed maximum (255) [ 866.275990][T23909] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 866.276463][T23916] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4034'. [ 866.341658][ T26] audit: type=1800 audit(1777940809.265:630): pid=23909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4032" name="file1" dev="loop1" ino=14 res=0 errno=0 [ 866.773129][T23937] loop5: detected capacity change from 0 to 512 [ 866.873086][T23937] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 866.932087][T23942] netlink: 'syz.2.4039': attribute type 29 has an invalid length. [ 866.953167][T23937] EXT4-fs (loop5): 1 truncate cleaned up [ 866.979338][T23937] EXT4-fs (loop5): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 867.002906][T23942] netlink: 'syz.2.4039': attribute type 29 has an invalid length. [ 867.018366][T23946] netlink: 'syz.2.4039': attribute type 29 has an invalid length. [ 867.205758][T23353] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 867.266713][T23353] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 867.307369][T23353] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 867.340212][T23353] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 867.396313][T23353] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 867.470151][T23353] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 867.513500][T23353] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 867.547801][T23353] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 867.618626][T23353] EXT4-fs error (device loop5): ext4_readdir:263: inode #11: block 54: comm syz-executor: path /9/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 867.697662][T23353] EXT4-fs error (device loop5): ext4_empty_dir:3177: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0 [ 868.646405][ T5634] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.699348][ T5634] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.795093][ T5634] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.880868][ T5634] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.177090][T24011] netlink: 399 bytes leftover after parsing attributes in process `syz.6.4053'. [ 870.412296][T24027] loop1: detected capacity change from 0 to 2048 [ 870.462417][T24027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 872.403700][ T26] audit: type=1326 audit(1777940814.826:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24033 comm="syz.0.4072" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f450226bdd9 code=0x7fc00000 [ 874.155153][ T4965] Bluetooth: hci1: command 0x0409 tx timeout [ 874.437279][T24068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 874.479752][T24071] device macvlan3 entered promiscuous mode [ 874.504889][T24071] device bond4 entered promiscuous mode [ 874.511120][T24071] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 874.556904][T24071] device bond4 left promiscuous mode [ 874.601880][T24031] chnl_net:caif_netlink_parms(): no params data found [ 874.626513][T24076] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4073'. [ 874.683317][ T5634] device hsr_slave_0 left promiscuous mode [ 874.698388][ T5634] device hsr_slave_1 left promiscuous mode [ 874.736340][ T5634] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 874.748947][ T5634] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 874.761791][ T5634] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 874.773885][ T5634] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.786670][ T5634] device bridge_slave_1 left promiscuous mode [ 874.793244][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.839102][ T5634] device bridge_slave_0 left promiscuous mode [ 874.862217][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.890187][ T5634] device veth1_macvtap left promiscuous mode [ 874.905365][ T5634] device veth0_macvtap left promiscuous mode [ 874.911715][ T5634] device veth1_vlan left promiscuous mode [ 874.925121][ T5634] device veth0_vlan left promiscuous mode [ 876.171853][ T5634] team0 (unregistering): Port device team_slave_1 removed [ 876.241935][ T5634] team0 (unregistering): Port device team_slave_0 removed [ 876.285520][ T5634] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 876.335331][ T5634] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 876.432690][ T5967] Bluetooth: hci1: command 0x041b tx timeout [ 876.497849][ T5634] bond0 (unregistering): Released all slaves [ 876.580049][T24093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4075'. [ 877.813671][T24121] loop1: detected capacity change from 0 to 256 [ 877.912025][T24121] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 878.107671][T24031] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.126755][T24125] netlink: 'syz.0.4080': attribute type 5 has an invalid length. [ 878.174943][T24031] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.252485][T24031] device bridge_slave_0 entered promiscuous mode [ 878.306019][T24031] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.341351][T24133] tipc: Failed to remove unknown binding: 66,0,0/0:2660374226/2660374228 [ 878.358215][T24031] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.427199][T24133] tipc: Failed to remove unknown binding: 66,0,0/0:2660374226/2660374227 [ 878.441528][T24031] device bridge_slave_1 entered promiscuous mode [ 878.475321][T24133] tipc: Failed to remove unknown binding: 66,0,0/0:2660374226/2660374228 [ 878.512763][T24133] tipc: Failed to remove unknown binding: 66,0,0/0:2660374226/2660374227 [ 878.611683][T24031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.684480][T24141] sch_fq: defrate 53322 ignored. [ 878.696451][ T4965] Bluetooth: hci1: command 0x040f tx timeout [ 878.715838][T24031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.850498][T24151] loop1: detected capacity change from 0 to 16 [ 878.920735][T24151] erofs: (device loop1): mounted with root inode @ nid 36. [ 878.983234][T24031] team0: Port device team_slave_0 added [ 879.098363][T24031] team0: Port device team_slave_1 added [ 879.203914][T24031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.228775][T24031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.335633][T24031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.396473][T24031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.425542][T24031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 879.510501][T24031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.705637][T24031] device hsr_slave_0 entered promiscuous mode [ 880.820833][T24031] device hsr_slave_1 entered promiscuous mode [ 880.831372][T24031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 880.881148][T24031] Cannot create hsr debugfs directory [ 880.938981][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 881.109371][T24181] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 881.161153][T24181] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 881.283787][T24181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 881.284023][T24181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 881.408716][T24181] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 883.308822][T24175] siw: device registration error -23 [ 884.783128][T24031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 884.880937][T24031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 884.994046][T24031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 886.069940][T24031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 886.637537][T24031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.671605][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 886.891574][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 886.968303][ T26] audit: type=1326 audit(1777940828.305:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24268 comm="syz.0.4106" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f450226bdd9 code=0x0 [ 887.679434][T24031] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.754727][T24273] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4109'. [ 887.772614][T24273] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 887.803472][T24273] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (68719607821) [ 887.827173][T24286] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 887.851684][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 887.901703][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 887.918229][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.925657][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 888.013058][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 888.033549][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 888.998882][ T6096] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.006201][ T6096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.076031][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 889.146382][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 889.159068][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 889.197800][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 889.204817][T24303] loop1: detected capacity change from 0 to 256 [ 889.260543][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 889.304475][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 889.345391][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 889.361098][T24303] exFAT-fs (loop1): hint_cluster is invalid (17) [ 889.373657][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 889.389820][T24303] exFAT-fs (loop1): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 889.436110][T24031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 889.441893][T24303] exFAT-fs (loop1): Filesystem has been set read-only [ 889.479137][T24031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 889.516002][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 889.533440][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 889.553383][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 889.585843][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 889.671123][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 890.104415][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 890.124043][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 890.180613][T24031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.223431][T24332] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4122'. [ 892.190347][T24362] team0 (unregistering): Port device team_slave_0 removed [ 892.261339][T24362] team0 (unregistering): Failed to send options change via netlink (err -105) [ 892.316467][T24362] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 892.416877][T24362] team0 (unregistering): Port device team_slave_1 removed [ 892.463794][T24362] team0 (unregistering): Failed to send options change via netlink (err -105) [ 892.502957][T24362] team0 (unregistering): Failed to send port change of device bridge1 via netlink (err -105) [ 892.591433][T24362] team0 (unregistering): Port device bridge1 removed [ 892.733788][T24364] netlink: 'syz.1.4130': attribute type 12 has an invalid length. [ 892.767670][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 892.785512][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 892.890598][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 892.909357][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 892.956136][T24031] device veth0_vlan entered promiscuous mode [ 893.004868][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 893.026004][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 893.216857][T24031] device veth1_vlan entered promiscuous mode [ 893.322817][T24407] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 894.393771][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 894.402307][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 894.420103][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 894.433542][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 894.446041][T24031] device veth0_macvtap entered promiscuous mode [ 894.475057][T24425] netlink: 'syz.2.4145': attribute type 4 has an invalid length. [ 894.526238][T24031] device veth1_macvtap entered promiscuous mode [ 894.536311][T24432] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4147'. [ 894.555545][T24425] netlink: 'syz.2.4145': attribute type 4 has an invalid length. [ 894.626650][T24031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.719008][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 894.729031][T24440] xt_hashlimit: size too large, truncated to 1048576 [ 894.737009][T24440] xt_hashlimit: invalid rate [ 894.750498][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 894.845588][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 895.327240][T24031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 895.385407][T24031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 895.397553][T24031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 895.424951][T24442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'. [ 895.461161][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 895.476500][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 895.533933][T24031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.558478][T24031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.583864][T24031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.593265][T24031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 895.858544][ T6096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 895.879391][ T6096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 895.942396][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 896.414454][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 896.466515][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.676454][T24489] netlink: 399 bytes leftover after parsing attributes in process `syz.2.4158'. [ 898.805253][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 899.343014][T24503] overlayfs: statfs failed on './file0' [ 899.404075][T24504] netlink: 148 bytes leftover after parsing attributes in process `syz.0.4169'. [ 899.558800][T24511] device dummy0 entered promiscuous mode [ 899.572958][T24511] device macvlan2 entered promiscuous mode [ 899.593364][ T4201] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 899.604454][ T4201] CPU: 1 PID: 4201 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 899.612394][ T4201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 899.623255][ T4201] Workqueue: hci3 hci_rx_work [ 899.628329][ T4201] Call Trace: [ 899.631727][ T4201] [ 899.634685][ T4201] dump_stack_lvl+0x188/0x250 [ 899.640953][ T4201] ? show_regs_print_info+0x20/0x20 [ 899.646994][ T4201] ? load_image+0x400/0x400 [ 899.652371][ T4201] sysfs_create_dir_ns+0x26a/0x290 [ 899.658258][ T4201] ? sysfs_warn_dup+0xa0/0xa0 [ 899.664155][ T4201] ? process_one_work+0x85f/0x1010 [ 899.669407][ T4201] ? do_raw_spin_unlock+0x11d/0x230 [ 899.674853][ T4201] kobject_add_internal+0x6e0/0xd90 [ 899.680548][ T4201] kobject_add+0x160/0x230 [ 899.685784][ T4201] ? kobject_init+0x1d0/0x1d0 [ 899.690559][ T4201] ? klist_children_get+0x50/0x50 [ 899.696489][ T4201] ? get_device_parent+0x121/0x3f0 [ 899.701904][ T4201] device_add+0x483/0xfb0 [ 899.707272][ T4201] hci_conn_add_sysfs+0xd1/0x1e0 [ 899.712876][ T4201] le_conn_complete_evt+0xc48/0x15c0 [ 899.719115][ T4201] ? cs_le_create_conn+0x5e0/0x5e0 [ 899.725930][ T4201] ? __mutex_trylock_common+0x155/0x260 [ 899.731792][ T4201] hci_le_meta_evt+0x285/0x3c90 [ 899.737030][ T4201] ? hci_event_packet+0x37b/0x1370 [ 899.742981][ T4201] ? __lock_acquire+0x7d10/0x7d10 [ 899.748907][ T4201] ? hci_remote_host_features_evt+0x280/0x280 [ 899.755360][ T4201] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 899.761591][ T4201] ? mark_lock+0x94/0x320 [ 899.766187][ T4201] ? mutex_unlock+0x10/0x10 [ 899.770881][ T4201] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 899.777132][ T4201] ? lock_chain_count+0x20/0x20 [ 899.782356][ T4201] ? __rwlock_init+0x140/0x140 [ 899.787145][ T4201] hci_event_packet+0xe48/0x1370 [ 899.792192][ T4201] ? lockdep_hardirqs_on+0x94/0x140 [ 899.797668][ T4201] ? rcu_lock_release+0x20/0x20 [ 899.802630][ T4201] ? hci_send_to_monitor+0x9c/0x4a0 [ 899.808010][ T4201] hci_rx_work+0x255/0xa10 [ 899.812714][ T4201] process_one_work+0x85f/0x1010 [ 899.817791][ T4201] ? worker_detach_from_pool+0x240/0x240 [ 899.823519][ T4201] ? lockdep_hardirqs_off+0x70/0x100 [ 899.828932][ T4201] ? _raw_spin_lock_irq+0xb7/0xf0 [ 899.834323][ T4201] ? _raw_spin_lock_irqsave+0x100/0x100 [ 899.839964][ T4201] ? wq_worker_running+0x97/0x170 [ 899.845261][ T4201] worker_thread+0xaa6/0x1290 [ 899.850156][ T4201] kthread+0x436/0x520 [ 899.854295][ T4201] ? rcu_lock_release+0x20/0x20 [ 899.859525][ T4201] ? kthread_blkcg+0xd0/0xd0 [ 899.864414][ T4201] ret_from_fork+0x1f/0x30 [ 899.869620][ T4201] [ 899.876075][ T4201] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 899.890536][ T4201] Bluetooth: hci3: failed to register connection device [ 899.927042][T24513] device lo left promiscuous mode [ 899.945581][T24513] device tunl0 left promiscuous mode [ 899.956794][T24513] device gre0 left promiscuous mode [ 899.968567][T24513] device gretap0 left promiscuous mode [ 899.986802][T24513] device erspan0 left promiscuous mode [ 899.999292][T24513] device ip_vti0 left promiscuous mode [ 900.007111][T24513] device ip6_vti0 left promiscuous mode [ 900.015160][T24513] device sit0 left promiscuous mode [ 900.025336][T24513] device ip6tnl0 left promiscuous mode [ 900.034172][T24513] device ip6gre0 left promiscuous mode [ 900.046178][T24513] device ip6gretap0 left promiscuous mode [ 900.054119][T24513] device vcan0 left promiscuous mode [ 900.112668][T24513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 900.225273][T24513] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 900.378818][T24513] device bond0 left promiscuous mode [ 900.390611][T24513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.282718][T24513] device dummy0 left promiscuous mode [ 901.325700][T24513] device nlmon0 left promiscuous mode [ 901.932072][T24513] device 60X left promiscuous mode [ 901.938839][T24513] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 904.507104][ T4419] Bluetooth: hci3: command 0x0406 tx timeout [ 904.689813][T24555] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4176'. [ 909.047639][T24596] netlink: 'syz.1.4184': attribute type 4 has an invalid length. [ 910.270890][T24611] loop1: detected capacity change from 0 to 164 [ 910.406508][ T26] audit: type=1326 audit(1777940849.944:633): auid=4294967295 uid=3171839 gid=0 ses=4294967295 subj=unconfined pid=24603 comm="syz.1.4189" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb391c4dd9 code=0x0 [ 913.293069][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 913.299827][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 919.902027][T24703] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000009 [ 919.948593][T24711] device veth0_vlan left promiscuous mode [ 919.979038][T24711] device veth0_vlan entered promiscuous mode [ 920.487257][ T4411] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 921.354107][ T4411] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 921.977592][ T4411] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 921.989637][ T4411] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 922.267744][ T4411] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.277984][ T4411] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.290093][ T4411] usb 2-1: Product: syz [ 922.294481][ T4411] usb 2-1: Manufacturer: syz [ 922.300496][ T4411] usb 2-1: SerialNumber: syz [ 923.180720][ T4411] cdc_mbim 2-1:1.0: skipping garbage [ 923.187702][ T4411] usb 2-1: selecting invalid altsetting 1 [ 923.206163][ T4411] cdc_mbim 2-1:1.0: bind() failure [ 923.216203][ T4411] usb 2-1: USB disconnect, device number 18 [ 923.268284][T24756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'. [ 923.452405][T24762] device ipip0 entered promiscuous mode [ 927.755294][T24795] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 928.538142][T24825] netlink: 550 bytes leftover after parsing attributes in process `syz.0.4241'. [ 928.828393][T24835] binder: 24832:24835 ioctl c0306201 200000000080 returned -14 [ 928.872110][T24835] binder: 24832:24835 ioctl c0306201 2000000003c0 returned -14 [ 930.679931][T24835] syz.1.4244 (24835): drop_caches: 2 [ 932.229606][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4252'. [ 932.319690][T24869] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.328707][T24869] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.337662][T24869] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.346800][T24869] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 932.540765][T24869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4252'. [ 936.874503][T24908] netlink: 'syz.2.4262': attribute type 10 has an invalid length. [ 937.461290][T24908] device wlan1 left promiscuous mode [ 937.582390][T24908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 937.606091][T24913] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 937.624202][T24914] binder: 24912:24914 ioctl c0306201 200000000080 returned -14 [ 937.685663][T24921] binder: BINDER_SET_CONTEXT_MGR already set [ 937.722464][T24921] binder: 24912:24921 ioctl 4018620d 200000000280 returned -16 [ 937.740412][T24914] binder: 24912:24914 ioctl c0306201 2000000003c0 returned -14 [ 937.761327][T24917] loop1: detected capacity change from 0 to 512 [ 937.834227][T24914] syz.4.4264 (24914): drop_caches: 2 [ 937.860203][T24917] EXT4-fs (loop1): Ignoring removed oldalloc option [ 937.942960][T24917] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 937.984878][T24929] 9pnet: p9_errstr2errno: server reported unknown error aaaaaaaaa [ 939.517507][T24984] device syzkaller0 entered promiscuous mode [ 941.919926][T25015] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 941.954769][T25014] ceph: No mds server is up or the cluster is laggy [ 942.886984][T25029] xt_CT: You must specify a L4 protocol and not use inversions on it [ 945.562915][T25075] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 945.757224][T25081] overlayfs: failed to look up (tracing) for ino (-66) [ 947.589291][T25095] overlayfs: failed to clone upperpath [ 947.750640][T25092] loop4: detected capacity change from 0 to 40427 [ 947.908775][T25100] : renamed from virt_wifi0 [ 951.087968][T25140] xt_CONNSECMARK: invalid mode: 66 [ 953.498132][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4327'. [ 954.531215][T25149] team0: Port device team_slave_0 removed [ 955.974785][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4337'. [ 957.070610][ T5634] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 957.363388][T25232] xt_policy: output policy not valid in PREROUTING and INPUT [ 957.776352][T25226] device syzkaller0 entered promiscuous mode [ 958.411789][ T5634] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.646093][ T5634] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 958.925425][ T5634] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 959.034325][T25259] IPVS: Error connecting to the multicast addr [ 959.346071][T25259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4350'. [ 962.045243][T25289] orangefs_mount: mount request failed with -4 [ 962.360470][ T5634] tipc: Left network mode [ 962.865799][T25331] can: request_module (can-proto-4) failed. [ 965.882342][T25361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4377'. [ 967.131940][ T26] audit: type=1107 audit(1777940901.918:634): pid=25371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 967.371865][T25390] device syzkaller0 entered promiscuous mode [ 967.480876][ T5634] device hsr_slave_0 left promiscuous mode [ 967.546186][ T5634] device hsr_slave_1 left promiscuous mode [ 967.667238][ T5634] bond2 (unregistering): Released all slaves [ 967.876546][ T5634] bond1 (unregistering): (slave veth1): Releasing active interface [ 967.929480][ T5634] bond1 (unregistering): Released all slaves [ 968.399149][ T5634] bond0 (unregistering): Released all slaves [ 968.549781][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 968.565746][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 969.101298][ T4419] Bluetooth: hci5: command 0x0409 tx timeout [ 969.134208][T25423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4388'. [ 970.598353][T25447] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4395'. [ 970.908391][T25448] loop4: detected capacity change from 0 to 512 [ 971.254038][T25377] chnl_net:caif_netlink_parms(): no params data found [ 971.323569][ T4411] Bluetooth: hci5: command 0x041b tx timeout [ 972.647822][T25377] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.758405][T25377] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.787293][T25377] device bridge_slave_0 entered promiscuous mode [ 972.905800][T25377] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.947125][T25377] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.974664][T25377] device bridge_slave_1 entered promiscuous mode [ 973.168119][T25377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.960666][T25377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.000150][ T2289] Bluetooth: hci5: command 0x040f tx timeout [ 974.121970][T25377] team0: Port device team_slave_0 added [ 974.157162][T25377] team0: Port device team_slave_1 added [ 974.261739][T25377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.306600][T25377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.457606][T25377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.471192][T25377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.479833][T25377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.547190][T25377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.724515][T25377] device hsr_slave_0 entered promiscuous mode [ 975.799364][T25377] device hsr_slave_1 entered promiscuous mode [ 975.842007][T25377] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.849727][T25377] Cannot create hsr debugfs directory [ 975.863748][T25516] loop4: detected capacity change from 0 to 512 [ 976.492640][ T4411] Bluetooth: hci5: command 0x0419 tx timeout [ 977.266215][T25534] netlink: 'syz.4.4414': attribute type 3 has an invalid length. [ 977.284202][T25534] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4414'. [ 979.377688][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 979.391290][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 980.134498][T25575] x_tables: unsorted underflow at hook 4 [ 980.796569][T25377] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 980.933808][T25377] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 981.034239][T25377] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 981.156109][T25377] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 981.387524][T25600] No such timeout policy "syz1" [ 982.233569][T25612] netlink: 'syz.2.4430': attribute type 13 has an invalid length. [ 982.339531][T25612] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 982.463545][T25620] device syzkaller0 entered promiscuous mode [ 982.504484][T25377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.671878][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 982.689478][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 982.725439][T25377] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.764961][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 982.799615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 982.820176][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.827512][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.958233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 982.988386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 983.004065][T25640] binder: BC_ACQUIRE_RESULT not supported [ 983.767606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 983.786877][T25645] loop4: detected capacity change from 0 to 128 [ 983.822544][T25640] binder: 25639:25640 ioctl c0306201 200000000240 returned -22 [ 983.857657][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.864972][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 985.391828][T25377] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 985.458166][T25377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 985.738532][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4439'. [ 985.754443][T25649] bond0: option arp_validate: invalid value (18446744072210219584) [ 985.924249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 985.943777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 985.955048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 986.855065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 986.873428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 986.883132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 986.892859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 986.902456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 987.385458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 987.432660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 987.441695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 987.451197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 987.856946][T25670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4444'. [ 988.116470][T25670] bridge5: port 1(veth3) entered blocking state [ 988.131425][T25670] bridge5: port 1(veth3) entered disabled state [ 988.164895][T25670] device veth3 entered promiscuous mode [ 988.220727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 988.264890][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 988.552764][T25377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 989.768837][T25689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 989.777263][T25689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 989.789638][T25689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.797645][T25689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 989.805676][T25689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 989.813505][T25689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 990.661499][T25711] netlink: 232 bytes leftover after parsing attributes in process `syz.4.4452'. [ 991.895968][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 991.913293][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 991.985695][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 992.017955][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 992.049414][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 992.064914][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 992.092030][T25377] device veth0_vlan entered promiscuous mode [ 992.163898][T25377] device veth1_vlan entered promiscuous mode [ 992.286361][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 992.297752][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 992.309012][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 992.321597][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 992.340304][T25377] device veth0_macvtap entered promiscuous mode [ 992.356937][T25377] device veth1_macvtap entered promiscuous mode [ 992.409541][T25377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 992.421497][T25377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.447493][T25377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.479606][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 992.505211][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 992.542270][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 992.565987][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 992.786185][T25377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.815554][T25377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 992.837075][T25377] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 992.880008][T25377] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 993.882394][T25377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 993.926880][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 993.936566][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 993.950581][T25377] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.963034][T25377] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.971969][T25377] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 993.986933][T25377] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 994.247144][ T8596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.249957][ T5634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 994.285312][ T8596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.287739][ T5634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 994.304973][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 994.315200][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 994.406313][T25774] device bridge1 entered promiscuous mode [ 997.576991][T25849] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4481'. [ 997.952826][T25857] loop8: detected capacity change from 0 to 40427 [ 998.047884][T25863] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4485'. [ 998.113219][T25857] F2FS-fs (loop8): invalid crc value [ 998.127601][T25857] F2FS-fs (loop8): Found nat_bits in checkpoint [ 998.186595][T25857] F2FS-fs (loop8): Start checkpoint disabled! [ 998.271216][T25857] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 1000.005905][ T9] attempt to access beyond end of device [ 1000.005905][ T9] loop8: rw=2049, want=45104, limit=40427 [ 1001.130412][T25900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1003.734847][ T4411] Bluetooth: hci1: command 0x0406 tx timeout [ 1005.987637][T25963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1006.006904][T25963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1006.038194][T25963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4507'. [ 1006.247880][ T4418] Bluetooth: hci2: command 0x0409 tx timeout [ 1008.180927][T25940] chnl_net:caif_netlink_parms(): no params data found [ 1008.228694][ T26] audit: type=1804 audit(1777940940.246:635): pid=25991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4516" name="file0" dev="hugetlbfs" ino=115178 res=1 errno=0 [ 1008.234322][T25989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4515'. [ 1008.274434][ T26] audit: type=1804 audit(1777940940.283:636): pid=25991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.4516" name="file0" dev="hugetlbfs" ino=115178 res=1 errno=0 [ 1008.501204][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 1008.526398][T25940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1008.554776][T25940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1008.583956][T25940] device bridge_slave_0 entered promiscuous mode [ 1008.687648][T25940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1008.712035][T25940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.724381][T25940] device bridge_slave_1 entered promiscuous mode [ 1008.775401][T25940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.809379][T25940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.858699][T25940] team0: Port device team_slave_0 added [ 1008.868512][T25940] team0: Port device team_slave_1 added [ 1008.894534][T25940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.902217][T25940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.943154][T25940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.972326][T25940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1008.979586][T25940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.029921][T25940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.098400][T25940] device hsr_slave_0 entered promiscuous mode [ 1009.127616][T25940] device hsr_slave_1 entered promiscuous mode [ 1009.137554][T25940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1009.151663][T26014] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[16322] was attempted by "$x`vOxH`CBn܀y>bwx\x1bL5? Cݭ8`dJg39T&tWCm<\x1bRby Vq/\x5cDw,XT,W[es\x0d1\x07^|;dg8 ꥛~u}Gg6W]MþlxM=Mh\x095$ZEO1Jc&OP5y9\x0dNiI<5Ўd\x22T*˘sx)ʯ\x22v:|M\x0a)\x0bꋻwRI ;HP?LtM[w̲S7&Q瑃Y=Nݝ\x22߆FSBҘRx9ʼnR_4~}e}xbH\x0d%DŽޑR]cÂx8m5'yZx^My=::UVvҼb8s\x0d0cAL=;k[iqKg@8Z\x22&iy?m9d<5]p2wA1Ȧ4qLctG9N_f2sop)^FISn08aS*ĒrX\x1b/\x22`Wrwr\x22!7X~ӰDEp7ehNk2Is,>r_<-!}jnW8-leÚQŒ6DgfrZ!V\x0b*>ħk?p>nU`IW \x1bD6\x5cjv(=}txp:Ԑގ_ս<‹('(tc(#2oڏ0xY4W.voDS\x0cX濩V,5a#zkPd0a [ 1009.181886][T25940] Cannot create hsr debugfs directory [ 1010.813437][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 1011.794507][T26058] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4525'. [ 1013.007481][ T4232] Bluetooth: hci2: command 0x0419 tx timeout [ 1013.104441][T25940] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1013.169128][T25940] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1013.234463][T25940] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1013.274569][T25940] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1013.843204][T25940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.935138][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1013.956701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1014.010381][T25940] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.062538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1014.086842][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1014.136323][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.144503][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.182748][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1014.385176][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1014.406866][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1014.433615][T26109] dns_resolver: Unsupported server list version (6) [ 1014.475210][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.478826][T26112] loop8: detected capacity change from 0 to 128 [ 1014.482646][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.502961][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1014.512471][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1014.530699][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1014.644047][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1014.692651][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1014.737975][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1014.775206][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1014.791116][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1014.800974][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1014.810554][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1014.820224][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1014.836221][T26112] netlink: 'syz.8.4542': attribute type 1 has an invalid length. [ 1014.889434][T25940] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1015.064553][T26127] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4543'. [ 1015.180146][T26131] loop4: detected capacity change from 0 to 64 [ 1015.422670][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1015.467022][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1015.524377][T25940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.648602][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1016.681837][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1016.800307][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1016.905577][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1016.943526][T25940] device veth0_vlan entered promiscuous mode [ 1018.109338][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1018.136285][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1018.171081][T25940] device veth1_vlan entered promiscuous mode [ 1018.300499][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1018.327574][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1018.368497][T25940] device veth0_macvtap entered promiscuous mode [ 1018.414795][T25940] device veth1_macvtap entered promiscuous mode [ 1018.513431][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.736629][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1018.780853][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1018.829283][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.084367][T25940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1019.096878][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.114594][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.183172][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.241525][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.282882][T25940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1019.300487][T25940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1019.315796][T25940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1019.333467][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1019.362709][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1019.381706][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1019.398798][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1019.408404][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1019.427978][ T8582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1019.616018][T25940] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.625440][T25940] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.635509][T25940] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.646130][T25940] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.564540][ T4386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.583845][ T4386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.624189][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.632477][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.970724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1021.040301][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1021.804890][T26237] netlink: 63 bytes leftover after parsing attributes in process `syz.9.4499'. [ 1022.930262][T26263] loop9: detected capacity change from 0 to 32768 [ 1023.389006][T26263] XFS (loop9): Mounting V5 Filesystem [ 1024.212937][T26263] XFS (loop9): Ending clean mount [ 1024.264215][T26263] XFS (loop9): Quotacheck needed: Please wait. [ 1025.069131][T26293] netlink: 'syz.8.4579': attribute type 1 has an invalid length. [ 1025.142725][T26293] netlink: 'syz.8.4579': attribute type 4 has an invalid length. [ 1025.201625][T26293] netlink: 9462 bytes leftover after parsing attributes in process `syz.8.4579'. [ 1025.236160][T26263] XFS (loop9): Quotacheck: Done. [ 1025.322660][T26301] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1026.146599][T25940] XFS (loop9): Unmounting Filesystem [ 1026.275530][T26316] binder: 26311:26316 ioctl c0306201 0 returned -14 [ 1026.321273][T26314] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4583'. [ 1030.352463][ T1166] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.418956][ T1166] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.594251][ T1166] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.090599][ T1166] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.827797][ T26] audit: type=1326 audit(1777940962.955:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1032.878810][T26414] loop8: detected capacity change from 0 to 512 [ 1033.016455][ T26] audit: type=1326 audit(1777940962.983:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1033.366193][ T26] audit: type=1326 audit(1777940962.983:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1034.580234][ T26] audit: type=1326 audit(1777940962.983:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1034.834744][ T26] audit: type=1326 audit(1777940962.983:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1034.861519][ T26] audit: type=1326 audit(1777940962.983:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1035.604990][ T26] audit: type=1326 audit(1777940962.983:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1035.737271][ T26] audit: type=1326 audit(1777940962.983:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1035.764255][ T26] audit: type=1326 audit(1777940962.983:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f90afc7ddd9 code=0x7ffc0000 [ 1035.816319][ T26] audit: type=1326 audit(1777940962.992:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26413 comm="syz.8.4611" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f90afc7db42 code=0x7ffc0000 [ 1037.149127][T26457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.157000][T26457] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.854540][T26457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1037.869362][T26457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1037.996025][T26457] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.029323][T26457] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.039081][T26457] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.063788][T26457] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.568731][T26520] lo: Caught tx_queue_len zero misconfig [ 1042.987409][T26534] loop8: detected capacity change from 0 to 736 [ 1042.994984][ T4232] Bluetooth: hci2: command 0x0405 tx timeout [ 1043.734940][ T1166] device hsr_slave_0 left promiscuous mode [ 1043.834916][ T1166] device hsr_slave_1 left promiscuous mode [ 1043.880856][ C1] hrtimer: interrupt took 42733 ns [ 1044.588097][T26559] binder: 26558:26559 ioctl 4018620d 0 returned -22 [ 1044.633903][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1044.674177][ T1166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1044.700047][ T1166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1044.771882][ T1166] device veth1_macvtap left promiscuous mode [ 1044.790194][ T1166] device veth0_macvtap left promiscuous mode [ 1044.804931][ T1166] device veth1_vlan left promiscuous mode [ 1044.819306][ T1166] device veth0_vlan left promiscuous mode [ 1045.858195][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1045.867550][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 1046.460664][ T154] smc: removing ib device syz0 [ 1046.949389][ T1166] team0 (unregistering): Port device team_slave_1 removed [ 1047.038227][ T1166] team0 (unregistering): Port device team_slave_0 removed [ 1047.090853][ T1166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1048.080550][ T1166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1048.459213][ T1166] bond0 (unregistering): Released all slaves [ 1048.809871][T26595] device syzkaller0 entered promiscuous mode [ 1048.997326][T26589] device syzkaller0 entered promiscuous mode [ 1049.097535][T26602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4658'. [ 1050.619109][ T4418] Bluetooth: hci6: command 0x0409 tx timeout [ 1050.780828][T26584] chnl_net:caif_netlink_parms(): no params data found [ 1050.981126][T26636] device syzkaller0 entered promiscuous mode [ 1051.071977][T26638] IPVS: Error joining to the multicast group [ 1052.658387][T26584] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.668718][T26584] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.679020][T26584] device bridge_slave_0 entered promiscuous mode [ 1052.729962][T26584] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.751675][T26584] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.872333][ T4411] Bluetooth: hci6: command 0x041b tx timeout [ 1052.920233][T26584] device bridge_slave_1 entered promiscuous mode [ 1053.065727][T26584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.082157][T26584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.111437][T26584] team0: Port device team_slave_0 added [ 1053.163807][T26584] team0: Port device team_slave_1 added [ 1053.420920][T26584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.680961][ T4404] Bluetooth: hci6: command 0x040f tx timeout [ 1056.704760][T26584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.733119][T26584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.754077][T26584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.767088][T26584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.911452][T26689] loop8: detected capacity change from 0 to 256 [ 1056.933584][T26584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.389730][T26694] No such timeout policy "syz1" [ 1058.152224][T26584] device hsr_slave_0 entered promiscuous mode [ 1058.408278][T26584] device hsr_slave_1 entered promiscuous mode [ 1058.938925][ T4418] Bluetooth: hci6: command 0x0419 tx timeout [ 1059.632647][ T4232] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 1061.769216][ T4232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1061.792094][ T4232] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.857326][ T4232] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00 [ 1061.883961][ T4232] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.906625][ T4232] usb 10-1: config 0 descriptor?? [ 1062.374181][T26584] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1062.422151][T26584] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1062.431810][ T4232] konepure 0003:1E7D:2DBE.001A: unknown main item tag 0x4 [ 1062.450356][ T4232] konepure 0003:1E7D:2DBE.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.9-1/input0 [ 1062.504289][T26584] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1062.602457][T26584] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1062.746633][ T4962] usb 10-1: USB disconnect, device number 16 [ 1063.184324][T26584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.368836][T26584] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.398097][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1063.440332][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1063.971353][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1064.107784][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1064.256106][ T4386] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.264073][ T4386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.782537][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1064.806228][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1064.837926][ T4386] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.845315][ T4386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.970532][T26584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1065.078419][T26584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.382729][T26760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4703'. [ 1066.127167][T26761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4703'. [ 1066.137211][T26761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4703'. [ 1066.439022][T26763] netlink: 'syz.2.4703': attribute type 10 has an invalid length. [ 1066.458991][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1066.467331][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1066.802810][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1066.865451][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1067.067915][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1067.114041][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1067.158725][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1067.202421][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1067.242768][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1067.288609][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1067.342454][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1067.392992][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1067.415332][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1067.471211][T26806] netlink: 'syz.0.4711': attribute type 13 has an invalid length. [ 1067.648455][T26812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4711'. [ 1068.916479][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1068.932384][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1069.031484][T26842] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1069.069727][T26842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.195970][T26842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.210090][T26842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1069.240136][T26842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1069.309087][T26850] No such timeout policy "syz1" [ 1070.296091][T26842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.312601][T26842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.329265][T26842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1070.475771][T26842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.553224][T26859] device bridge1 entered promiscuous mode [ 1070.722961][T26584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.889598][T26868] loop8: detected capacity change from 0 to 16 [ 1070.922624][T26868] erofs: (device loop8): mounted with root inode @ nid 36. [ 1070.971250][T26868] attempt to access beyond end of device [ 1070.971250][T26868] loop8: rw=0, want=24, limit=16 [ 1071.809173][T26875] attempt to access beyond end of device [ 1071.809173][T26875] loop8: rw=0, want=24, limit=16 [ 1072.007358][T26879] attempt to access beyond end of device [ 1072.007358][T26879] loop8: rw=0, want=24, limit=16 [ 1072.968472][T26893] sctp: [Deprecated]: syz.0.4728 (pid 26893) Use of int in max_burst socket option. [ 1072.968472][T26893] Use struct sctp_assoc_value instead [ 1073.782825][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1073.794444][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1075.575156][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1075.652330][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1075.678546][T26584] device veth0_vlan entered promiscuous mode [ 1075.751117][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1075.765251][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1076.235977][T26912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1076.689006][T26912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1076.879168][T26912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1077.113280][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1077.154853][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1077.341924][T26912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1077.497720][T26912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1078.024443][T26584] device veth1_vlan entered promiscuous mode [ 1078.109368][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1078.120004][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1078.132406][T26584] device veth0_macvtap entered promiscuous mode [ 1078.387661][T26584] device veth1_macvtap entered promiscuous mode [ 1080.109135][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1080.127475][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1080.192869][T26584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.240794][T26584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.285939][T26584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.301148][T26584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.313937][T26584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.346693][T26584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.391267][T26584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.438187][T26584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.528990][T26584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.591288][T26584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1080.648155][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1080.712498][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1080.759898][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1080.800144][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1081.005301][T26584] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.074338][T26584] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.105920][T26584] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.138903][T26584] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.381699][ T5634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1081.408623][ T5634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1081.585085][ T5634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1082.707556][ T5634] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.730780][ T5634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.748701][ T8596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1083.770363][T27005] device syzkaller0 entered promiscuous mode [ 1088.206575][T27056] syz.7.4763 (27056) used greatest stack depth: 16464 bytes left [ 1088.496892][T27070] lo: Caught tx_queue_len zero misconfig [ 1088.529516][T27074] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4772'. [ 1088.604427][T27074] bridge: RTM_DELNEIGH with unconfigured vlan 1 on bridge0 [ 1088.765141][T27082] loop8: detected capacity change from 0 to 512 [ 1088.859264][T27082] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 1088.871054][ T4965] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1088.969498][T27082] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=8000e018, mo2=0000] [ 1089.053611][T27102] trusted_key: encrypted_key: master key parameter '|{E' is invalid [ 1089.152083][ T4965] usb 8-1: device descriptor read/64, error -71 [ 1089.476865][ T4965] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1089.867083][ T4965] usb 8-1: device descriptor read/64, error -71 [ 1089.939929][T27082] EXT4-fs (loop8): 1 truncate cleaned up [ 1089.961433][T27082] EXT4-fs (loop8): mounted filesystem without journal. Opts: nobarrier,noblock_validity,nojournal_checksum,nogrpid,nodelalloc,data_err=ignore,max_batch_time=0x0000000000000006,auto_da_alloc,resgid=0x00000000000000002,errors=continue. Quota mode: writeback. [ 1089.974557][T27114] overlayfs: statfs failed on './file0' [ 1090.001458][ T4295] __quota_error: 62 callbacks suppressed [ 1090.001485][ T4295] Quota error (device loop8): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 1090.030179][ T4965] usb usb8-port1: attempt power cycle [ 1090.049836][ T4295] EXT4-fs error (device loop8): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 1 [ 1090.723105][ T4965] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1090.951102][ T4965] usb 8-1: device descriptor read/8, error -71 [ 1091.565087][ T4965] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1091.616535][T27139] bridge0: port 3(vlan2) entered blocking state [ 1091.641155][T27139] bridge0: port 3(vlan2) entered disabled state [ 1091.728070][T27139] device vlan2 entered promiscuous mode [ 1092.412747][ T4965] usb 8-1: device descriptor read/8, error -71 [ 1092.554836][T27154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1092.593717][ T4965] usb usb8-port1: unable to enumerate USB device [ 1092.604469][T27154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4789'. [ 1093.497379][T27161] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000000 [ 1096.039611][T27201] device ip6gre1 entered promiscuous mode [ 1098.116806][T27222] dlm: no locking on control device [ 1098.341472][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1098.417669][T27230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4809'. [ 1102.449508][T27280] netlink: 'syz.9.4829': attribute type 1 has an invalid length. [ 1103.167717][T27282] device bond1 entered promiscuous mode [ 1103.181073][T27282] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1103.686218][T27295] loop9: detected capacity change from 0 to 40427 [ 1103.697034][ T4232] Bluetooth: hci5: command 0x0406 tx timeout [ 1103.703892][T27295] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 1103.711978][T27295] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 1103.761922][T27295] F2FS-fs (loop9): invalid crc value [ 1103.845651][T27295] F2FS-fs (loop9): Found nat_bits in checkpoint [ 1103.969872][T27295] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 1103.978456][T27295] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 1104.914065][T27295] attempt to access beyond end of device [ 1104.914065][T27295] loop9: rw=2049, want=79872, limit=40427 [ 1104.942701][T27295] attempt to access beyond end of device [ 1104.942701][T27295] loop9: rw=2049, want=81920, limit=40427 [ 1104.970296][T27295] attempt to access beyond end of device [ 1104.970296][T27295] loop9: rw=2049, want=51200, limit=40427 [ 1104.997870][T27295] attempt to access beyond end of device [ 1104.997870][T27295] loop9: rw=2049, want=53248, limit=40427 [ 1105.027138][T27295] attempt to access beyond end of device [ 1105.027138][T27295] loop9: rw=2049, want=59392, limit=40427 [ 1105.056364][T27295] attempt to access beyond end of device [ 1105.056364][T27295] loop9: rw=2049, want=61440, limit=40427 [ 1105.099619][T27295] attempt to access beyond end of device [ 1105.099619][T27295] loop9: rw=2049, want=65200, limit=40427 [ 1105.144667][T27295] attempt to access beyond end of device [ 1105.144667][T27295] loop9: rw=2049, want=69312, limit=40427 [ 1105.192742][T27295] attempt to access beyond end of device [ 1105.192742][T27295] loop9: rw=2049, want=73408, limit=40427 [ 1105.239676][T27295] attempt to access beyond end of device [ 1105.239676][T27295] loop9: rw=2049, want=77504, limit=40427 [ 1107.240498][T27328] loop7: detected capacity change from 0 to 512 [ 1107.256629][T27331] loop8: detected capacity change from 0 to 64 [ 1107.307840][T27333] mmap: syz.0.4830 (27333) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1107.538231][T27328] EXT4-fs (loop7): 1 truncate cleaned up [ 1107.548356][T27328] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 1107.699808][T27340] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Out of memory [ 1107.721546][T27331] [ 1107.724426][T27331] ====================================================== [ 1107.731811][T27331] WARNING: possible circular locking dependency detected [ 1107.739455][T27331] syzkaller #0 Not tainted [ 1107.744174][T27331] ------------------------------------------------------ [ 1107.752125][T27331] syz.8.4828/27331 is trying to acquire lock: [ 1107.761684][T27331] ffff88807ddf20b0 (&tree->tree_lock#2/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1107.773005][T27331] [ 1107.773005][T27331] but task is already holding lock: [ 1107.781209][T27331] ffff888022b880f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1107.793040][T27331] [ 1107.793040][T27331] which lock already depends on the new lock. [ 1107.793040][T27331] [ 1107.803820][T27331] [ 1107.803820][T27331] the existing dependency chain (in reverse order) is: [ 1107.814034][T27331] [ 1107.814034][T27331] -> #1 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 1107.825136][T27331] __mutex_lock_common+0x1e3/0x2400 [ 1107.831535][T27331] mutex_lock_nested+0x17/0x20 [ 1107.837306][T27331] hfs_extend_file+0xfb/0x13f0 [ 1107.842623][T27331] hfs_bmap_reserve+0x103/0x420 [ 1107.849050][T27331] __hfs_ext_write_extent+0x1fa/0x470 [ 1107.855369][T27331] __hfs_ext_cache_extent+0x6b/0x9b0 [ 1107.862566][T27331] hfs_extend_file+0x39c/0x13f0 [ 1107.868419][T27331] hfs_get_block+0x40f/0xc50 [ 1107.874704][T27331] __block_write_begin_int+0x565/0x15d0 [ 1107.881045][T27331] cont_write_begin+0x598/0x7b0 [ 1107.886756][T27331] hfs_write_begin+0x92/0xe0 [ 1107.892382][T27331] cont_write_begin+0x263/0x7b0 [ 1107.898799][T27331] hfs_write_begin+0x92/0xe0 [ 1107.904441][T27331] generic_perform_write+0x2b6/0x550 [ 1107.911316][T27331] __generic_file_write_iter+0x25f/0x4e0 [ 1107.918416][T27331] generic_file_write_iter+0xa6/0x1b0 [ 1107.924594][T27331] vfs_write+0x745/0xd60 [ 1107.930159][T27331] __x64_sys_pwrite64+0x19a/0x220 [ 1107.936179][T27331] do_syscall_64+0x4c/0xa0 [ 1107.942295][T27331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1107.949357][T27331] [ 1107.949357][T27331] -> #0 (&tree->tree_lock#2/1){+.+.}-{3:3}: [ 1107.959341][T27331] __lock_acquire+0x2c42/0x7d10 [ 1107.965651][T27331] lock_acquire+0x19e/0x400 [ 1107.970972][T27331] __mutex_lock_common+0x1e3/0x2400 [ 1107.977075][T27331] mutex_lock_nested+0x17/0x20 [ 1107.982890][T27331] hfs_find_init+0x15b/0x1d0 [ 1107.988560][T27331] hfs_extend_file+0x35d/0x13f0 [ 1107.994393][T27331] hfs_bmap_reserve+0x103/0x420 [ 1108.000185][T27331] hfs_cat_create+0x204/0x8e0 [ 1108.005757][T27331] hfs_mkdir+0x68/0xe0 [ 1108.010479][T27331] vfs_mkdir+0x387/0x570 [ 1108.016995][T27331] do_mkdirat+0x1df/0x5b0 [ 1108.022705][T27331] __x64_sys_mkdirat+0x85/0x90 [ 1108.028591][T27331] do_syscall_64+0x4c/0xa0 [ 1108.033745][T27331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1108.040553][T27331] [ 1108.040553][T27331] other info that might help us debug this: [ 1108.040553][T27331] [ 1108.052656][T27331] Possible unsafe locking scenario: [ 1108.052656][T27331] [ 1108.060471][T27331] CPU0 CPU1 [ 1108.067314][T27331] ---- ---- [ 1108.073517][T27331] lock(&HFS_I(tree->inode)->extents_lock); [ 1108.079604][T27331] lock(&tree->tree_lock#2/1); [ 1108.087558][T27331] lock(&HFS_I(tree->inode)->extents_lock); [ 1108.096326][T27331] lock(&tree->tree_lock#2/1); [ 1108.101190][T27331] [ 1108.101190][T27331] *** DEADLOCK *** [ 1108.101190][T27331] [ 1108.109754][T27331] 4 locks held by syz.8.4828/27331: [ 1108.115251][T27331] #0: ffff8880183f6460 (sb_writers#42){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 1108.126042][T27331] #1: ffff888022b88fa8 (&type->i_mutex_dir_key#18/1){+.+.}-{3:3}, at: filename_create+0x208/0x470 [ 1108.137336][T27331] #2: ffff88807ddf40b0 (&tree->tree_lock#2){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 1108.147283][T27331] #3: ffff888022b880f8 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 1108.159314][T27331] [ 1108.159314][T27331] stack backtrace: [ 1108.166930][T27331] CPU: 0 PID: 27331 Comm: syz.8.4828 Not tainted syzkaller #0 [ 1108.175166][T27331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1108.185430][T27331] Call Trace: [ 1108.189042][T27331] [ 1108.192545][T27331] dump_stack_lvl+0x188/0x250 [ 1108.197521][T27331] ? load_image+0x400/0x400 [ 1108.202398][T27331] ? show_regs_print_info+0x20/0x20 [ 1108.208263][T27331] ? print_circular_bug+0x12b/0x1a0 [ 1108.214147][T27331] check_noncircular+0x296/0x330 [ 1108.219474][T27331] ? look_up_lock_class+0x71/0x110 [ 1108.224885][T27331] ? add_chain_block+0x940/0x940 [ 1108.229936][T27331] ? lockdep_lock+0xf1/0x1f0 [ 1108.234833][T27331] ? mark_lock+0x94/0x320 [ 1108.239447][T27331] __lock_acquire+0x2c42/0x7d10 [ 1108.244948][T27331] ? mark_lock+0x94/0x320 [ 1108.249411][T27331] ? verify_lock_unused+0x140/0x140 [ 1108.255297][T27331] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1108.262199][T27331] ? lock_chain_count+0x20/0x20 [ 1108.267885][T27331] ? __rwlock_init+0x140/0x140 [ 1108.273038][T27331] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1108.279114][T27331] ? lockdep_hardirqs_on+0x94/0x140 [ 1108.284730][T27331] lock_acquire+0x19e/0x400 [ 1108.289535][T27331] ? hfs_find_init+0x15b/0x1d0 [ 1108.294932][T27331] ? __might_sleep+0xf0/0xf0 [ 1108.299847][T27331] ? read_lock_is_recursive+0x10/0x10 [ 1108.305769][T27331] ? __kasan_kmalloc+0xcc/0xf0 [ 1108.311300][T27331] ? __kasan_kmalloc+0xb5/0xf0 [ 1108.316681][T27331] ? hfs_find_init+0x84/0x1d0 [ 1108.322263][T27331] ? hfs_bmap_reserve+0x103/0x420 [ 1108.327918][T27331] ? hfs_cat_create+0x204/0x8e0 [ 1108.333589][T27331] ? hfs_mkdir+0x68/0xe0 [ 1108.338322][T27331] ? do_mkdirat+0x1df/0x5b0 [ 1108.343132][T27331] ? hfs_find_init+0x15b/0x1d0 [ 1108.348663][T27331] __mutex_lock_common+0x1e3/0x2400 [ 1108.353910][T27331] ? hfs_find_init+0x15b/0x1d0 [ 1108.358802][T27331] ? mutex_lock_io_nested+0x60/0x60 [ 1108.364485][T27331] mutex_lock_nested+0x17/0x20 [ 1108.369856][T27331] hfs_find_init+0x15b/0x1d0 [ 1108.374490][T27331] hfs_extend_file+0x35d/0x13f0 [ 1108.379705][T27331] ? rcu_lock_release+0x20/0x20 [ 1108.384597][T27331] ? vfs_mkdir+0x387/0x570 [ 1108.389411][T27331] ? hfs_get_block+0xc50/0xc50 [ 1108.394808][T27331] ? hfs_find_init+0x15b/0x1d0 [ 1108.400433][T27331] ? __mutex_lock_common+0x465/0x2400 [ 1108.405939][T27331] ? mutex_lock_io_nested+0x60/0x60 [ 1108.411517][T27331] hfs_bmap_reserve+0x103/0x420 [ 1108.416748][T27331] hfs_cat_create+0x204/0x8e0 [ 1108.421729][T27331] ? hfs_new_inode+0x8d2/0xb50 [ 1108.426843][T27331] ? hfs_cat_build_key+0x170/0x170 [ 1108.432382][T27331] hfs_mkdir+0x68/0xe0 [ 1108.437722][T27331] vfs_mkdir+0x387/0x570 [ 1108.442005][T27331] do_mkdirat+0x1df/0x5b0 [ 1108.446666][T27331] ? vfs_mkdir+0x570/0x570 [ 1108.451428][T27331] ? getname_flags+0x1fe/0x500 [ 1108.456486][T27331] __x64_sys_mkdirat+0x85/0x90 [ 1108.461690][T27331] do_syscall_64+0x4c/0xa0 [ 1108.466359][T27331] ? clear_bhb_loop+0x30/0x80 [ 1108.471327][T27331] ? clear_bhb_loop+0x30/0x80 [ 1108.476117][T27331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1108.482222][T27331] RIP: 0033:0x7f90afc7cc47 [ 1108.486886][T27331] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.507750][T27331] RSP: 002b:00007f90aded6e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 1108.517510][T27331] RAX: ffffffffffffffda RBX: 00007f90aded6ee0 RCX: 00007f90afc7cc47 [ 1108.527357][T27331] RDX: 00000000000001ff RSI: 0000200000000000 RDI: 00000000ffffff9c [ 1108.535560][T27331] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1108.543819][T27331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 1108.552517][T27331] R13: 00007f90aded6ea0 R14: 0000000000000000 R15: 0000000000000000 [ 1108.561619][T27331] [ 1108.600501][T27340] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #18: comm syz.7.4827: mark_inode_dirty error [ 1108.652858][T27347] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Out of memory [ 1108.679626][T27347] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #18: comm syz.7.4827: mark_inode_dirty error [ 1108.758551][T27325] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Out of memory [ 1108.768972][T27347] EXT4-fs error (device loop7): ext4_clear_blocks:883: inode #18: comm syz.7.4827: attempt to clear invalid blocks 36 len 1 [ 1108.784398][T27347] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5873: Out of memory [ 1108.797323][T27325] EXT4-fs error (device loop7): ext4_dirty_inode:6077: inode #18: comm syz.7.4827: mark_inode_dirty error [ 1108.818514][T27347] EXT4-fs error (device loop7): ext4_punch_hole:4121: inode #18: comm syz.7.4827: mark_inode_dirty error [ 1108.846732][T27325] EXT4-fs error (device loop7): ext4_map_blocks:631: inode #18: block 36: comm syz.7.4827: lblock 0 mapped to illegal pblock 36 (length 1) [ 1109.338467][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.371557][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.447170][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.532808][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.401897][ T9] device hsr_slave_0 left promiscuous mode [ 1110.408976][ T9] device hsr_slave_1 left promiscuous mode [ 1110.416484][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1110.441499][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1110.453456][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1110.463846][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1110.472608][ T9] device bridge_slave_1 left promiscuous mode [ 1110.479075][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1110.496753][ T9] device bridge_slave_0 left promiscuous mode [ 1110.503109][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1110.515185][ T9] device veth1_macvtap left promiscuous mode [ 1110.521745][ T9] device veth0_macvtap left promiscuous mode [ 1110.532836][ T9] device veth1_vlan left promiscuous mode [ 1110.538970][ T9] device veth0_vlan left promiscuous mode [ 1110.672698][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1110.686720][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1110.701838][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1110.716424][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1110.797801][ T9] bond0 (unregistering): Released all slaves [ 1112.412690][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 1112.419874][ T1432] ieee802154 phy1 wpan1: encryption failed: -22