last executing test programs: 5m8.783732379s ago: executing program 32 (id=806): pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x4000000000000003, 0x1) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r2, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 4m59.608039494s ago: executing program 33 (id=837): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffe) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) close(r0) 2m57.328807443s ago: executing program 34 (id=1527): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @mss={0x2, 0x400}, @timestamp, @timestamp, @timestamp, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 2m38.713497974s ago: executing program 35 (id=1684): r0 = socket(0x200000000000011, 0x2, 0xd) socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="55c35835db31"}, 0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb08004500005c000050020511"], 0x0) syz_emit_ethernet(0x34, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c20000030180c20000000800452000260000e0800111"], 0x0) 2m3.263684619s ago: executing program 36 (id=2081): syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file1\x00', 0x20030, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000240)={0x10b141, 0x2, 0x10}, 0x18) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x2) 1m56.856137136s ago: executing program 37 (id=2126): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 1m54.385847446s ago: executing program 9 (id=2082): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0x9, 0x5, 0x9, 0x401, r2}, 0x10) 1m53.447654836s ago: executing program 9 (id=2144): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r0, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1271, &(0x7f0000002040)=ANY=[], 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 1m53.249993543s ago: executing program 9 (id=2146): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 1m52.584376084s ago: executing program 9 (id=2153): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/131, 0x83}], 0x83}, 0x4eb}], 0x1, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 1m52.342093052s ago: executing program 5 (id=2156): r0 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x9) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x3, 0x0) getdents64(r2, 0x0, 0x22) 1m52.211989806s ago: executing program 5 (id=2158): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb7030000080000547d03000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[], 0x0) 1m52.062157871s ago: executing program 5 (id=2161): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 1m51.78299315s ago: executing program 5 (id=2163): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000004c0)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}, {@noload}, {@grpjquota_path={'grpjquota', 0x3d, '.\x02'}}, {@noblock_validity}, {@resgid}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}, {@errors_continue}]}, 0xfa, 0x491, &(0x7f0000000f00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) 1m51.678098854s ago: executing program 9 (id=2164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001240)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "f7d7c0", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1}}}}}}, 0x0) 1m51.46242866s ago: executing program 38 (id=2164): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000001240)={@remote, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x2, 0x6, "f7d7c0", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private1}}}}}}, 0x0) 1m50.888365669s ago: executing program 5 (id=2171): sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) semtimedop(0x0, &(0x7f00000001c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x2}], 0x1) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) close_range(r0, r0, 0x0) 1m50.254078509s ago: executing program 5 (id=2180): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x400}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 1m50.041294047s ago: executing program 39 (id=2180): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x20, 0x1, 0xc8, r2}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_FLOWINFO={0x8, 0xc, 0x400}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x58}}, 0x0) 1m16.263722687s ago: executing program 4 (id=2485): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f00000007c0)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xde3ebb5) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0xc040) sendto(r1, &(0x7f0000000240)="cb", 0x1, 0x40, 0x0, 0x0) 1m16.081811943s ago: executing program 4 (id=2487): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/238, 0xee}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mremap(&(0x7f00002ce000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m15.932667988s ago: executing program 4 (id=2488): futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb3020000) socket$inet6_udp(0xa, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x89, 0x7, 0x7ffc0001}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$OBJ_GET_PROG(0x9, &(0x7f0000000600)=@generic={0x0, 0x11, 0x10}, 0xc) syz_open_procfs(0x0, &(0x7f0000000080)='gid_map\x00') 1m15.802115512s ago: executing program 4 (id=2489): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x1, 0x24b, &(0x7f0000001180)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb31e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0xa}, 0x20) 1m15.403611585s ago: executing program 4 (id=2491): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r0) r1 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x100000e, 0x4018831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6c9ecbf09d6dd7be5a06dfd645630500c1a303434a36bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffdc0fb243c3111dda42112650cc", 0x0, 0x48) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) 1m14.362093928s ago: executing program 4 (id=2498): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$I2C(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/54, 0x36}, {0x0}], 0x6}, 0x6}], 0x1, 0x2042, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1m14.097351647s ago: executing program 40 (id=2498): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$I2C(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)=""/54, 0x36}, {0x0}, {0x0}, {0x0}, {&(0x7f00000003c0)=""/54, 0x36}, {0x0}], 0x6}, 0x6}], 0x1, 0x2042, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, 'gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 50.501133359s ago: executing program 2 (id=2685): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x3c, 0xa, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x4}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x400}]}, 0x3c}, 0x1, 0x0, 0x0, 0xcc}, 0x811) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 49.389366515s ago: executing program 2 (id=2704): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000280)=0x7fff, 0x4) 49.241664879s ago: executing program 2 (id=2696): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20000) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x59, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x37, 0x0, @opaque="1f75752010d04709f5930e745a837c6cc2065b1a5a73dc64e882796045c455d5a94f1e7c187f2da2b53527af785d50"}}}}}, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a80)={0xffffffffffffffff, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000001800)=[0x0, 0x0, 0x0], 0x0, 0x0, 0x2b, &(0x7f0000001880)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000018c0), &(0x7f0000001900), 0x8, 0xea, 0x8, 0x8, &(0x7f0000001940)}}, 0x10) 48.351934978s ago: executing program 2 (id=2706): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@delchain={0x88, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x3c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x34, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xeec}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x60}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}]}]}, @TCA_FLOWER_KEY_MPLS_BOS={0x5}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x7}, @TCA_FLOWER_KEY_IP_TOS_MASK={0x5, 0x4a, 0xfb}]}}]}, 0x88}}, 0x4804) 48.028791829s ago: executing program 2 (id=2709): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) chdir(&(0x7f0000000140)='./file1\x00') mknodat$loop(0xffffffffffffff9c, 0x0, 0x6000, 0x0) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x305982, 0x0) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x2000c12, &(0x7f0000000440)={[{@utf8}, {@showassoc}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@overriderock}, {@cruft}, {@map_off}, {}, {@map_acorn}, {@map_off}, {@check_relaxed}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'default'}}, {@mode={'mode', 0x3d, 0x1ff}}]}, 0x4, 0xa07, &(0x7f0000001f80)="$eJzs3UtsXOXZB/D/8SUxBiUB8vHxISCT8CUYcB3bKUkjFjSxJ4mpL5XtSERdEEqcKo1bWtJKgCoRpKqrolZq1UW7Q6zaDRKbsqnYtbt21UWlilX3qKt05erMjOPbjMc2jh3C7xeN51ye877Pub6Z8fF5wxfLwv4VYwsLtdcWxy/+fgcy5i52dvTT9z98r3y9ezN70pnniz8mPUkqSVeSR5PukdHpqYk2BV1PLif5JCmS7E39fUMup/hFHlga/yTF78p6W9qz0ZJpZ4Evtd0+/gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4G5UjIwODg4VezI2efHlSl1SWWNkdHqqyMLC2jmLy9R9XOv1u/i4bb1JUb7S07PY1fejB5dmP5KkciSP18cer3VInp68ff8jB154uKtjcflW2Xwuezde7I233r7+6vz83ButQxbeqa/D9uR2lzlfnRybmRqbOHO+WhmbmaqcPnly8PiFczOVc2Pj1ZlLM7PVicrIdPXM7NR0pW/kmcrQ6dMnKtWBS1MXJ8+PDoxXFyee+srw4ODJyksD36yemZ6Zmjz+0sDMyIWx8fGxyfO1mHJ2GXOqPBC/MTZbma2emahUrl6bnzuxKqfO1Ru7DBpqtyZl0HC7oOHB4eGhoeHhoXcbvWffnnDy+dPPnxoc7BpcJWsi7tBBy93lvta7eZuv4LB1HfX2P98dz1gmczEvp9L030hGM52pTLSY37DY/h89Xl233uXtf6OV71o2+7Hyx5E82RjtadH+t8hl5/7dyFt5O9fzauYzn7m8sesZ7ey/86lmMmOZyVTGMpEztSmVxpRKTudkTmYwr+RCDmUmlZzLWMZTzUwuZSazqdaOqJFMp5ozmc1UplNJX0byTCoZyumczolUUs1ALmUqFzOZ8xnNmVopV3Ottt1PrJPj7aChjQQNrxO0ujEvj/XNtf/Ve/V/gmzY9l/EYYsWGu3/nvahfSM7kRAAAACw7f7vL9l38KE//zMp8kTte/lzY+PVF3c7LQAAAGAb1W7Xe7x86y6Hnuipff4f3O20AAAAgG1U1P7GrkjSm0P1ocW/hPIlAAAAANwjar//fzLFoaUJPv8DAADAPaaz7TP22z6Fv+hffPxv5Ur9/Uojoj5W9J4bG68OjEyNvzCUY7WnDCR5Ym1pnUnRXfvzg2dzuB51uLf+3rtUYllnTxk1NPDCUJ7NkXrEkb6nyren+ppEDtcjn65HPr08sjMrIk+UkQBwrzuyTnu80fb/2fTXI/ofqzX5XY81aYMHtawAcLe43cfOfxpdmjVp/xsRT7Zq/7+6zuf/MuKhXD1Uv6VgIK/l9cznSvrTuOPgULNSF3sjqN+G0N/m24Dexi0LfzvVkf413wf03F7X5bFzGU5/028ElpVbLOZwoh7XeWf2AQDstCPrtsMba//723z+73VLIQDcVW73YL+JgXc2Ezz3xo3dXkcAYCWtNAAAAAAAAAAAAAAAAAAAAAAAAAAAAGy/DT3A/6/Hkvn5uWQLnQVseaBnMxmuP9CRHcp51wc6k+xW7S9m00uV+/hzVPqH+xqL/2v3t/w9N7DLFyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB2RJF0NpvekexNMpjk+M5ndefc3O0Etktlz5YWK27lVt7Mvm3PBwAAAAAAAAAAAAAAAAAAAAAAAAAAAADgS67x/P+O1N/vr09KV0dyNMnlJN/a7Ry3063dTuDOKNqHfK8euPT8/46kOwtFuuq7PUX3yOj01ERZVLG3nP/p+x++V77al722V4WygLKGFZ1LNGpYNqV75VIP1pbqHZ27cf1Hr/+gMnq2dmCenT03PjpxfvrrS4GPFB8lldRfixbz/cnRP/1y2eRGRwnFR+WaNre63nO1ekfX1vu/zZZuUe8GXJufGy5rmq2+PPvj7197c9msh3I4eaov6VtZ03fKV4uaDq/enisVnxU/K/blN7lc2//l1igWinIX7a+t/31Xr83PDbz2+vyV2zm9syKnAzmU5ErSs/GcDrU+NmtHXUd3WetgLaj8cbBNeetaVuJQi+36YO2Q6d3UOlTanF9ttns+6CozOtE0o1/98OEc2/SePtamxqaKz4p/FBfy9/x0Wf8fHeX+P5qmZ2eTImqRy46U5fNWnF4d9cjavhhePuOV1WW2PCu5A36eb+drt/d/x7Lrf2Nf7cz1aFmNzc+LZPPnxQf717QoS2ot0sFVLVLj6tNqmUaeB+tRLfL8nzxXL3MTV5Tn2rXYd+j8/23Rl3/npv5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu1+RdDab3pEcTXIgyf5yvJIsrI65uYX6OnqLraS5bbaS8xdP0XJFi1u5lTezb6czAgAAAAAAAODOODv66fsfvle+ar+P78z/dzTmVJKuJAeKX3ePjE5PTbQpqDu5vPgr/Z7N5XC5/PHA0vgn5dijbRba3dsHAOAL7b8BAAD///69bw8=") 47.565299114s ago: executing program 2 (id=2714): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000440)=0x80000001, 0x4) r3 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd9d6f", 0x3}], 0x1}}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 32.440513012s ago: executing program 41 (id=2714): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000440)=0x80000001, 0x4) r3 = fcntl$dupfd(r0, 0x0, r1) sendmmsg$inet(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="dd9d6f", 0x3}], 0x1}}], 0x1, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x1, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) 26.494090714s ago: executing program 3 (id=2886): socket(0x2b, 0x1, 0x1) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000440)=""/123, 0xff32}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) 26.464124625s ago: executing program 3 (id=2887): r0 = socket$kcm(0x2b, 0x1, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x50) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x2000000000000390, &(0x7f0000001300)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 25.39042295s ago: executing program 3 (id=2891): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) 25.282100743s ago: executing program 3 (id=2893): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x8410, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec01b3b820b1fdfffa233394c6007d8285b061be4d1d842e4a63ec77a08347691f71d1e4132f29405a620f375b81080001cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8"], 0xff, 0x2a0, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x2000006, 0x10003) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4a07e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x5000) 24.945746874s ago: executing program 3 (id=2896): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000200)='./bus\x00', &(0x7f0000000b80), 0x220000c, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}]}) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) lseek(r0, 0x100, 0x1) getdents64(r0, 0xfffffffffffffffe, 0x29) 22.649989328s ago: executing program 3 (id=2905): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 22.396889507s ago: executing program 42 (id=2905): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004"], 0x48) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 5.337948457s ago: executing program 8 (id=3072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) userfaultfd(0x80001) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec970000f02b00fe8000000000000000000200000000aaff020000000000000000000000000001"], 0xffe) 4.792487475s ago: executing program 8 (id=3076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r2, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa"], 0x0) 4.418576657s ago: executing program 8 (id=3082): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.227638313s ago: executing program 8 (id=3085): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x1a) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) read$eventfd(r0, &(0x7f0000000180), 0x8) 4.01050614s ago: executing program 8 (id=3088): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_open_procfs(0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r3, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 3.935574133s ago: executing program 6 (id=3090): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 3.761659278s ago: executing program 6 (id=3094): set_mempolicy(0x4005, 0x0, 0x4) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 3.70112873s ago: executing program 8 (id=3095): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) shutdown(r1, 0x0) 3.653959382s ago: executing program 1 (id=3096): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f0000000240)={0x11, {{0x29, 0x0, 0x5000000, @local, 0x7ff}}}, 0x88) r1 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x8) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x2000, 0x0) 3.500790877s ago: executing program 0 (id=3097): r0 = socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) r1 = io_uring_setup(0x7cb0, &(0x7f0000000140)={0x0, 0xb71c, 0x10, 0x3, 0x38f}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffef8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x6}, 0x0, 0x0) 2.735924891s ago: executing program 1 (id=3099): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x80, 0x5e}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x100, 0x40000e6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@multicast2, 0x3502, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xf9, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 2.584761386s ago: executing program 1 (id=3100): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x5d, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x400, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x812}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_CONTAINER={0x10, 0x2, 0x0, 0x0, {{0x1, 0x0, 0x5}, 'Z'}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x8, 0x2, 0x7f}, {0x9, 0x0, 0x1}}}]}]}]}}]}, 0x74}}, 0x40000) 2.531316878s ago: executing program 6 (id=3101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffe0}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3e, 0x7, 0x8, 0x2000, 0x2, 0xffffffff, 0x8, 0xa9ab, 0x13, 0xfffffc00, 0xfffffff7, 0x0, 0x3, 0x7, 0x2, 0x6, 0x1, 0x9, 0x0, 0x326d4056, 0x594, 0x2, 0x6, 0x5, 0x8, 0x8b9, 0x400, 0x80000000, 0x4, 0x4, 0x9, 0x4, 0x1, 0xf895, 0x2, 0x2, 0xf4, 0x261, 0x80000001, 0x8, 0x2, 0x8000, 0x7, 0x6, 0x4, 0x2, 0x7, 0x4, 0x100, 0x8, 0x401, 0x80, 0x401, 0x1b, 0x10, 0x7, 0x5, 0x8, 0x3, 0x6d40, 0x8, 0x10000, 0xb, 0x7ff, 0x2, 0x400, 0x2, 0xffff, 0x11f3, 0x5afec87e, 0x7fff, 0x3, 0x0, 0x8, 0x8000, 0x5, 0xfffffff7, 0x401, 0x200, 0xd, 0x67, 0x9, 0x9, 0x1, 0x3, 0x82, 0x7, 0x9, 0x1, 0x0, 0x8, 0x8, 0x491, 0x10001, 0xa0c5, 0x8000, 0x1, 0x16a2, 0x71, 0x7, 0x1ad, 0x1000, 0x80000000, 0x3, 0x1ff, 0x7f, 0x2, 0x8, 0x810000, 0x8, 0x4, 0x1, 0xfffffffb, 0x5, 0x1, 0x8, 0x0, 0x8, 0x7ff, 0x7f, 0x7f, 0x8, 0x37a6, 0x7, 0x7f, 0xaf87, 0x8000, 0xca7c, 0x3, 0xa6, 0x3, 0x0, 0xdcc, 0x3, 0xffffff01, 0x6, 0x200, 0xffff45a1, 0x8, 0x1, 0x5, 0x9, 0x7fff, 0x80, 0x3ff, 0x1, 0x9, 0x6, 0xde, 0x8000, 0x0, 0x1, 0x6, 0x3, 0x8001, 0x8, 0x1, 0x2, 0x7, 0xf0d9, 0x67d, 0x3ff, 0x8088ff, 0x8, 0x80, 0x9, 0xe2, 0x1, 0xfffffff9, 0x5, 0xfffffffc, 0xdf, 0xbd0, 0xff, 0x1c, 0x2, 0x7f, 0xb637, 0xf16bdeec, 0x68000, 0x0, 0x1ff, 0xab6c, 0x0, 0x3, 0x0, 0x2, 0xa9f6, 0x7fffffff, 0x6e, 0xb, 0xd, 0x905a, 0x1, 0xe, 0x9, 0x0, 0x7, 0xd259, 0x800, 0x1, 0x1, 0x4, 0xf, 0x3, 0x3, 0xfffff000, 0x5, 0x8001, 0x9, 0x200, 0xffffffff, 0x0, 0x6, 0x9, 0x0, 0x8, 0x9, 0xf26, 0x10, 0x9, 0x1000, 0x3df, 0x5, 0x7, 0x5b, 0x7, 0x0, 0x10, 0xffffff8b, 0x401, 0x9d03, 0x9, 0x4, 0x3, 0x3, 0x9, 0x8, 0x10001, 0x3ff, 0x8, 0x5, 0x9, 0x80000200, 0x1000, 0x2, 0x4, 0x8, 0x3392, 0xa, 0x2, 0x9, 0xc7, 0x2400, 0xffff, 0x2fee6e5b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x24040098}, 0x40cc800) 2.498945509s ago: executing program 0 (id=3102): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000980)={0x2, 0x3, 0x0, 0x3, 0x1bf, 0x0, 0x70bd2c, 0x25dfdbff, [@sadb_key={0x2, 0x9, 0x8, 0x0, "1c"}, @sadb_address={0x5, 0x6, 0x3c, 0x0, 0x0, @in6={0xa, 0x4e24, 0x8, @mcast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0xc0000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e24, 0x9, @empty, 0x6}}, @sadb_key={0x1af, 0x8, 0x6b80, 0x0, "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"}]}, 0xdf8}, 0x1, 0x7}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000380)=@x86={0x5, 0x40, 0x2, 0x0, 0x6, 0x1, 0x40, 0x4, 0x2e, 0x44, 0x7f, 0x8, 0x0, 0x2, 0x7, 0xe, 0x5, 0x7, 0xf, '\x00', 0x5, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/84, 0x54}, {&(0x7f0000000100)=""/104, 0x68}], 0x2) 2.315417645s ago: executing program 1 (id=3104): syz_usb_connect(0x5, 0x164, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007af28810d30bf4055b000000000109025201010000000009044000000e0100008c2406"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) syz_pidfd_open(r0, 0x0) 2.215988318s ago: executing program 6 (id=3105): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x1e61, 0x1103}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x400}]}}}]}, 0x50}}, 0x4000020) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 2.215413908s ago: executing program 7 (id=3106): syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Ls1cYB+CTwEsoVCIiONhBMLg0KsRBh2SwEtMsRsSKFGfBQQfBwUFSorMf/4DiF4iL2NlRjCAKcZKM4lxQXDKltD6FtnZpiyl9ua4lnHPf59w5/J7A/1o8/NRsNmMhhGbi75/+7jQ/XuyZHJ2aDiEW5kII+a++/LUSizp+u/U8WpeidTGRqe3fjL2ctt/23ldTh/GofhEP4YcQwuLjUfLfvo3P31nuKrm+sVzYXM0tPBTWnobm+/PdW/mlneGDbHmmKzsbfVgX8dbMT9VGju+apefdtoFP1Vojcx31pWMfM5//1p/z3+us1CuNib6TlcF0R/2yvB3l/ip/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgg53lrpLrG8uFzdXcwkNh7Wlovj/fvZVf2hk+yJZnurKz8be+i3hr5qdqI8d3zdLzbtvAp2qtkbmO+tKxd0e/+fFj/hIt9HX4Y/57nZV6pTHRd7IymO6oX5a3o9xf3+cPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCX8uPFnsnRqekQYmEuhPDt/fe9v+w3E2/1WNR3Hv2Wov1iIlPbvxl7OW2/7b2vpg4nEyEkfnfv4uNR8otWPoR/5OcAAAD//2wlhu4=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={0xffffffffffffffff, 0x0, &(0x7f0000000080)=@tcp=r0}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0xb, &(0x7f0000000000)=0xfffffe01, 0x4) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f00000000c0)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000140)=""/17, &(0x7f0000000080)=0x11) 2.026394434s ago: executing program 6 (id=3107): add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000000000)="0100000200373a4541062000a59ea940d2cb0b3692f5020000a00000050000000000eb000000a5e5be21c44e", 0x2c, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000005ac0)={0x0, 0x0, &(0x7f0000005a80)={&(0x7f00000058c0)=@polexpire={0xcc, 0x1b, 0x1, 0x70bd2b, 0x25dfdbfd, {{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x4e22, 0x1, 0x4e24, 0x5, 0x2, 0xa0, 0x1a0, 0x3b}, {0x9, 0x7, 0x6, 0x2, 0x7, 0xc, 0x4a6, 0x6}, {0x2, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff2}, 0xa79, 0x6e6bb2, 0x1, 0x1, 0x1, 0x1}, 0x5}, [@policy_type={0xa, 0x10, {0x2}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44040}, 0x20000004) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x3, 0x4, 0x86, 0x2}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000001c0)={'pcmmio\x00', [0x24b3, 0x2, 0x1, 0x6, 0xffffff00, 0x7, 0x9, 0xffffffbc, 0x8, 0x4, 0x5, 0x0, 0x7f, 0x9d66, 0x7545f57e, 0x4, 0x7a, 0x9, 0x10000, 0x100, 0x7, 0x4, 0x5, 0x10, 0x10, 0x9, 0x3, 0xc84a, 0x3ff, 0x7, 0x401, 0x9]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000280)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x2000, 0x3}) 1.779869762s ago: executing program 6 (id=3108): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x80, 0x1c, {0x0, 0x6, 0x3, 0x3, 0x7ec3, 0x3869, 0x0, 0x7fff, 0x4, 0x1, 0xcd7c}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.779096882s ago: executing program 7 (id=3109): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="5a00000002000000", 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)='M', 0x1}], 0x1}, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0x1}]}, 0x10) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1000000000000, 0x0, 0x2, 0x8}}, 0x20) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) 1.511720241s ago: executing program 7 (id=3110): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @rand_addr=0x64010101}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x82, &(0x7f00000001c0)="0f973f57108894a3", 0x8) 1.273283268s ago: executing program 7 (id=3111): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000400000000000000000000000850000004f000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9fdef306844268cb89614f086dd", 0x0, 0x3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x60, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x308, {0xfffffff7, 0x3}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x600}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) 1.213427591s ago: executing program 0 (id=3112): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', '', [{}], 0xa, "5854de9422ab97ca0e43de0a7956f703d038a068546ad861ec77f558bac3eca6c926a3165bc5867d8e80cc4748d08fbfb7c3f9fe69ade14eb383b749b35ff374715ffc3d322d"}, 0x4b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80940, 0xda138c4da563c29e) 1.078300785s ago: executing program 0 (id=3113): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x501, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xc, 0xb}, {0xd, 0xffff}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x240408d5}, 0x0) 1.011812877s ago: executing program 7 (id=3114): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000140)}, 0x20) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x1, r1, 0x1, 0xf, 0x6, @random="6c9b864227f7"}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000140)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xa, 0xc) 773.713105ms ago: executing program 0 (id=3115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x4c, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 522.261883ms ago: executing program 1 (id=3116): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x109142, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000100)) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)={0x0, 0x2, 0xbe}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x32b, @time={0x6, 0x7}, 0xff, {0x0, 0x40}, 0x0, 0x2}) 453.003665ms ago: executing program 0 (id=3117): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0xe, r2}, 0x10) 33.931909ms ago: executing program 7 (id=3118): syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x804810, &(0x7f0000000680)=ANY=[], 0x3, 0x2ef, &(0x7f0000000880)="$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") r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 0s ago: executing program 1 (id=3119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x3e, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffffff07000000400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x20004015}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c00018006000100582e000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) kernel console output (not intermixed with test programs): 1][T11349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.335707][T11211] device veth0_vlan entered promiscuous mode [ 427.413389][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 427.447329][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.486409][T11211] device veth1_vlan entered promiscuous mode [ 427.543883][T11349] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.593301][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 427.604974][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 427.617124][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 427.626997][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.636155][ T9103] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.643436][ T9103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.652526][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 427.685747][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 427.705277][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.718398][ T9103] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.725822][ T9103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.736255][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 427.746279][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 427.758261][T11211] device veth0_macvtap entered promiscuous mode [ 427.773877][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 427.785353][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 427.795109][T11408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 427.816689][T11211] device veth1_macvtap entered promiscuous mode [ 427.834232][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 427.853165][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 427.861277][T10199] Bluetooth: hci4: command 0x040f tx timeout [ 427.866996][T11408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 427.945684][T11408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 428.005103][T11408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 428.017783][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 428.039076][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 428.051754][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 428.060837][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 428.070188][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 428.079339][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 428.088684][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 428.109751][T11349] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 428.136521][T11349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 428.153526][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 428.184108][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 428.246591][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.276646][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.307070][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.327664][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.338462][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.349095][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.359261][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.370336][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 428.380076][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.392139][T11211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 428.428219][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2226'. [ 428.461422][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 428.470499][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.519185][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.541614][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.561151][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.571761][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.593663][T11211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.614955][T11211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.632733][T11211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.655532][T11548] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2226'. [ 428.698564][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 428.713966][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.727715][T11211] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.748866][T11211] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.765862][T11211] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.780572][T11211] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.818662][T11349] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.855717][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 428.872139][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 428.960047][T11408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.968846][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 428.997022][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 429.159067][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 429.184002][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 429.235097][T11349] device veth0_vlan entered promiscuous mode [ 429.243684][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 429.266530][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 429.287859][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 429.301130][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 429.312223][T11408] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.334972][T11349] device veth1_vlan entered promiscuous mode [ 429.341298][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.380794][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.416432][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 429.431839][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 429.460430][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 429.490110][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 429.520776][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.528107][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.537603][T11564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2232'. [ 429.551308][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 429.583747][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.608843][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 429.649032][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 429.683646][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.690763][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.742359][ T9108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 429.750285][ T9108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 429.765508][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 429.799586][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.820938][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.856945][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 429.881413][ T4217] Bluetooth: hci4: command 0x0419 tx timeout [ 429.901618][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 429.930855][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 429.971076][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 430.003196][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 430.026355][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 430.045146][T11349] device veth0_macvtap entered promiscuous mode [ 430.075865][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.116014][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 430.152446][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 430.210480][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 430.230222][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 430.248293][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 430.267034][T11349] device veth1_macvtap entered promiscuous mode [ 430.278168][T11408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 430.381701][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.447195][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.471074][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.492987][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.540014][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.567279][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.595532][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.624530][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.654874][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.685553][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.727832][T11349] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.759589][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 430.779696][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.831963][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.882141][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.925026][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.958193][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.989779][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.032634][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.061225][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.105933][T11349] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.157748][T11349] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.209384][T11349] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.251586][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 431.260470][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 431.297835][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 431.337809][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 431.375758][T11349] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.413027][T11349] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.437863][T11349] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.477061][T11349] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.516455][T11408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.707368][ T9118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.744809][ T9118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.798767][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 431.862761][ T9105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.901069][ T9105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.911613][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 432.440306][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 432.461919][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 432.552598][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 432.573007][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 432.613498][T11408] device veth0_vlan entered promiscuous mode [ 432.641177][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 432.685246][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 432.718686][T11408] device veth1_vlan entered promiscuous mode [ 432.803352][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 432.812725][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 432.874744][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 432.902891][ T9118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 432.949512][T11408] device veth0_macvtap entered promiscuous mode [ 433.025253][T11408] device veth1_macvtap entered promiscuous mode [ 433.116568][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.161446][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.201032][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.266592][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.304219][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.429476][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.444652][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.469035][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.484158][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.502434][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.530836][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.575804][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.610748][T11408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.659944][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.670825][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.691179][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.705149][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.723993][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.742517][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.766064][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.789819][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.807145][T11408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.824735][T11408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.836683][T11408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.990129][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 433.999469][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 434.019041][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 434.039163][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 434.090796][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 434.122786][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.150735][T11408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.173735][T11408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.193640][T11408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.223687][T11408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.509717][ T9105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.528330][ T9105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.584486][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 434.682370][ T9101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.705873][ T9101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.728607][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.007170][T11671] loop4: detected capacity change from 0 to 2048 [ 435.035920][T11673] loop7: detected capacity change from 0 to 512 [ 435.132064][T11673] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.232232][T11689] netlink: 'syz.2.2267': attribute type 12 has an invalid length. [ 435.240118][T11689] netlink: 'syz.2.2267': attribute type 29 has an invalid length. [ 435.283205][T11671] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 435.339084][ T26] audit: type=1800 audit(435.332:79): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2263" name="file2" dev="loop7" ino=1048651 res=0 errno=0 [ 435.391110][T11689] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2267'. [ 435.431332][T11689] netlink: 'syz.2.2267': attribute type 2 has an invalid length. [ 435.439127][T11689] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 435.591172][T11689] netlink: 'syz.2.2267': attribute type 2 has an invalid length. [ 436.171236][ T5421] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 436.383875][ T9111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.428391][ T9111] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.531671][ T5421] usb 4-1: not running at top speed; connect to a high speed hub [ 436.562067][ T9111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.598471][ T9111] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.661485][ T5421] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.677063][ T5421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.709568][ T9111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.781037][ T9111] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.891419][ T5421] usb 4-1: New USB device found, idVendor=041e, idProduct=3237, bcdDevice= 0.40 [ 436.907396][ T9111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 436.923223][ T5421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.940479][ T9111] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.955133][ T5421] usb 4-1: Product: syz [ 436.959734][ T5421] usb 4-1: Manufacturer: syz [ 436.971252][ T5421] usb 4-1: SerialNumber: syz [ 436.978736][T11771] netlink: 2 bytes leftover after parsing attributes in process `syz.7.2291'. [ 437.351367][ T5421] usb 4-1: invalid UAC_HEADER (v1) [ 437.389896][ T5421] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 437.422519][ T5421] usb 4-1: USB disconnect, device number 11 [ 437.564790][T11758] loop2: detected capacity change from 0 to 32768 [ 437.717276][ T4900] udevd[4900]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.985615][T11758] UFO tlock:0xffffc90002892168 [ 438.105793][T11764] loop4: detected capacity change from 0 to 32768 [ 438.283361][T11810] device batadv_slave_1 entered promiscuous mode [ 438.307007][T11806] device batadv_slave_1 left promiscuous mode [ 439.171772][T11849] loop7: detected capacity change from 0 to 512 [ 439.204974][T11851] Invalid ELF header len 1 [ 439.324827][T11849] EXT4-fs error (device loop7): ext4_orphan_get:1406: inode #15: comm syz.7.2312: inode has both inline data and extents flags [ 439.346268][ T9111] device hsr_slave_0 left promiscuous mode [ 439.364368][T11849] EXT4-fs error (device loop7): ext4_orphan_get:1411: comm syz.7.2312: couldn't read orphan inode 15 (err -117) [ 439.388594][T11849] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,resgid=0x000000000000ee00,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 439.423115][ T9111] device hsr_slave_1 left promiscuous mode [ 439.445452][ T9111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.461147][ T9111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.469337][T11849] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters [ 439.510084][ T9111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.539603][ T9111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.570354][ T9111] device veth1_macvtap left promiscuous mode [ 439.579970][ T9111] device veth0_macvtap left promiscuous mode [ 439.600252][ T9111] device veth1_vlan left promiscuous mode [ 439.617515][ T9111] device veth0_vlan left promiscuous mode [ 440.046026][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.052468][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.108553][ T9111] team0 (unregistering): Port device team_slave_1 removed [ 440.133078][ T9111] team0 (unregistering): Port device team_slave_0 removed [ 440.181385][ T9111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.230448][ T9111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.392117][ T9111] bond0 (unregistering): Released all slaves [ 440.488169][T11892] bridge0: port 3(vlan2) entered blocking state [ 440.510455][T11892] bridge0: port 3(vlan2) entered disabled state [ 440.539265][T11892] device vlan2 entered promiscuous mode [ 440.570190][T11892] device team_slave_1 entered promiscuous mode [ 441.493566][ T5227] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 441.861239][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.892565][ T5227] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.931365][ T5227] usb 5-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.00 [ 441.960892][ T5227] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.995895][ T5227] usb 5-1: config 0 descriptor?? [ 442.365094][T11982] netlink: 'syz.7.2351': attribute type 3 has an invalid length. [ 442.519824][ T5227] wacom 0003:056A:030C.0013: hidraw0: USB HID v0.06 Device [HID 056a:030c] on usb-dummy_hcd.4-1/input0 [ 442.711929][ T8847] usb 5-1: USB disconnect, device number 20 [ 442.870668][T11999] fido_id[11999]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 443.436685][T12040] overlayfs: failed to clone upperpath [ 445.411661][T12076] netlink: 'syz.7.2387': attribute type 4 has an invalid length. [ 445.446212][T12077] netlink: 'syz.7.2387': attribute type 4 has an invalid length. [ 445.618490][T12093] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2393'. [ 445.685354][T12095] loop3: detected capacity change from 0 to 256 [ 445.753777][T12095] exfat: Deprecated parameter 'utf8' [ 445.759142][T12095] exfat: Deprecated parameter 'utf8' [ 445.785393][T12095] exfat: Deprecated parameter 'utf8' [ 445.828918][T12095] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 445.928585][T12100] device syzkaller0 entered promiscuous mode [ 445.975720][T12110] netlink: 'syz.0.2398': attribute type 10 has an invalid length. [ 445.983947][ T9108] bond0: (slave bond_slave_0): interface is now down [ 446.003392][ T9108] bond0: (slave bond_slave_1): interface is now down [ 446.022288][ T9108] bond0: (slave wlan1): interface is now down [ 446.029324][ T9108] bond0: (slave dummy0): interface is now down [ 446.041477][T12110] device syz_tun entered promiscuous mode [ 446.073446][ T9108] bond0: (slave bond_slave_0): interface is now down [ 446.091274][ T9108] bond0: (slave bond_slave_1): interface is now down [ 446.120653][T12110] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 446.133538][ T9108] bond0: (slave wlan1): interface is now down [ 446.153081][ T9108] bond0: (slave dummy0): interface is now down [ 446.188068][ T9108] bond0: (slave syz_tun): interface is now down [ 446.227813][ T9118] bond0: (slave bond_slave_0): interface is now down [ 446.244109][ T9118] bond0: (slave bond_slave_1): interface is now down [ 446.276842][ T9118] bond0: (slave wlan1): interface is now down [ 446.299255][ T9118] bond0: (slave dummy0): interface is now down [ 446.338087][ T9118] bond0: (slave syz_tun): interface is now down [ 446.361266][ T9103] bond0: (slave bond_slave_0): interface is now down [ 446.384229][ T9103] bond0: (slave bond_slave_1): interface is now down [ 446.416618][ T9103] bond0: (slave wlan1): interface is now down [ 446.444880][ T9103] bond0: (slave dummy0): interface is now down [ 446.471017][ T9103] bond0: (slave syz_tun): interface is now down [ 446.516258][ T9114] bond0: (slave bond_slave_0): interface is now down [ 446.540149][ T9114] bond0: (slave bond_slave_1): interface is now down [ 446.622312][ T9114] bond0: (slave wlan1): interface is now down [ 446.628449][ T9114] bond0: (slave dummy0): interface is now down [ 446.661087][ T9114] bond0: (slave syz_tun): interface is now down [ 446.700142][T12139] loop2: detected capacity change from 0 to 128 [ 446.719794][ T9103] bond0: (slave bond_slave_0): interface is now down [ 446.726761][ T9103] bond0: (slave bond_slave_1): interface is now down [ 446.751502][ T9103] bond0: (slave wlan1): interface is now down [ 446.769526][ T9103] bond0: (slave dummy0): interface is now down [ 446.786158][ T9103] bond0: (slave syz_tun): interface is now down [ 446.831345][ T9103] bond0: (slave bond_slave_0): interface is now down [ 446.852071][ T9103] bond0: (slave bond_slave_1): interface is now down [ 446.879423][ T9103] bond0: (slave wlan1): interface is now down [ 446.904647][ T9103] bond0: (slave dummy0): interface is now down [ 446.911323][ T9103] bond0: (slave syz_tun): interface is now down [ 446.953043][ T9103] bond0: (slave bond_slave_0): interface is now down [ 446.959803][ T9103] bond0: (slave bond_slave_1): interface is now down [ 446.979062][T12139] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 447.009424][ T9103] bond0: (slave wlan1): interface is now down [ 447.046464][ T9103] bond0: (slave dummy0): interface is now down [ 447.082470][ T9103] bond0: (slave syz_tun): interface is now down [ 447.108572][ T9103] bond0: now running without any active interface! [ 447.156280][T12151] mmap: syz.0.2409 (12151) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 448.278889][T12197] loop2: detected capacity change from 0 to 256 [ 448.463121][T12200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2423'. [ 448.731866][T12205] netlink: 13 bytes leftover after parsing attributes in process `syz.2.2424'. [ 448.789295][T12187] loop3: detected capacity change from 0 to 131072 [ 448.831831][T12187] XFS: ikeep mount option is deprecated. [ 448.933552][T12187] XFS (loop3): Mounting V5 Filesystem [ 449.244909][T12187] XFS (loop3): Starting recovery (logdev: internal) [ 449.275782][T12187] XFS (loop3): Ending recovery (logdev: internal) [ 450.023446][T11211] XFS (loop3): Unmounting Filesystem [ 451.181088][T12274] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 451.201107][T12274] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 451.597690][T12292] device batadv_slave_1 entered promiscuous mode [ 451.636298][T12292] device macvtap0 entered promiscuous mode [ 451.662482][T12289] device macvtap0 left promiscuous mode [ 451.668548][T12289] device batadv_slave_1 left promiscuous mode [ 452.168298][T12315] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 452.267842][T12315] CIFS: Unable to determine destination address [ 452.352187][T12321] netlink: 'syz.0.2453': attribute type 1 has an invalid length. [ 452.457771][T12321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 452.952637][T12353] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2462'. [ 453.606584][T12098] Set syz1 is full, maxelem 65536 reached [ 454.107572][T12402] netlink: 'syz.4.2473': attribute type 1 has an invalid length. [ 454.288891][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2475'. [ 454.705118][T12425] kernel read not supported for file /file0 (pid: 12425 comm: syz.0.2481) [ 454.745942][ T26] audit: type=1800 audit(454.742:80): pid=12425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2481" name="file0" dev="mqueue" ino=63851 res=0 errno=0 [ 454.933508][T12436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 455.355720][ T26] audit: type=1326 audit(455.352:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 455.410408][ T26] audit: type=1326 audit(455.352:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 455.492232][ T26] audit: type=1326 audit(455.352:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 455.537892][T12457] loop4: detected capacity change from 0 to 512 [ 455.570777][ T26] audit: type=1326 audit(455.352:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 455.658419][ T26] audit: type=1326 audit(455.352:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 455.812758][ T26] audit: type=1326 audit(455.372:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 455.919604][ T26] audit: type=1326 audit(455.372:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 456.018006][ T26] audit: type=1326 audit(455.372:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 456.120239][ T26] audit: type=1326 audit(455.372:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12453 comm="syz.4.2488" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fa8601e59 code=0x7ffc0000 [ 456.310469][T12471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2494'. [ 456.679618][ T9118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.898411][ T9118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.052701][ T9118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.189919][ T9118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.110308][T12502] chnl_net:caif_netlink_parms(): no params data found [ 458.489307][T12502] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.498259][T12502] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.506644][T12502] device bridge_slave_0 entered promiscuous mode [ 458.526207][T12502] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.541444][T12502] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.550709][T12502] device bridge_slave_1 entered promiscuous mode [ 458.701711][T12502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.729294][T12536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2507'. [ 458.817243][T12536] device bond1 entered promiscuous mode [ 458.829126][T12536] 8021q: adding VLAN 0 to HW filter on device bond1 [ 458.866983][T12502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.944050][T12539] device macvlan2 entered promiscuous mode [ 458.990061][T12539] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 459.139353][T12502] team0: Port device team_slave_0 added [ 459.239225][T12502] team0: Port device team_slave_1 added [ 459.304732][ T9118] device hsr_slave_0 left promiscuous mode [ 459.321987][ T9118] device hsr_slave_1 left promiscuous mode [ 459.341885][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.349369][ T9118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.365889][ T9118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.378256][ T9118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.390899][ T9118] device bridge_slave_1 left promiscuous mode [ 459.410874][ T9118] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.434119][ T9118] device bridge_slave_0 left promiscuous mode [ 459.440682][ T9118] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.465679][ T9118] device veth1_macvtap left promiscuous mode [ 459.477718][ T9118] device veth0_macvtap left promiscuous mode [ 459.484431][ T9118] device veth1_vlan left promiscuous mode [ 459.490486][ T9118] device veth0_vlan left promiscuous mode [ 459.525759][T12560] overlayfs: failed to clone upperpath [ 459.721388][ T4217] Bluetooth: hci4: command 0x0409 tx timeout [ 459.877876][ T9118] team0 (unregistering): Port device team_slave_1 removed [ 459.901815][ T9118] team0 (unregistering): Port device team_slave_0 removed [ 459.917696][ T9118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.939082][ T9118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.078614][ T9118] bond0 (unregistering): Released all slaves [ 460.168469][T12550] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2508'. [ 460.218598][T12502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.232758][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.259324][T12502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.305631][T12520] chnl_net:caif_netlink_parms(): no params data found [ 460.316969][T12502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.335262][T12502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.361291][ T4217] Bluetooth: hci0: command 0x0409 tx timeout [ 460.385696][T12502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.606743][T12502] device hsr_slave_0 entered promiscuous mode [ 460.626890][T12502] device hsr_slave_1 entered promiscuous mode [ 460.648582][T12502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.665232][T12502] Cannot create hsr debugfs directory [ 460.868077][T12520] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.876293][T12520] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.892419][T12520] device bridge_slave_0 entered promiscuous mode [ 460.918196][T12591] xt_hashlimit: size too large, truncated to 1048576 [ 460.949721][T12520] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.987503][T12520] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.024547][T12520] device bridge_slave_1 entered promiscuous mode [ 461.208989][T12520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.258430][T12520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.317637][T12604] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 461.408340][T12607] bond5: (slave gretap2): making interface the new active one [ 461.417607][T12607] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 461.464458][T12520] team0: Port device team_slave_0 added [ 461.549161][T12520] team0: Port device team_slave_1 added [ 461.608129][ T5227] libceph: connect (1)[c::]:6789 error -101 [ 461.631418][ T5227] libceph: mon0 (1)[c::]:6789 connect error [ 461.653088][T12611] ceph: No mds server is up or the cluster is laggy [ 461.740370][T12520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.791315][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.823668][ T8847] Bluetooth: hci4: command 0x041b tx timeout [ 461.864511][T12520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.959107][T12520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.011078][T12520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.098612][T12520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.234787][T12520] device hsr_slave_0 entered promiscuous mode [ 462.263474][T12520] device hsr_slave_1 entered promiscuous mode [ 462.275306][T12520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.293338][T12520] Cannot create hsr debugfs directory [ 462.379752][T12502] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 462.426530][T12502] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 462.441660][ T4217] Bluetooth: hci0: command 0x041b tx timeout [ 462.480646][T12502] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.523842][T12502] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 462.840441][T12520] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.883860][T12520] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.049368][T12502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.177102][T12520] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.205520][T12520] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.305842][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.317194][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.398544][T12520] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.461033][T12520] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.506791][T12502] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.552860][T12665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2533'. [ 463.667748][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.702196][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.735488][ T9108] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.742681][ T9108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.839359][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 463.883460][ T8847] Bluetooth: hci4: command 0x040f tx timeout [ 463.920027][T12520] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.957397][T12520] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.044164][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 464.065334][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 464.101666][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.108784][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 464.131384][T12682] netlink: 'syz.3.2536': attribute type 12 has an invalid length. [ 464.139261][T12682] netlink: 'syz.3.2536': attribute type 29 has an invalid length. [ 464.211441][T12682] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2536'. [ 464.285337][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 464.313174][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 464.346512][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 464.379711][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 464.451271][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 464.460032][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 464.479748][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 464.521144][ T5227] Bluetooth: hci0: command 0x040f tx timeout [ 464.528269][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 464.572941][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 464.633213][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 464.654549][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 464.694472][T12502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 464.737105][T12520] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 464.768995][T12520] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.822331][T12520] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.876047][T12520] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.006517][T12711] netlink: 'syz.0.2543': attribute type 9 has an invalid length. [ 465.052197][T12711] netlink: 16166 bytes leftover after parsing attributes in process `syz.0.2543'. [ 465.245723][T12520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.292567][T12720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2544'. [ 465.428369][T12502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.451852][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 465.459847][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 465.497948][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.516263][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.542392][T12520] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.594288][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 465.622210][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 465.661437][ T9111] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.668622][ T9111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.727393][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 465.753589][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 465.792072][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 465.823073][ T9111] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.830366][ T9111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.882030][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 465.919383][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 465.963557][ T8847] Bluetooth: hci4: command 0x0419 tx timeout [ 466.011495][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.044765][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.099309][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.135857][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.172828][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.199545][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.239300][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.280798][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.334257][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.380879][T12520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.598803][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.607333][ T4217] Bluetooth: hci0: command 0x0419 tx timeout [ 466.635965][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.688708][T12760] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 466.719259][T12760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.755860][T12760] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.779205][T12760] device bridge_slave_0 left promiscuous mode [ 466.796901][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.185689][T12760] device bridge_slave_1 left promiscuous mode [ 467.198802][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.222165][T12760] bond0: (slave bond_slave_0): Releasing backup interface [ 467.243760][T12760] bond0: (slave bond_slave_1): Releasing backup interface [ 467.310323][T12760] team0: Port device team_slave_0 removed [ 467.331550][T12760] team0: Port device team_slave_1 removed [ 467.338624][T12760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.355370][T12760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.368081][T12760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.376842][T12760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.415068][T12777] netlink: 'syz.0.2556': attribute type 2 has an invalid length. [ 467.493680][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 467.519148][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 467.547331][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 467.563036][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 467.618911][T12502] device veth0_vlan entered promiscuous mode [ 467.729317][T12502] device veth1_vlan entered promiscuous mode [ 467.794386][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 467.811369][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 467.895589][T12520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.957556][T12502] device veth0_macvtap entered promiscuous mode [ 467.992623][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 468.016414][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 468.100169][T12502] device veth1_macvtap entered promiscuous mode [ 468.109795][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 468.123186][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 468.165770][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.193030][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.209522][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.229134][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.250328][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.278025][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.313101][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 468.351248][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.363713][T12502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.388257][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.438943][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.468604][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.489119][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.501238][T12502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 468.521396][T12502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 468.540837][T12502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.569114][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 468.583784][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 468.604813][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 468.615060][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 468.636672][T12502] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.659047][T12502] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.669750][T12502] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.679646][T12502] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.711157][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.720900][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.800823][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 469.039615][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.348348][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.483160][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 469.554040][T12520] device veth0_vlan entered promiscuous mode [ 469.687320][T12520] device veth1_vlan entered promiscuous mode [ 469.885962][ T5143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.924262][ T5143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.987384][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 470.005780][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 470.068450][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 470.117835][T12520] device veth0_macvtap entered promiscuous mode [ 470.180252][T12520] device veth1_macvtap entered promiscuous mode [ 470.227516][ T9105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 470.287586][ T9105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 470.347285][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 470.368513][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.416143][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 470.456553][T12859] loop2: detected capacity change from 0 to 2048 [ 470.493229][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.520167][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.569451][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.591052][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.600937][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.642804][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.687159][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.717454][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.737168][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 470.750362][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 470.768210][T12520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 470.804402][T12859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 470.842154][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 470.871531][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 470.891375][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 470.891461][ T26] audit: type=1800 audit(470.892:96): pid=12859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2574" name="file1" dev="loop2" ino=1415 res=0 errno=0 [ 470.948397][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 470.998352][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.051784][T12876] Can't find a SQUASHFS superblock on nullb0 [ 471.081915][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.131684][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.174984][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.199512][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.224369][T12520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 471.262043][T12520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.332541][T12520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.340857][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 471.393911][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 471.470943][T12520] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.513505][T12520] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.537213][T12520] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.590639][T12520] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.936550][ T9103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.957579][T12910] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 471.965753][ T9103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.002742][T12915] loop2: detected capacity change from 0 to 512 [ 472.063044][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 472.109216][ T9101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.120933][T12915] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 472.171572][ T9101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.187851][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 472.215898][T12915] EXT4-fs (loop2): 1 truncate cleaned up [ 472.273610][T12915] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x000000000000000d,debug_want_extra_isize=0x0000000000000068,mb_optimize_scan=0x0000000000000001,data_err=ignore,dioread_lock,. Quota mode: none. [ 472.686568][T12948] netlink: 'syz.6.2601': attribute type 1 has an invalid length. [ 473.601530][T12998] bridge0: port 3(syz_tun) entered blocking state [ 473.616149][T12998] bridge0: port 3(syz_tun) entered disabled state [ 473.652538][T12998] device syz_tun entered promiscuous mode [ 473.680104][T12998] bridge0: port 3(syz_tun) entered blocking state [ 473.686710][T12998] bridge0: port 3(syz_tun) entered forwarding state [ 475.267826][T13053] loop7: detected capacity change from 0 to 2048 [ 475.396462][T13062] loop3: detected capacity change from 0 to 256 [ 475.528889][T13062] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001053e, chksum : 0x9ba999a5, utbl_chksum : 0xe619d30d) [ 476.518214][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.548217][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 476.580859][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.600838][T13115] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 476.630869][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 476.655807][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.702750][T13099] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 476.806346][T13099] device bond1 left promiscuous mode [ 477.126205][T13113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 477.373287][T13113] device team_slave_0 left promiscuous mode [ 477.412898][T13113] team0: Port device team_slave_0 removed [ 477.439991][T13131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2651'. [ 477.471653][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2652'. [ 477.557374][T13139] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.566343][T13139] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.575226][T13139] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.584049][T13139] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.682717][T13144] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2653'. [ 477.719948][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2652'. [ 478.290646][T13178] sctp: [Deprecated]: syz.0.2663 (pid 13178) Use of int in max_burst socket option. [ 478.290646][T13178] Use struct sctp_assoc_value instead [ 478.490421][T13192] netlink: 'syz.0.2667': attribute type 1 has an invalid length. [ 478.587308][T13192] 8021q: adding VLAN 0 to HW filter on device bond6 [ 478.626588][T13199] device syz_tun left promiscuous mode [ 478.664646][T13199] bond0: (slave syz_tun): Releasing backup interface [ 478.680006][T13199] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 478.692208][T13198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.732165][T13198] device batadv_slave_0 entered promiscuous mode [ 478.793222][ T9114] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 478.851678][T13203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2670'. [ 478.924072][T13206] lo speed is unknown, defaulting to 1000 [ 478.930698][T13206] lo speed is unknown, defaulting to 1000 [ 478.950785][T13206] lo speed is unknown, defaulting to 1000 [ 478.965752][T13206] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 478.981847][T13206] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 479.040211][T13206] lo speed is unknown, defaulting to 1000 [ 479.047874][T13206] lo speed is unknown, defaulting to 1000 [ 479.055572][T13206] lo speed is unknown, defaulting to 1000 [ 479.062892][T13206] lo speed is unknown, defaulting to 1000 [ 479.069900][T13206] lo speed is unknown, defaulting to 1000 [ 479.076778][T13206] lo speed is unknown, defaulting to 1000 [ 479.085978][T13206] lo speed is unknown, defaulting to 1000 [ 479.116743][T13210] loop6: detected capacity change from 0 to 1024 [ 479.219575][T13210] hfsplus: failed to load catalog file [ 479.301956][T13216] loop3: detected capacity change from 0 to 64 [ 479.416838][T13221] loop7: detected capacity change from 0 to 128 [ 479.471919][T13210] loop6: detected capacity change from 0 to 2048 [ 479.586453][T13221] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.611495][T13210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.691921][T13216] Trying to free block not in datazone [ 479.698519][T13216] Trying to free block not in datazone [ 479.775481][T13216] Trying to free block not in datazone [ 479.784559][T13216] Trying to free block not in datazone [ 479.869875][T13232] attempt to access beyond end of device [ 479.869875][T13232] loop3: rw=0, want=234881064, limit=64 [ 479.899248][T13232] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 479.966699][T13239] bridge0: port 3(syz_tun) entered disabled state [ 479.973955][T13239] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.978593][T13232] attempt to access beyond end of device [ 479.978593][T13232] loop3: rw=0, want=234881064, limit=64 [ 479.981265][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.026944][T13232] Buffer I/O error on dev loop3, logical block 117440531, async page read [ 480.040849][ T26] audit: type=1800 audit(480.032:97): pid=13232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2674" name="file1" dev="loop3" ino=6 res=0 errno=0 [ 480.046924][T13232] Trying to free block not in datazone [ 480.089137][T13232] Trying to free block not in datazone [ 480.100513][T13242] device syz_tun left promiscuous mode [ 480.105477][T13232] Trying to free block not in datazone [ 480.123442][T13232] Trying to free block not in datazone [ 480.129522][T13242] bridge0: port 3(syz_tun) entered disabled state [ 480.181243][T13232] Trying to free block not in datazone [ 480.186867][T13232] Trying to free block not in datazone [ 480.207723][T13242] device bridge_slave_1 left promiscuous mode [ 480.251174][T13232] Trying to free block not in datazone [ 480.278847][T13232] Trying to free block not in datazone [ 480.302517][T13242] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.311241][T13232] Trying to free block not in datazone [ 480.316752][T13232] Trying to free block not in datazone [ 480.358621][T13242] device bridge_slave_0 left promiscuous mode [ 480.366978][T13232] Trying to free block not in datazone [ 480.386990][T13232] Trying to free block not in datazone [ 480.392971][T13242] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.406856][T13232] Trying to free block not in datazone [ 480.425815][T13232] Trying to free block not in datazone [ 480.446066][T13232] Trying to free block not in datazone [ 480.488556][T13232] Trying to free block not in datazone [ 480.504754][T13232] Trying to free block not in datazone [ 480.510627][T13232] Trying to free block not in datazone [ 480.531273][T13232] Trying to free block not in datazone [ 480.536796][T13232] Trying to free block not in datazone [ 480.558036][T13232] Trying to free block not in datazone [ 480.595470][T13232] Trying to free block not in datazone [ 480.632322][T13232] Trying to free block not in datazone [ 480.637850][T13232] Trying to free block not in datazone [ 480.654090][T13232] Trying to free block not in datazone [ 480.659619][T13232] Trying to free block not in datazone [ 480.686045][T13232] Trying to free block not in datazone [ 480.721118][T13232] Trying to free block not in datazone [ 480.736921][T13232] Trying to free block not in datazone [ 480.757877][T13232] Trying to free block not in datazone [ 480.771043][T13232] Trying to free block not in datazone [ 480.776679][T13232] Trying to free block not in datazone [ 480.818965][T13232] Trying to free block not in datazone [ 480.861064][T13232] Trying to free block not in datazone [ 480.866660][T13232] Trying to free block not in datazone [ 480.883847][T13232] Trying to free block not in datazone [ 480.898098][T13232] Trying to free block not in datazone [ 480.918669][T13232] Trying to free block not in datazone [ 480.964238][T13232] Trying to free block not in datazone [ 480.969774][T13232] Trying to free block not in datazone [ 480.994967][T13232] Trying to free block not in datazone [ 481.000578][T13232] Trying to free block not in datazone [ 481.049684][T13232] Trying to free block not in datazone [ 481.090023][T13232] Trying to free block not in datazone [ 481.101344][ T26] audit: type=1326 audit(481.102:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13274 comm="syz.0.2690" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2ea632e59 code=0x0 [ 481.123465][T13232] Trying to free block not in datazone [ 481.130404][T13232] Trying to free block not in datazone [ 481.160657][T13232] Trying to free block not in datazone [ 481.191235][T13232] Trying to free block not in datazone [ 481.196758][T13232] Trying to free block not in datazone [ 481.221107][T13232] Trying to free block not in datazone [ 481.226647][T13232] Trying to free block not in datazone [ 481.245296][ T26] audit: type=1326 audit(481.242:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13282 comm="syz.7.2691" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac507fce59 code=0x0 [ 481.251137][T13232] Trying to free block not in datazone [ 481.304731][T13232] Trying to free block not in datazone [ 481.323781][T13232] Trying to free block not in datazone [ 481.332734][T13232] Trying to free block not in datazone [ 481.350009][T13232] Trying to free block not in datazone [ 481.371360][T13232] Trying to free block not in datazone [ 481.377070][T13232] Trying to free block not in datazone [ 481.407304][T13232] Trying to free block not in datazone [ 481.424368][T13232] Trying to free block not in datazone [ 481.442157][T13232] Trying to free block not in datazone [ 481.462275][T13232] Trying to free block not in datazone [ 481.482051][T13232] Trying to free block not in datazone [ 481.496011][T13232] Trying to free block not in datazone [ 481.529125][T13232] Trying to free block not in datazone [ 481.542828][T13232] Trying to free block not in datazone [ 481.548356][T13232] Trying to free block not in datazone [ 481.581367][T13232] Trying to free block not in datazone [ 481.605936][T13232] Trying to free block not in datazone [ 481.623652][T13232] Trying to free block not in datazone [ 481.629531][T13232] Trying to free block not in datazone [ 481.659858][T13232] Trying to free block not in datazone [ 481.668954][T13232] Trying to free block not in datazone [ 481.679033][T13232] Trying to free block not in datazone [ 481.689899][T13232] Trying to free block not in datazone [ 481.708560][T13232] Trying to free block not in datazone [ 481.755416][T13232] Trying to free block not in datazone [ 481.765509][T13232] Trying to free block not in datazone [ 481.776965][T13232] Trying to free block not in datazone [ 481.810341][T13232] Trying to free block not in datazone [ 481.821167][T13232] Trying to free block not in datazone [ 481.826681][T13232] Trying to free block not in datazone [ 481.845587][T13232] Trying to free block not in datazone [ 481.860191][T13232] Trying to free block not in datazone [ 481.866963][T13232] Trying to free block not in datazone [ 481.879199][T13232] Trying to free block not in datazone [ 481.886200][T13232] Trying to free block not in datazone [ 481.911982][T13232] Trying to free block not in datazone [ 481.932209][T13232] Trying to free block not in datazone [ 481.937728][T13232] Trying to free block not in datazone [ 481.959118][T13232] Trying to free block not in datazone [ 481.988564][T13232] Trying to free block not in datazone [ 481.996159][T13232] Trying to free block not in datazone [ 482.010314][T13232] Trying to free block not in datazone [ 482.024502][T13232] Trying to free block not in datazone [ 482.044819][T13232] Trying to free block not in datazone [ 482.089004][T13232] Trying to free block not in datazone [ 482.096096][T13232] Trying to free block not in datazone [ 482.131348][T13232] Trying to free block not in datazone [ 482.136864][T13232] Trying to free block not in datazone [ 482.179123][T13232] Trying to free block not in datazone [ 482.200252][T13232] Trying to free block not in datazone [ 482.219684][T13232] Trying to free block not in datazone [ 482.256824][T13232] Trying to free block not in datazone [ 482.273715][T13232] Trying to free block not in datazone [ 482.279242][T13232] Trying to free block not in datazone [ 482.338474][T13232] Trying to free block not in datazone [ 482.352831][T13232] Trying to free block not in datazone [ 482.372565][T13232] Trying to free block not in datazone [ 482.378089][T13232] Trying to free block not in datazone [ 482.410534][T13232] Trying to free block not in datazone [ 482.441077][T13232] Trying to free block not in datazone [ 482.446599][T13232] Trying to free block not in datazone [ 482.492244][T13232] Trying to free block not in datazone [ 482.511028][T13232] Trying to free block not in datazone [ 482.516557][T13232] Trying to free block not in datazone [ 482.545851][T13232] Trying to free block not in datazone [ 482.567405][T13232] Trying to free block not in datazone [ 482.583416][T13232] Trying to free block not in datazone [ 482.588937][T13232] Trying to free block not in datazone [ 482.596292][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2697'. [ 482.615813][T13232] Trying to free block not in datazone [ 482.631439][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2697'. [ 482.641241][T13232] Trying to free block not in datazone [ 482.671852][T13232] Trying to free block not in datazone [ 482.701797][T13232] Trying to free block not in datazone [ 482.707318][T13232] Trying to free block not in datazone [ 482.733863][T13232] Trying to free block not in datazone [ 482.749611][T13232] Trying to free block not in datazone [ 482.766318][T13232] Trying to free block not in datazone [ 482.788006][T13232] Trying to free block not in datazone [ 482.871055][T13232] Trying to free block not in datazone [ 482.876820][T13232] Trying to free block not in datazone [ 482.901440][T13232] Trying to free block not in datazone [ 482.907083][T13232] Trying to free block not in datazone [ 482.961082][T13232] Trying to free block not in datazone [ 482.974580][T13232] Trying to free block not in datazone [ 482.980110][T13232] Trying to free block not in datazone [ 483.003392][T13339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2706'. [ 483.018633][T13232] Trying to free block not in datazone [ 483.025510][T13232] Trying to free block not in datazone [ 483.038665][T13232] Trying to free block not in datazone [ 483.056386][T13232] Trying to free block not in datazone [ 483.101463][T13232] Trying to free block not in datazone [ 483.121532][T13232] Trying to free block not in datazone [ 483.127057][T13232] Trying to free block not in datazone [ 483.159179][T13344] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2707'. [ 483.191314][T13232] Trying to free block not in datazone [ 483.196837][T13232] Trying to free block not in datazone [ 483.267517][T13232] Trying to free block not in datazone [ 483.283667][T13232] Trying to free block not in datazone [ 483.289198][T13232] Trying to free block not in datazone [ 483.316880][T13232] Trying to free block not in datazone [ 483.330878][T13232] Trying to free block not in datazone [ 483.336820][T13232] Trying to free block not in datazone [ 483.351169][T13232] Trying to free block not in datazone [ 483.362333][T13232] Trying to free block not in datazone [ 483.368481][T13348] loop2: detected capacity change from 0 to 1764 [ 483.393958][T13232] Trying to free block not in datazone [ 483.408523][T13232] Trying to free block not in datazone [ 483.418352][T13232] Trying to free block not in datazone [ 483.491434][T13232] Trying to free block not in datazone [ 483.523746][T13232] Trying to free block not in datazone [ 483.545891][T13232] Trying to free block not in datazone [ 483.560131][T13232] Trying to free block not in datazone [ 483.583974][T13232] Trying to free block not in datazone [ 483.605860][T13232] Trying to free block not in datazone [ 483.635510][T13232] Trying to free block not in datazone [ 483.667830][T13232] Trying to free block not in datazone [ 483.688079][T13232] Trying to free block not in datazone [ 483.707530][T13232] Trying to free block not in datazone [ 483.732494][T13232] Trying to free block not in datazone [ 483.750600][T13232] Trying to free block not in datazone [ 483.777958][T13232] Trying to free block not in datazone [ 483.786051][T13367] loop7: detected capacity change from 0 to 164 [ 483.801673][T13232] Trying to free block not in datazone [ 483.819192][T13232] Trying to free block not in datazone [ 483.830413][T13232] Trying to free block not in datazone [ 483.845736][T13232] Trying to free block not in datazone [ 483.855101][T13232] Trying to free block not in datazone [ 483.860762][T13232] Trying to free block not in datazone [ 483.876717][T13232] Trying to free block not in datazone [ 483.885379][T13232] Trying to free block not in datazone [ 483.897439][T13232] Trying to free block not in datazone [ 483.905414][T13232] Trying to free block not in datazone [ 483.945889][T13372] netlink: 'syz.6.2716': attribute type 1 has an invalid length. [ 483.948092][T13232] Trying to free block not in datazone [ 483.994671][T13232] Trying to free block not in datazone [ 484.008877][T13232] Trying to free block not in datazone [ 484.029041][T13232] Trying to free block not in datazone [ 484.043770][T13232] Trying to free block not in datazone [ 484.056439][T13232] Trying to free block not in datazone [ 484.068531][T13372] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.075538][T13232] Trying to free block not in datazone [ 484.103021][T13232] Trying to free block not in datazone [ 484.108543][T13232] Trying to free block not in datazone [ 484.114319][T13232] Trying to free block not in datazone [ 484.119830][T13232] Trying to free block not in datazone [ 484.125728][T13232] Trying to free block not in datazone [ 484.131286][T13232] Trying to free block not in datazone [ 484.136781][T13232] Trying to free block not in datazone [ 484.148555][T13232] Trying to free block not in datazone [ 484.154281][T13232] Trying to free block not in datazone [ 484.159781][T13232] Trying to free block not in datazone [ 484.168061][T13232] Trying to free block not in datazone [ 484.188651][T13232] Trying to free block not in datazone [ 484.221128][T13232] Trying to free block not in datazone [ 484.227148][T13232] Trying to free block not in datazone [ 484.252931][T13232] Trying to free block not in datazone [ 484.258462][T13232] Trying to free block not in datazone [ 484.269054][T13374] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 484.295367][T13232] Trying to free block not in datazone [ 484.300891][T13232] Trying to free block not in datazone [ 484.307147][ T5143] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 484.331135][T13232] Trying to free block not in datazone [ 484.336659][T13232] Trying to free block not in datazone [ 484.360717][T13232] Trying to free block not in datazone [ 484.366716][T13232] Trying to free block not in datazone [ 484.384541][T13232] Trying to free block not in datazone [ 484.390616][T13232] Trying to free block not in datazone [ 484.400029][T13232] Trying to free block not in datazone [ 484.427296][T13232] Trying to free block not in datazone [ 484.441906][T13232] Trying to free block not in datazone [ 484.447817][T13232] Trying to free block not in datazone [ 484.480601][T13232] Trying to free block not in datazone [ 484.514475][T13232] Trying to free block not in datazone [ 484.519996][T13232] Trying to free block not in datazone [ 484.541454][T13232] Trying to free block not in datazone [ 484.567398][T13232] Trying to free block not in datazone [ 484.577538][T13232] Trying to free block not in datazone [ 484.591514][T13232] Trying to free block not in datazone [ 484.597026][T13232] Trying to free block not in datazone [ 484.611040][T13232] Trying to free block not in datazone [ 484.647154][T13232] Trying to free block not in datazone [ 484.670485][T13232] Trying to free block not in datazone [ 484.697570][T13232] Trying to free block not in datazone [ 484.707693][T13232] Trying to free block not in datazone [ 484.723951][T13232] Trying to free block not in datazone [ 484.739727][T13232] Trying to free block not in datazone [ 484.745719][ T5421] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 484.778423][T13232] Trying to free block not in datazone [ 484.785701][T13232] Trying to free block not in datazone [ 484.819143][T13232] Trying to free block not in datazone [ 484.831296][T13232] Trying to free block not in datazone [ 484.837126][T13232] Trying to free block not in datazone [ 484.859661][T13232] Trying to free block not in datazone [ 484.902425][T13232] Trying to free block not in datazone [ 484.907963][T13232] Trying to free block not in datazone [ 484.941026][T13232] Trying to free block not in datazone [ 484.946585][T13232] Trying to free block not in datazone [ 484.961007][T13232] Trying to free block not in datazone [ 484.999979][T13232] Trying to free block not in datazone [ 485.013999][T13232] Trying to free block not in datazone [ 485.019524][T13232] Trying to free block not in datazone [ 485.027588][T13232] Trying to free block not in datazone [ 485.033403][T13232] Trying to free block not in datazone [ 485.038901][T13232] Trying to free block not in datazone [ 485.044842][T13232] Trying to free block not in datazone [ 485.053586][T13232] Trying to free block not in datazone [ 485.059103][T13232] Trying to free block not in datazone [ 485.064987][ T5421] usb 7-1: Using ep0 maxpacket: 32 [ 485.087193][T13232] Trying to free block not in datazone [ 485.098479][T13232] Trying to free block not in datazone [ 485.111374][T13232] Trying to free block not in datazone [ 485.117237][T13232] Trying to free block not in datazone [ 485.141257][T13232] Trying to free block not in datazone [ 485.146787][T13232] Trying to free block not in datazone [ 485.165163][T13232] Trying to free block not in datazone [ 485.177433][T13232] Trying to free block not in datazone [ 485.196393][T13232] Trying to free block not in datazone [ 485.271292][ T5421] usb 7-1: unable to get BOS descriptor or descriptor too short [ 485.291967][T13415] netlink: 'syz.0.2724': attribute type 1 has an invalid length. [ 485.361397][ T5421] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 485.381078][ T5421] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.472092][T13418] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 485.526030][T13418] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 485.564974][T13418] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 485.583925][ T5421] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 485.597198][T13418] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 485.611046][ T5421] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.619104][ T5421] usb 7-1: Product: syz [ 485.633824][ T5421] usb 7-1: Manufacturer: syz [ 485.649044][ T5421] usb 7-1: SerialNumber: syz [ 485.661420][T13418] bond7: (slave geneve3): making interface the new active one [ 485.685705][T13418] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 485.789279][T13418] syz.0.2724 (13418) used greatest stack depth: 18544 bytes left [ 485.963951][T13436] tipc: Started in network mode [ 485.990131][T13436] tipc: Node identity 84e, cluster identity 4711 [ 486.007895][T13436] tipc: Node number set to 2126 [ 486.084842][ T5421] usb 7-1: USB disconnect, device number 9 [ 486.836307][T13468] TCP: TCP_TX_DELAY enabled [ 486.958274][ T5427] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 487.232825][ T5427] usb 8-1: Using ep0 maxpacket: 16 [ 487.351411][ T5427] usb 8-1: config index 0 descriptor too short (expected 51443, got 18) [ 487.551266][ T5427] usb 8-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 487.570698][ T5427] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.593018][ T5427] usb 8-1: Product: syz [ 487.597248][ T5427] usb 8-1: Manufacturer: syz [ 487.621154][ T5427] usb 8-1: SerialNumber: syz [ 487.653715][ T5427] r8152-cfgselector 8-1: config 0 descriptor?? [ 488.178232][ T5427] r8152-cfgselector 8-1: Unknown version 0x0000 [ 488.188429][ T5427] r8152-cfgselector 8-1: bad CDC descriptors [ 488.239582][ T5427] r8152-cfgselector 8-1: Unknown version 0x0000 [ 488.269502][ T5427] r8152-cfgselector 8-1: USB disconnect, device number 4 [ 488.680511][ T5413] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 488.901256][ T5413] usb 4-1: device descriptor read/64, error -71 [ 489.181121][ T5413] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 489.381128][ T5413] usb 4-1: device descriptor read/64, error -71 [ 489.511953][ T5413] usb usb4-port1: attempt power cycle [ 489.921129][ T5413] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 490.073125][ T5413] usb 4-1: device descriptor read/8, error -71 [ 490.149963][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2751'. [ 490.355296][ T5413] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 490.481177][ T5413] usb 4-1: device descriptor read/8, error -71 [ 490.532928][T13591] loop6: detected capacity change from 0 to 16 [ 490.602760][ T5413] usb usb4-port1: unable to enumerate USB device [ 490.625982][T13591] erofs: (device loop6): mounted with root inode @ nid 36. [ 490.713989][T13591] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 490.949320][T13590] bond0: (slave bond_slave_0): Slave does not support ipsec offload [ 491.412572][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2764'. [ 491.440707][T13625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2764'. [ 491.730244][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.860670][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.006641][T13645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.041541][T13645] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 492.085132][T13645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.105392][T13645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 492.153767][T13645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.201504][T13645] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 492.238159][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.245498][T13645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.255229][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.262396][T13645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.309311][T13650] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2770'. [ 492.702953][T13680] netlink: 'syz.7.2774': attribute type 9 has an invalid length. [ 492.731076][T13680] netlink: 16166 bytes leftover after parsing attributes in process `syz.7.2774'. [ 492.963178][T13697] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2778'. [ 494.606149][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2788'. [ 495.360203][T13774] lo speed is unknown, defaulting to 1000 [ 495.874175][T13792] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2802'. [ 495.955579][T13792] bridge0: port 3(team0) entered disabled state [ 495.962060][T13792] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.969303][T13792] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.170850][T13797] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2802'. [ 497.214119][T13847] fuse: Bad value for 'fd' [ 497.634148][T13864] "syz.0.2823" (13864) uses obsolete ecb(arc4) skcipher [ 497.825597][T13867] overlayfs: failed to clone lowerpath [ 497.835299][T13867] overlayfs: failed to clone lowerpath [ 498.568399][T13692] Set syz1 is full, maxelem 65536 reached [ 499.410812][T13928] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2838'. [ 499.540192][T13920] lo speed is unknown, defaulting to 1000 [ 499.611202][T13933] 8021q: adding VLAN 0 to HW filter on device bond9 [ 499.620726][T13933] bond8: (slave bond9): Enslaving as an active interface with an up link [ 499.630048][T13928] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2838'. [ 499.649931][T13928] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.050565][T13956] loop6: detected capacity change from 0 to 256 [ 500.258871][T13920] chnl_net:caif_netlink_parms(): no params data found [ 500.411917][ T9103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.537997][T13920] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.554688][T13920] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.568532][T13920] device bridge_slave_0 entered promiscuous mode [ 500.595781][ T9103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.616283][T13920] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.628621][T13920] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.638265][T13920] device bridge_slave_1 entered promiscuous mode [ 500.657724][ T9103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.700378][T13920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.749100][ T9103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.770179][T13920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.779595][T13984] loop3: detected capacity change from 0 to 2048 [ 500.803030][ T5223] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 500.855069][T13984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 500.873610][T13920] team0: Port device team_slave_0 added [ 500.901891][T13920] team0: Port device team_slave_1 added [ 501.002826][T13920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.041264][ T5223] usb 7-1: Using ep0 maxpacket: 16 [ 501.060484][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.098076][T13920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.116733][T13920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.123951][T13920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.164140][ T5223] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 501.181184][ T5223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 501.195981][ T5223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 501.209384][T13920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 501.216667][ T5223] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 501.237123][T13993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2854'. [ 501.246334][ T5223] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 501.307063][T13993] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2854'. [ 501.321769][ T5223] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 501.351472][ T5223] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 501.359531][ T5223] usb 7-1: Manufacturer: syz [ 501.402097][ T5223] usb 7-1: config 0 descriptor?? [ 501.428076][ T4217] Bluetooth: hci3: command 0x0409 tx timeout [ 501.486300][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.492910][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.636723][T13920] device hsr_slave_0 entered promiscuous mode [ 501.665898][ T5223] usb 7-1: USB disconnect, device number 10 [ 501.704947][T13920] device hsr_slave_1 entered promiscuous mode [ 501.712719][T13920] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 501.720529][T13920] Cannot create hsr debugfs directory [ 502.271188][ T1346] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 502.801440][ T1346] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 502.815354][ T1346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.848722][ T1346] usb 4-1: Product: syz [ 502.862351][ T1346] usb 4-1: Manufacturer: syz [ 502.878543][ T1346] usb 4-1: SerialNumber: syz [ 502.995506][ T9103] device hsr_slave_0 left promiscuous mode [ 503.003717][ T9103] device hsr_slave_1 left promiscuous mode [ 503.010284][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.030021][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.051096][ T9103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.058603][ T9103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.072126][ T9103] device vlan2 left promiscuous mode [ 503.077602][ T9103] device team_slave_1 left promiscuous mode [ 503.084468][ T9103] bridge0: port 3(vlan2) entered disabled state [ 503.103920][ T9103] device bridge_slave_1 left promiscuous mode [ 503.115850][ T9103] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.133969][ T9103] device bridge_slave_0 left promiscuous mode [ 503.147264][ T9103] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.171091][ T1346] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 503.215792][ T9103] device veth1_macvtap left promiscuous mode [ 503.223179][ T9103] device veth0_macvtap left promiscuous mode [ 503.230797][ T9103] device veth1_vlan left promiscuous mode [ 503.241424][ T1346] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 503.256814][ T9103] device veth0_vlan left promiscuous mode [ 503.489304][ T4217] Bluetooth: hci3: command 0x041b tx timeout [ 503.686726][ T9103] team0 (unregistering): Port device team_slave_1 removed [ 503.705245][ T9103] team0 (unregistering): Port device team_slave_0 removed [ 503.742184][ T9103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.759850][ T9103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.882341][ T9103] bond0 (unregistering): Released all slaves [ 503.940823][T14080] tipc: Enabled bearer , priority 10 [ 503.947842][T14081] netlink: 'syz.6.2875': attribute type 13 has an invalid length. [ 503.967113][T14081] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 503.979992][T14081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 503.988209][T14081] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.032772][T13920] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 504.066032][T13920] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 504.122027][T13920] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 504.150538][T13920] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 504.171162][ T1346] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 504.203371][ T1346] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 504.267397][ T1346] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 504.297970][ T1346] lan78xx: probe of 4-1:1.0 failed with error -71 [ 504.364688][ T1346] usb 4-1: USB disconnect, device number 16 [ 504.507336][T13920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.587164][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.613969][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.680106][T13920] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.813319][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.827270][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.871394][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.878652][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.913919][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 504.968303][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 505.006140][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 505.016682][ T9108] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.023861][ T9108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 505.039499][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 505.069000][T14126] loop7: detected capacity change from 0 to 1024 [ 505.144535][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 505.203228][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 505.238133][T14126] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 505.307056][T14126] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.2888: bg 0: block 112: padding at end of block bitmap is not set [ 505.333841][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 505.342974][T14126] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 42 with max blocks 1 with error 28 [ 505.356193][T14126] EXT4-fs (loop7): This should not happen!! Data will be lost [ 505.356193][T14126] [ 505.366871][T14126] EXT4-fs (loop7): Total free blocks count 0 [ 505.373438][T14126] EXT4-fs (loop7): Free/Dirty block details [ 505.379571][T14126] EXT4-fs (loop7): free_blocks=0 [ 505.385126][T14126] EXT4-fs (loop7): dirty_blocks=16 [ 505.390373][T14126] EXT4-fs (loop7): Block reservation details [ 505.396789][T14126] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 505.452306][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 505.499839][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 505.540795][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 505.568523][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 505.577177][ T4217] Bluetooth: hci3: command 0x040f tx timeout [ 505.603347][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 505.622688][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 505.632456][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 505.996902][T14150] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 506.030581][T14153] loop3: detected capacity change from 0 to 256 [ 506.288725][T11211] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 506.322315][T11211] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 506.613638][T14159] loop7: detected capacity change from 0 to 2048 [ 506.665670][T14159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 507.300095][T14139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.390231][T14139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.680585][T14139] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.689673][T14139] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.699248][T14139] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.708320][T14139] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.760679][ T5227] Bluetooth: hci3: command 0x0419 tx timeout [ 507.798390][T14139] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.808154][T14139] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.819263][T14139] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.833956][T14139] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.117267][T14139] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 508.126526][T14139] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 508.135915][T14139] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 508.144984][T14139] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 508.183422][T13920] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 508.758036][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 508.777774][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 508.806693][T13920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.478762][T14208] lo speed is unknown, defaulting to 1000 [ 509.545959][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 509.570714][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 509.666544][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 509.684478][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 509.722059][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 509.750088][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 509.773747][T13920] device veth0_vlan entered promiscuous mode [ 509.835808][T13920] device veth1_vlan entered promiscuous mode [ 509.919233][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 509.960914][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 509.970221][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.002344][ T9103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.056267][T13920] device veth0_macvtap entered promiscuous mode [ 510.090290][T13920] device veth1_macvtap entered promiscuous mode [ 510.192929][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.260988][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.300046][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.328776][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.359602][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.386326][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.430871][T13920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.466814][T14208] chnl_net:caif_netlink_parms(): no params data found [ 510.496276][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.510782][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.534840][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.545687][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.567573][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.590602][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.612566][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.629918][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.654696][T13920] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.672226][T13920] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.695139][T13920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.740322][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2914'. [ 510.760356][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.774880][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.806071][T13920] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.823411][T13920] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.832617][T13920] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.843597][T13920] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.955324][T14208] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.962967][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.971732][T14208] device bridge_slave_0 entered promiscuous mode [ 510.981849][T14208] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.989111][T14208] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.997469][T14208] device bridge_slave_1 entered promiscuous mode [ 511.124184][T14208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.186272][T14208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.311972][T14208] team0: Port device team_slave_0 added [ 511.348619][ T9101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.358726][ T9101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.400568][T14208] team0: Port device team_slave_1 added [ 511.424967][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 511.437215][T14275] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2923'. [ 511.479233][T14277] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2924'. [ 511.488653][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 511.619128][T14208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 511.626778][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.687634][T14208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 511.710546][T14208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 511.718125][T14208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 511.733756][ T9103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.764349][T14208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 511.829217][T14208] device hsr_slave_0 entered promiscuous mode [ 511.836329][ T9103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.871661][T14208] device hsr_slave_1 entered promiscuous mode [ 511.893447][T14208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 511.951167][T14208] Cannot create hsr debugfs directory [ 511.970169][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 512.082575][T14304] device bridge0 entered promiscuous mode [ 512.273360][ T5426] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 512.331157][T14311] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2932'. [ 512.383006][T14312] block device autoloading is deprecated and will be removed. [ 512.467495][T14208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.490394][T14208] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.522538][T14311] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 512.569193][ T5426] usb 7-1: Using ep0 maxpacket: 8 [ 512.676460][T14208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.718073][T14208] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.901269][ T5426] usb 7-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 512.924524][ T5426] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 512.953607][ T5426] usb 7-1: Product: syz [ 512.957935][ T5426] usb 7-1: Manufacturer: syz [ 512.972025][ T5426] usb 7-1: SerialNumber: syz [ 512.985884][ T5426] usb 7-1: config 0 descriptor?? [ 513.004647][T14208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.041038][T14208] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.073109][ T5426] usbtest 7-1:0.0: FX2 device [ 513.077873][ T5426] usbtest 7-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 513.212737][T14208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.243470][T14208] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.571596][ T5426] Bluetooth: hci1: command 0x041b tx timeout [ 513.608405][T14208] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 513.655497][T14208] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 513.684714][T14208] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 513.729269][T14208] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 513.791432][ T5426] usb 7-1: USB disconnect, device number 11 [ 513.968904][T14364] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2944'. [ 514.201433][T14384] team0: No ports can be present during mode change [ 514.300544][T14208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.365042][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 514.374918][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 514.417997][T14208] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.436184][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 514.451870][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 514.491522][ T9105] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.498759][ T9105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.600359][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 514.678346][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 514.760652][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 514.810786][ T9105] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.818063][ T9105] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.878825][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 514.915538][T14393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2952'. [ 514.957102][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 514.979459][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 514.994004][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 515.017200][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 515.036757][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 515.063335][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 515.092472][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 515.129699][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 515.226168][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 515.236420][T14419] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 515.268773][ T9101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 515.302528][T14208] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 515.331550][T14426] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 515.483186][T14428] loop6: detected capacity change from 0 to 2048 [ 515.607150][T14428] EXT4-fs (loop6): Journaled quota options ignored when QUOTA feature is enabled [ 515.641251][ T4276] Bluetooth: hci1: command 0x040f tx timeout [ 515.686379][T14428] EXT4-fs (loop6): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 515.840023][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 515.851589][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 515.906660][T14208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 516.161699][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 516.190092][ T1473] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 516.230034][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.254721][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.288375][T14208] device veth0_vlan entered promiscuous mode [ 516.300271][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.319065][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.367259][T14208] device veth1_vlan entered promiscuous mode [ 516.494593][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.508630][ T26] audit: type=1326 audit(516.502:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14473 comm="syz.7.2970" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac507fce59 code=0x0 [ 516.537639][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.572834][T14208] device veth0_macvtap entered promiscuous mode [ 516.603439][T14208] device veth1_macvtap entered promiscuous mode [ 516.676472][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.697604][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.725073][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.751004][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.771108][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.791040][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.810685][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.831773][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.854416][T14208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.895716][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.914636][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.960585][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.989936][ T9105] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 517.012916][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.051695][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.116263][T14485] loop6: detected capacity change from 0 to 512 [ 517.123250][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.156818][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.177479][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.200204][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.214903][T14208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.236067][T14208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.258337][T14208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.276908][T14492] A link change request failed with some changes committed already. Interface gre4 may have been left with an inconsistent configuration, please check. [ 517.303595][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.317082][ T9111] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.342083][T14485] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 517.387446][T14208] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.409419][T14208] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.432639][T14485] EXT4-fs (loop6): 1 truncate cleaned up [ 517.437332][T14208] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.438441][T14485] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 517.457899][T14208] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.695074][ T9108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.712248][ T9108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.731129][ T5426] Bluetooth: hci1: command 0x0419 tx timeout [ 517.774950][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 517.865601][ T9108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.878061][ T9108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.906675][ T9108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 518.156857][T14515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2906'. [ 518.316420][T14521] netlink: 'syz.8.2981': attribute type 2 has an invalid length. [ 518.379571][T14521] netlink: 'syz.8.2981': attribute type 1 has an invalid length. [ 518.420075][T14521] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2981'. [ 518.709890][T14532] lo speed is unknown, defaulting to 1000 [ 518.742773][T14537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2988'. [ 518.821430][T14537] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2988'. [ 519.052113][T14554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2991'. [ 519.123995][T14554] unsupported nlmsg_type 40 [ 519.209234][T14561] TCP: tcp_parse_options: Illegal window scaling value 253 > 14 received [ 519.397458][ C1] vkms_vblank_simulate: vblank timer overrun [ 519.503114][T14571] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 519.539107][T14574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2997'. [ 519.569793][T14574] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.633593][T14574] device bridge_slave_1 left promiscuous mode [ 519.660761][T14574] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.312365][T14603] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3007'. [ 520.368521][T14605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3006'. [ 520.455574][T14611] netlink: 'syz.6.3008': attribute type 39 has an invalid length. [ 521.451851][T14649] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3018'. [ 521.894561][T14659] 9pnet: p9_errstr2errno: server reported unknown error 0x00 [ 522.538921][T14686] loop8: detected capacity change from 0 to 512 [ 522.657322][T14686] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 522.691073][ T5414] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 522.720885][T14686] EXT4-fs (loop8): 1 truncate cleaned up [ 522.726843][T14686] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 522.961033][ T5414] usb 7-1: Using ep0 maxpacket: 32 [ 523.016396][T14704] loop7: detected capacity change from 0 to 512 [ 523.039902][T14706] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3036'. [ 523.067153][T14706] (unnamed net_device) (uninitialized): peer notification delay (2365) is not a multiple of miimon (6), value rounded to 2364 ms [ 523.211188][T14709] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3036'. [ 523.220312][T14709] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 523.291226][ T5414] usb 7-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 523.308270][ T5414] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.351073][ T5414] usb 7-1: Product: syz [ 523.355404][ T5414] usb 7-1: Manufacturer: syz [ 523.390765][ T5414] usb 7-1: SerialNumber: syz [ 523.412454][ T5414] usb 7-1: config 0 descriptor?? [ 523.754013][T14725] sock: sock_set_timeout: `syz.0.3040' (pid 14725) tries to set negative timeout [ 523.921290][ T5414] airspy 7-1:0.0: Board ID: 00 [ 523.926535][ T5414] airspy 7-1:0.0: Firmware version: [ 524.911052][ T1108] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 524.960497][T14782] loop8: detected capacity change from 0 to 4096 [ 525.015043][ T5414] airspy 7-1:0.0: Registered as swradio24 [ 525.022488][T14782] EXT4-fs (loop8): Test dummy encryption mode enabled [ 525.029449][T14782] EXT4-fs (loop8): Ignoring removed orlov option [ 525.046502][ T5414] airspy 7-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 525.084056][T14782] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpid,debug_want_extra_isize=0x0000000000000010,nodioread_nolock,test_dummy_encryption,lazytime,stripe=0x0000000000000000,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 525.201037][ T1108] usb 2-1: Using ep0 maxpacket: 8 [ 525.209522][ T5414] usb 7-1: USB disconnect, device number 12 [ 525.318449][T14782] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 525.331720][ T1108] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 525.345828][T14800] loop7: detected capacity change from 0 to 512 [ 525.357819][ T1108] usb 2-1: config 0 has no interface number 0 [ 525.386374][ T1108] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 525.431518][ T1108] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 525.451203][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.521693][ T1108] usb 2-1: config 0 descriptor?? [ 525.568571][T14800] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,grpjquota=,,errors=continue. Quota mode: none. [ 525.649947][ T1108] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 525.732450][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3068'. [ 525.812573][ T1108] usb 2-1: USB disconnect, device number 21 [ 525.818794][T14816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.855855][T14816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.928815][T14819] netlink: 'syz.6.3069': attribute type 10 has an invalid length. [ 526.030261][T14819] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 526.059779][T14819] team0: Failed to send options change via netlink (err -105) [ 526.084042][T14819] team0: Port device netdevsim0 added [ 526.591683][T14843] bridge0: port 3(syz_tun) entered blocking state [ 526.598292][T14843] bridge0: port 3(syz_tun) entered disabled state [ 526.666995][T14843] device syz_tun entered promiscuous mode [ 526.692527][T14843] bridge0: port 3(syz_tun) entered blocking state [ 526.699130][T14843] bridge0: port 3(syz_tun) entered forwarding state [ 527.101001][T14873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3084'. [ 527.353641][T14884] netlink: 'syz.8.3088': attribute type 11 has an invalid length. [ 527.436528][T14892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3092'. [ 528.780642][T14935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3100'. [ 528.812340][T14935] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3100'. [ 529.158122][T14957] loop7: detected capacity change from 0 to 2048 [ 529.245751][ T1346] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 529.283761][T14957] Alternate GPT is invalid, using primary GPT. [ 529.308214][T14963] libceph: secret too big 32 [ 529.314470][T14957] loop7: p2 p3 p7 [ 529.501145][ T1346] usb 2-1: Using ep0 maxpacket: 16 [ 529.631191][ T1346] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 529.639345][ T1346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.662259][ T4292] udevd[4292]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 529.677241][ T4900] udevd[4900]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 529.712243][ T4275] udevd[4275]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 529.728898][ T1346] usb 2-1: config 0 has no interface number 0 [ 529.754479][ T1346] usb 2-1: New USB device found, idVendor=0bd3, idProduct=05f4, bcdDevice= 0.5b [ 529.797061][ T1346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.874828][ T1346] usb 2-1: config 0 descriptor?? [ 529.934106][ T1346] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 529.947540][ T1346] usb 2-1: Found UVC 0.00 device (0bd3:05f4) [ 529.974839][ T1346] usb 2-1: No valid video chain found. [ 530.011084][ T4237] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 530.131915][T14992] netlink: 16178 bytes leftover after parsing attributes in process `syz.7.3111'. [ 530.187748][ T5233] usb 2-1: USB disconnect, device number 22 [ 530.263891][T15000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3113'. [ 530.381217][ T4237] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.549034][T15012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3115'. [ 530.561253][ T4237] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 530.581952][ T4237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.605565][ T4237] usb 7-1: Product: syz [ 530.617825][ T4237] usb 7-1: Manufacturer: syz [ 530.629361][ T4237] usb 7-1: SerialNumber: syz [ 531.223987][T15031] loop7: detected capacity change from 0 to 64 [ 531.342471][T15033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3119'. [ 531.392589][T15031] [ 531.394979][T15031] ====================================================== [ 531.402018][T15031] WARNING: possible circular locking dependency detected [ 531.409099][T15031] syzkaller #0 Not tainted [ 531.413544][T15031] ------------------------------------------------------ [ 531.420590][T15031] syz.7.3118/15031 is trying to acquire lock: [ 531.426688][T15031] ffff88805a25d578 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 531.437634][T15031] [ 531.437634][T15031] but task is already holding lock: [ 531.445027][T15031] ffff8880587280b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 531.454497][T15031] [ 531.454497][T15031] which lock already depends on the new lock. [ 531.454497][T15031] [ 531.465014][T15031] [ 531.465014][T15031] the existing dependency chain (in reverse order) is: [ 531.474258][T15031] [ 531.474258][T15031] -> #1 (&tree->tree_lock/1){+.+.}-{3:3}: [ 531.482225][T15031] __mutex_lock_common+0x1e3/0x2400 [ 531.488113][T15031] mutex_lock_nested+0x17/0x20 [ 531.493438][T15031] hfs_find_init+0x15b/0x1d0 [ 531.498595][T15031] hfs_extend_file+0x35d/0x13f0 [ 531.503996][T15031] hfs_bmap_reserve+0x103/0x420 [ 531.509417][T15031] hfs_cat_create+0x204/0x8e0 [ 531.514648][T15031] hfs_mkdir+0x68/0xe0 [ 531.519269][T15031] vfs_mkdir+0x387/0x570 [ 531.524162][T15031] do_mkdirat+0x1df/0x5b0 [ 531.529228][T15031] __x64_sys_mkdirat+0x85/0x90 [ 531.534644][T15031] do_syscall_64+0x4c/0xa0 [ 531.539656][T15031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.546115][T15031] [ 531.546115][T15031] -> #0 (&HFS_I(tree->inode)->extents_lock){+.+.}-{3:3}: [ 531.555452][T15031] __lock_acquire+0x2c42/0x7d10 [ 531.560974][T15031] lock_acquire+0x19e/0x400 [ 531.566140][T15031] __mutex_lock_common+0x1e3/0x2400 [ 531.572086][T15031] mutex_lock_nested+0x17/0x20 [ 531.577493][T15031] hfs_extend_file+0xfb/0x13f0 [ 531.582915][T15031] hfs_bmap_reserve+0x103/0x420 [ 531.588322][T15031] __hfs_ext_write_extent+0x1fa/0x470 [ 531.594267][T15031] __hfs_ext_cache_extent+0x6b/0x9b0 [ 531.600110][T15031] hfs_extend_file+0x39c/0x13f0 [ 531.605600][T15031] hfs_get_block+0x40f/0xc50 [ 531.610743][T15031] __block_write_begin_int+0x565/0x15d0 [ 531.616914][T15031] cont_write_begin+0x598/0x7b0 [ 531.622415][T15031] hfs_write_begin+0x92/0xe0 [ 531.627659][T15031] cont_write_begin+0x263/0x7b0 [ 531.633087][T15031] hfs_write_begin+0x92/0xe0 [ 531.638232][T15031] hfs_file_truncate+0x1c2/0xa10 [ 531.644073][T15031] hfs_inode_setattr+0x4ab/0x6f0 [ 531.649566][T15031] notify_change+0xbcd/0xee0 [ 531.655399][T15031] do_truncate+0x1ac/0x240 [ 531.660429][T15031] do_sys_ftruncate+0x31b/0x3d0 [ 531.666033][T15031] do_syscall_64+0x4c/0xa0 [ 531.671020][T15031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 531.677481][T15031] [ 531.677481][T15031] other info that might help us debug this: [ 531.677481][T15031] [ 531.687751][T15031] Possible unsafe locking scenario: [ 531.687751][T15031] [ 531.695317][T15031] CPU0 CPU1 [ 531.700721][T15031] ---- ---- [ 531.706113][T15031] lock(&tree->tree_lock/1); [ 531.710928][T15031] lock(&HFS_I(tree->inode)->extents_lock); [ 531.719725][T15031] lock(&tree->tree_lock/1); [ 531.726970][T15031] lock(&HFS_I(tree->inode)->extents_lock); [ 531.733075][T15031] [ 531.733075][T15031] *** DEADLOCK *** [ 531.733075][T15031] [ 531.741341][T15031] 4 locks held by syz.7.3118/15031: [ 531.746657][T15031] #0: ffff88804f9be460 (sb_writers#14){.+.+}-{0:0}, at: do_sys_ftruncate+0x284/0x3d0 [ 531.756383][T15031] #1: ffff88807b7b82a8 (&sb->s_type->i_mutex_key#22){+.+.}-{3:3}, at: do_truncate+0x198/0x240 [ 531.766811][T15031] #2: ffff88807b7b80f8 (&HFS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfs_extend_file+0xfb/0x13f0 [ 531.777697][T15031] #3: ffff8880587280b0 (&tree->tree_lock/1){+.+.}-{3:3}, at: hfs_find_init+0x15b/0x1d0 [ 531.787524][T15031] [ 531.787524][T15031] stack backtrace: [ 531.793458][T15031] CPU: 1 PID: 15031 Comm: syz.7.3118 Not tainted syzkaller #0 [ 531.800964][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 531.811066][T15031] Call Trace: [ 531.814543][T15031] [ 531.817582][T15031] dump_stack_lvl+0x188/0x250 [ 531.822371][T15031] ? load_image+0x400/0x400 [ 531.826933][T15031] ? show_regs_print_info+0x20/0x20 [ 531.832435][T15031] ? print_circular_bug+0x12b/0x1a0 [ 531.837675][T15031] check_noncircular+0x296/0x330 [ 531.842662][T15031] ? look_up_lock_class+0x71/0x110 [ 531.847902][T15031] ? add_chain_block+0x940/0x940 [ 531.852873][T15031] ? lockdep_lock+0xf1/0x1f0 [ 531.857503][T15031] ? mark_lock+0x94/0x320 [ 531.861869][T15031] __lock_acquire+0x2c42/0x7d10 [ 531.866775][T15031] ? lockdep_lock+0xf1/0x1f0 [ 531.871586][T15031] ? verify_lock_unused+0x140/0x140 [ 531.876831][T15031] ? hlock_conflict+0x59/0x1f0 [ 531.881630][T15031] ? __bfs+0x2a3/0x5c0 [ 531.885736][T15031] ? check_path+0x40/0x40 [ 531.890095][T15031] ? check_path+0x21/0x40 [ 531.894563][T15031] lock_acquire+0x19e/0x400 [ 531.899212][T15031] ? hfs_extend_file+0xfb/0x13f0 [ 531.904189][T15031] ? __might_sleep+0xf0/0xf0 [ 531.908888][T15031] ? read_lock_is_recursive+0x10/0x10 [ 531.914295][T15031] ? __lock_acquire+0x28ac/0x7d10 [ 531.919405][T15031] ? hfs_extend_file+0xfb/0x13f0 [ 531.924384][T15031] __mutex_lock_common+0x1e3/0x2400 [ 531.929639][T15031] ? hfs_extend_file+0xfb/0x13f0 [ 531.934702][T15031] ? mark_lock+0x94/0x320 [ 531.939066][T15031] ? lock_chain_count+0x20/0x20 [ 531.943953][T15031] ? mutex_lock_io_nested+0x60/0x60 [ 531.949202][T15031] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 531.955571][T15031] ? lockdep_hardirqs_on+0x94/0x140 [ 531.960825][T15031] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 531.967023][T15031] mutex_lock_nested+0x17/0x20 [ 531.972265][T15031] hfs_extend_file+0xfb/0x13f0 [ 531.977072][T15031] ? lock_acquire+0x208/0x400 [ 531.981794][T15031] ? hfs_get_block+0xc50/0xc50 [ 531.986592][T15031] ? __mutex_trylock_common+0x155/0x260 [ 531.992269][T15031] ? rcu_lock_release+0x20/0x20 [ 531.997157][T15031] ? hfs_find_init+0x84/0x1d0 [ 532.001871][T15031] ? hfs_get_block+0x40f/0xc50 [ 532.006668][T15031] ? __block_write_begin_int+0x565/0x15d0 [ 532.012423][T15031] ? cont_write_begin+0x598/0x7b0 [ 532.017486][T15031] ? cont_write_begin+0x263/0x7b0 [ 532.022676][T15031] ? memset+0x1e/0x40 [ 532.026762][T15031] ? hfs_brec_find+0x197/0x500 [ 532.031745][T15031] hfs_bmap_reserve+0x103/0x420 [ 532.036726][T15031] __hfs_ext_write_extent+0x1fa/0x470 [ 532.042191][T15031] __hfs_ext_cache_extent+0x6b/0x9b0 [ 532.047506][T15031] ? mutex_lock_nested+0x17/0x20 [ 532.052479][T15031] ? hfs_find_init+0x15b/0x1d0 [ 532.057372][T15031] hfs_extend_file+0x39c/0x13f0 [ 532.062251][T15031] ? verify_lock_unused+0x140/0x140 [ 532.067591][T15031] ? hfs_get_block+0xc50/0xc50 [ 532.072392][T15031] ? memset+0x1e/0x40 [ 532.076418][T15031] ? lockdep_init_map_type+0x98/0x900 [ 532.081827][T15031] ? slab_post_alloc_hook+0x2aa/0x380 [ 532.087389][T15031] hfs_get_block+0x40f/0xc50 [ 532.092011][T15031] ? __lock_acquire+0x7d10/0x7d10 [ 532.097349][T15031] ? hfs_free_extents+0x430/0x430 [ 532.102412][T15031] ? do_raw_spin_unlock+0x11d/0x230 [ 532.107646][T15031] ? create_page_buffers+0x238/0x320 [ 532.113052][T15031] __block_write_begin_int+0x565/0x15d0 [ 532.118664][T15031] ? hfs_free_extents+0x430/0x430 [ 532.123732][T15031] ? page_zero_new_buffers+0x490/0x490 [ 532.129271][T15031] ? wait_for_stable_page+0xd9/0x110 [ 532.134829][T15031] cont_write_begin+0x598/0x7b0 [ 532.139719][T15031] ? __lock_acquire+0x7d10/0x7d10 [ 532.144782][T15031] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 532.150811][T15031] ? unlock_page+0x17c/0x1f0 [ 532.155527][T15031] hfs_write_begin+0x92/0xe0 [ 532.160175][T15031] ? hfs_free_extents+0x430/0x430 [ 532.165545][T15031] cont_write_begin+0x263/0x7b0 [ 532.170526][T15031] ? generic_cont_expand_simple+0x1a0/0x1a0 [ 532.176719][T15031] hfs_write_begin+0x92/0xe0 [ 532.181349][T15031] ? hfs_free_extents+0x430/0x430 [ 532.186418][T15031] hfs_file_truncate+0x1c2/0xa10 [ 532.191394][T15031] ? unmap_mapping_range+0xc8/0x100 [ 532.196795][T15031] ? __lock_acquire+0x7d10/0x7d10 [ 532.201859][T15031] ? hfs_extend_file+0x13f0/0x13f0 [ 532.207008][T15031] ? rwsem_write_trylock+0x135/0x1c0 [ 532.212439][T15031] ? up_write+0x1bb/0x420 [ 532.216807][T15031] ? unmap_mapping_range+0xc8/0x100 [ 532.222038][T15031] hfs_inode_setattr+0x4ab/0x6f0 [ 532.227011][T15031] ? bpf_lsm_inode_setattr+0x5/0x10 [ 532.232334][T15031] ? try_break_deleg+0x79/0x120 [ 532.237219][T15031] ? hfs_evict_inode+0x100/0x100 [ 532.242192][T15031] notify_change+0xbcd/0xee0 [ 532.246821][T15031] do_truncate+0x1ac/0x240 [ 532.251266][T15031] ? rcu_lock_release+0x20/0x20 [ 532.256146][T15031] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 532.261577][T15031] ? bpf_lsm_path_truncate+0x5/0x10 [ 532.266830][T15031] do_sys_ftruncate+0x31b/0x3d0 [ 532.272070][T15031] do_syscall_64+0x4c/0xa0 [ 532.276533][T15031] ? clear_bhb_loop+0x30/0x80 [ 532.281343][T15031] ? clear_bhb_loop+0x30/0x80 [ 532.286059][T15031] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 532.292087][T15031] RIP: 0033:0x7fac507fce59 [ 532.296727][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.316430][T15031] RSP: 002b:00007fac4ea56028 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 532.324966][T15031] RAX: ffffffffffffffda RBX: 00007fac50a75fa0 RCX: 00007fac507fce59 [ 532.333076][T15031] RDX: 0000000000000000 RSI: 0000000002000009 RDI: 0000000000000005 [ 532.341083][T15031] RBP: 00007fac50892d6f R08: 0000000000000000 R09: 0000000000000000 [ 532.349085][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 532.357089][T15031] R13: 00007fac50a76038 R14: 00007fac50a75fa0 R15: 00007ffd2698a598 [ 532.365245][T15031] [ 532.431202][ T4237] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 532.437685][ T4237] cdc_ncm 7-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048 [ 532.471521][ T4237] cdc_ncm 7-1:1.0: setting rx_max = 2048 [ 532.651155][ T4237] cdc_ncm 7-1:1.0: setting tx_max = 16384 [ 532.657186][ T4237] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 532.685772][ T4237] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 532.733770][ T4237] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM, 42:42:42:42:42:42 [ 532.779494][ T4237] usb 7-1: USB disconnect, device number 13 [ 532.801609][ T4237] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM [ 532.822401][ T4237] caif_usb:cfusbl_device_notify(): USB CDC NCM device VID:0x 525 PID:0xa4a1 [ 533.341860][T12520] hfs: node 4:3 still has 1 user(s)!