last executing test programs: 19.12514628s ago: executing program 3 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x1, 0x8, 0xb}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r3, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014010}, 0x2000084c) 19.033723545s ago: executing program 3 (id=686): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0200000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000050000006a0af2fe000000008500000009000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989425f5d0b79f6584d0416d7c4bb9f547b328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f01000000010000006e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7f9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b98d2de10c21d3ea02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d000000200008000000000000001abc11c800000000000000000000000928ee53595a779d243a48cea769470424d20a04c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2c4af38ffb7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec7ffff35e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749efd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0eb3280e09758bd445ab91d20baca005472b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92fe8bad99ca332af00f191b66b6a6f732a91f0e2e9190e4b448da7de018c58e950767f9b320be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c52573d9308a13d115b43f8b1894c8fa8a14dc4810f61ae96bf704526a8919bc700002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381ccc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f78fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb3c035fc6846abe389b25c988f0bbb889560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a9b7d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73cfd1e76982f3d899f71e495f0ba8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e4a48dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f00000021f8547d393dabe616fbbde21c90be00b5a22671395c7a69c6dd4d022ffc97ddb6aa025131652d409da1d8cfc3d219d4b1c1b7b8170d7c33d91db2b73f7ae02485a209a2474b5d0790d05c01bec623056e4d3f4d3149373a28b26a15a1fcce73d57e6eaf7e6f315fe275ebc9ef7aeca277dde01dde724f419803a2172a7833ceab38d21ca4f1dea5e1f4d8824167b21dd289dd4e6ecfba9e163bdbc48e1e758ecde05c10809c9edfa6d77c652fd742e6dad13d2a397bebe3ea8bc087d3720e2202f36c7719ae34f042e19dc08a3323a3d94098a7ec171469352bab1662c3e4d4803c565cfcce32dad628fade43a4844abb230ce608726fd87e93c405a96cf638c41510f26e9da5f316"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x38}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="0163013010ff"}) 18.855783656s ago: executing program 3 (id=689): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 18.294869969s ago: executing program 3 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d903000008000340000000011400000011000100"], 0x70}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015", 0x1f}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0xc040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 18.108202589s ago: executing program 3 (id=693): syz_usb_connect(0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sg(0x0, 0x6f5e, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x30, 0xffffffffffffffff, 0x0) 17.392765762s ago: executing program 3 (id=697): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xffffffc6) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, 0x0, 0xffffffc6) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 17.308763416s ago: executing program 32 (id=697): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xffffffc6) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, 0x0, 0xffffffc6) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) 6.145321789s ago: executing program 1 (id=757): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$evdev(0x0, 0xa, 0x81) ioctl$EVIOCGKEYCODE_V2(r2, 0x40086602, 0xffffffffffffffff) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) read$char_usb(r1, 0x0, 0x0) 4.419129891s ago: executing program 5 (id=769): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) recvmmsg$unix(r2, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) 4.282405269s ago: executing program 5 (id=770): r0 = inotify_init() r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x2}) r2 = userfaultfd(0x80801) ioctl$USBDEVFS_RESET(0xffffffffffffffff, 0x5514) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) 4.182170475s ago: executing program 5 (id=771): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x7, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x2, 0x7a}, 0x8) 4.10224915s ago: executing program 5 (id=772): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000014c0)='./file0/../file0\x00', &(0x7f0000000500)='./file0/file0\x00', 0x0, 0x199541b, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 4.005370075s ago: executing program 5 (id=774): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0xffe0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 3.846460674s ago: executing program 1 (id=777): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x7c8}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) r1 = syz_io_uring_setup(0x916, &(0x7f0000000340)={0x0, 0xea3f, 0x800, 0x0, 0x1d2}, &(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.605893569s ago: executing program 0 (id=780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x6, 0x2}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000010b00)=@newtfilter={0x34, 0x2c, 0xd23, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4004415) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd2d, 0x20000, {0x0, 0x0, 0x0, r2, {0x3, 0x9}, {}, {0x0, 0xfff2}}}, 0x24}}, 0x648c0) 3.558540781s ago: executing program 1 (id=781): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x0, 0x0, 0x0, 0x2000004, 0x0, 0x0, 0x1f00, 0x39, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0x10}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb01000a0000000700000000000009010000000100000003000093000000000d00000005000000020000000f000000000000808c22262823000001000f00000028850000010001000b0000000000000f020000005ef91000000000000009020000000400000000000012050000000600000004000013000000000b000000070000000700000009000000010000004e0a00000c000000010000800000000005000000050000000800000000000000000000014792c5914bbc478843d036000000000c008007100000000000000a0100000008000000000000110500000007000000100000000000000c04000000000000000000000030302e"], &(0x7f0000000040)=""/249, 0xfa, 0xf9, 0x6}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0) 2.602213717s ago: executing program 5 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 2.563695099s ago: executing program 33 (id=786): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) landlock_restrict_self(r0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f00000002c0)={0x20, r3}, 0x0) landlock_restrict_self(r2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) 2.55934379s ago: executing program 0 (id=788): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000840)}, 0x5}], 0x1, 0x40010000, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[@ANYBLOB="ac141411e0000001"], 0x48}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.55853665s ago: executing program 1 (id=789): unshare(0x22020400) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r3 = accept4$unix(r1, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x80) 2.55779751s ago: executing program 2 (id=790): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000300)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000640)="00214717a70700080000030600710a5e31163ceb9d0471200000000500000000000000ff7ac48cd5bb5b", 0x2a}], 0x1, 0x3, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x6, 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x7fff, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x10, 0x1, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 2.37846072s ago: executing program 2 (id=791): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x6, 0x1e, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000029c0)={0x6, 0x8000005, 0x9}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0xda2, 0x3, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x4, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0xffc, 0x2, 0x9}) close_range(r1, r2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x80, 0x3}) 2.372140561s ago: executing program 4 (id=792): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x80, 0x100089, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.22244801s ago: executing program 2 (id=793): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@delalloc}, {@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x3}}, {@inlinecrypt}, {@data_err_ignore}, {@nodiscard}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x48042, 0x8c) fallocate(r2, 0x10, 0x6, 0x10001) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) r4 = open(&(0x7f00000001c0)='./file1\x00', 0x16f07e, 0x88) fallocate(r4, 0x0, 0x8, 0x1101f0) fallocate(r3, 0x8, 0x4000, 0x4000) 2.221546099s ago: executing program 0 (id=794): setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000004c0)={'syzkaller0\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[], 0xc2) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) 2.082017347s ago: executing program 4 (id=795): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 1.991047763s ago: executing program 4 (id=796): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000100000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 1.231864667s ago: executing program 0 (id=797): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x4000000, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) close(r1) 1.154142242s ago: executing program 1 (id=798): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2010088, &(0x7f0000000040), 0xfc, 0x553, &(0x7f0000000100)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x1, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400, 0x6e6bc0}}, 0xb8}}, 0x4c050) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0xffffffffffffff99, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) r1 = openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) 1.030393769s ago: executing program 4 (id=799): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001080), 0xa000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x70000, 0x1f, 0x7, 0x8, 0x0, 0xf1, 0x3, 0x0, 0x8, 0x6}, {0xffff1000, 0x10000, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xc, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x80a0000, 0xeeee8000, 0xe, 0xff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0xff, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x0, 0xa2, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xe, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xfdf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 872.643968ms ago: executing program 0 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000000580), &(0x7f0000000040)='./file0\x00', 0x30160f8, &(0x7f0000000700)=ANY=[], 0x81, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x234a047, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) write$P9_RREAD(r0, &(0x7f0000000280)=ANY=[], 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0x18802) 782.126814ms ago: executing program 2 (id=801): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000c00040004c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x40c, 0x2, [@TCA_FLOW_POLICE={0x408, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x81, 0xffffffff, 0xda, 0x3, 0x0, 0x2a, 0x100, 0x73d, 0x3509, 0x3, 0x10000, 0x7, 0x1000, 0x9, 0x3, 0x3, 0x882e, 0x8, 0x8, 0x2, 0x9, 0xfffffffb, 0x2, 0x6, 0x80000000, 0x400, 0x9, 0xffff, 0x7a, 0x5, 0x7, 0x7fff, 0xffffff40, 0x9, 0x6, 0x8, 0x2, 0x57, 0x0, 0x4, 0x7fff, 0x9, 0xfffffffb, 0x2, 0xcf9f, 0x0, 0x1, 0x8, 0x1, 0x5, 0xfffffff9, 0xd5, 0x80000001, 0x6, 0x4, 0x9, 0x8, 0xfffffffd, 0x15, 0x7, 0xc, 0x8, 0x4, 0x3, 0xfffffe00, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x1, 0x1, 0x801e, 0x7, 0x4, 0x0, 0x8, 0x5, 0x8001, 0x5, 0x1, 0x1000, 0x9, 0x3, 0x7ff, 0xd0, 0x8, 0x0, 0x4, 0x1, 0x9, 0xe, 0x800, 0xfffffff8, 0x7, 0x0, 0xb1, 0x3, 0xffffff44, 0x1, 0x8, 0xf, 0x6, 0x556, 0x1, 0x2c, 0x5, 0x80000001, 0x1, 0x0, 0xffffff00, 0x3, 0x2, 0x7, 0x9, 0x1c00, 0x5, 0xa2, 0x3, 0x8, 0x0, 0x5, 0x8001, 0xbfffffff, 0x7, 0x80, 0x7, 0x0, 0x743, 0x5, 0x3, 0x7, 0x200, 0x5, 0x0, 0x8, 0x3, 0x100, 0x2, 0x8, 0x1, 0x1, 0x8, 0xe, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0xfffffffe, 0x7, 0xf80, 0x7, 0x57, 0x2302, 0xffff, 0x3ff, 0x2, 0x5, 0x1, 0x6, 0x3, 0x401, 0x10001, 0x512d, 0x1, 0xe, 0x2, 0xa3c0, 0x4, 0x8000, 0x10001, 0x15a, 0x6, 0x120000, 0x9, 0x7fffffff, 0x7, 0x9, 0x80000004, 0x5, 0x7e9, 0x48, 0x9, 0x3, 0x0, 0x5, 0x6, 0xf, 0xff, 0xd, 0x6, 0x9, 0x0, 0x200, 0x9, 0xff, 0x4, 0x7, 0x7, 0x8, 0x4, 0x56, 0x4a82, 0xffff0000, 0x7ff, 0x3e1, 0x6, 0x80000000, 0x4c0, 0x5, 0xa, 0x6, 0x2, 0x6, 0x8, 0x48, 0x1a, 0x2000000, 0x1ff, 0x844, 0x6, 0x3ff, 0x2, 0x100, 0x6, 0xffffffff, 0x200, 0xc26, 0x4, 0x5, 0x1, 0x7fff, 0xf, 0x401, 0x401, 0x4, 0x7, 0x3565, 0x2, 0x4, 0xebf, 0x9, 0x1000, 0x1, 0x71f, 0x2, 0x7, 0x6e8, 0x8, 0x0, 0x80000000, 0x6, 0x9, 0x2]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r2, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c002e"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x40004) 753.382435ms ago: executing program 4 (id=802): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000380)="ae8b7016621ea3de77485f2ce4b7298dbc1789fea6412fd5f428bb3735807bcad893116f61fb64ae17fd24751f64fd3a116af9ee3e84985a771670f6f56a26f9d03277bb0e8b84db35", 0xffde}, {&(0x7f0000001540)="02cb54", 0x3}], 0x2, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, 0x0, 0x0, 0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 553.331547ms ago: executing program 4 (id=803): syz_usb_connect(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) 523.488999ms ago: executing program 0 (id=804): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x3d, 0x0, @thr={0x0, 0x0}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ptrace$peeksig(0x4209, r0, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000001500)=[{}]) 426.342794ms ago: executing program 2 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) 48.221376ms ago: executing program 1 (id=806): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) 0s ago: executing program 2 (id=807): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xc83417c22f980b3c}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x80, '\x00', 0x8, 0x461b, 0xa, 0xfffffff9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) kernel console output (not intermixed with test programs): Pv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.718347][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.725470][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.733840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.742361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.750898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.758026][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.780725][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.794485][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 52.802364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.812125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.825455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.835528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.843933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.852796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.861347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 52.870323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 52.879790][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 52.892340][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.901546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.921410][ T4189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.935462][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 52.943119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 52.952318][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 52.964952][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 52.973608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 52.982567][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.992220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.000738][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.022931][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.032445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.053387][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.065684][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.086352][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.093233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.114291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.123254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.140175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.156212][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.173687][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.195663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.205371][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.228333][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.238010][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.263558][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.270689][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.280491][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.289238][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.298464][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.305568][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.313748][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.325442][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 53.356350][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.364480][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.372920][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.381986][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.393674][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.400877][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.408824][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.417431][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.426310][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.435417][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.444018][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.452345][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.460904][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.468662][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.477366][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.486118][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 53.493542][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 53.501467][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.509770][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.525284][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 53.537461][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 53.549466][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 53.565924][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.576526][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.587656][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.594761][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.602315][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.610523][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.619108][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.627558][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.636352][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.647181][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.677332][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.686883][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.698374][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.707076][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.714184][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.722359][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.731805][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.740229][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.747569][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.755566][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 53.764181][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 53.772720][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.786817][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.796795][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.835970][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.849667][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.862355][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.874654][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.883202][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.893427][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.902288][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.911652][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.920324][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 53.929362][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 53.938216][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 53.947465][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 53.956115][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.965872][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 53.979157][ T4186] device veth0_vlan entered promiscuous mode [ 53.999243][ T4185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 54.010081][ T4241] Bluetooth: hci3: command 0x041b tx timeout [ 54.010187][ T4262] Bluetooth: hci1: command 0x041b tx timeout [ 54.016350][ T4241] Bluetooth: hci0: command 0x041b tx timeout [ 54.029585][ T4185] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.030040][ T4241] Bluetooth: hci4: command 0x041b tx timeout [ 54.049303][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.059308][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.075753][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 54.084481][ T4241] Bluetooth: hci2: command 0x041b tx timeout [ 54.090641][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.099371][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.108739][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.117644][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.126653][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.139488][ T4186] device veth1_vlan entered promiscuous mode [ 54.157679][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.167821][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 54.181878][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.193419][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.207441][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.216278][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.224208][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.232744][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 54.242747][ T4189] device veth0_vlan entered promiscuous mode [ 54.273021][ T4189] device veth1_vlan entered promiscuous mode [ 54.291818][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.312845][ T4186] device veth0_macvtap entered promiscuous mode [ 54.327759][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 54.340453][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.351194][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.362128][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.369938][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.378844][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.388023][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.416313][ T4186] device veth1_macvtap entered promiscuous mode [ 54.448660][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.456932][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.467208][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.476362][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.484898][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.494599][ T4189] device veth0_macvtap entered promiscuous mode [ 54.514114][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.537486][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.547806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.556717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.566664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.575572][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.591668][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 54.609458][ T4188] device veth0_vlan entered promiscuous mode [ 54.623172][ T4189] device veth1_macvtap entered promiscuous mode [ 54.630941][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.640159][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 54.649116][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 54.657045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.665832][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.674978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 54.683724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.693474][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.701751][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.722393][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.751146][ T4188] device veth1_vlan entered promiscuous mode [ 54.768274][ T4185] device veth0_vlan entered promiscuous mode [ 54.784247][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 54.792275][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.801224][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.810384][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 54.819653][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.839004][ T4186] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.848050][ T4186] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.860569][ T4186] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.869906][ T4186] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.882013][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.893055][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.905034][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.915700][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.923538][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.932837][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.942568][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.967529][ T4185] device veth1_vlan entered promiscuous mode [ 54.980616][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.996662][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.008484][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.045706][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.054365][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.062359][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.071255][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.079879][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.088866][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.098172][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.106991][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 55.116042][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 55.131173][ T4188] device veth0_macvtap entered promiscuous mode [ 55.147840][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.156771][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.168656][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.177754][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.194166][ T4188] device veth1_macvtap entered promiscuous mode [ 55.211052][ T4187] device veth0_vlan entered promiscuous mode [ 55.239905][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.249195][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.257510][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 55.266911][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 55.275740][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 55.283420][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 55.298878][ T4187] device veth1_vlan entered promiscuous mode [ 55.325390][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 55.333573][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.342868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.354743][ T4185] device veth0_macvtap entered promiscuous mode [ 55.370640][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.381718][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.391637][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.402183][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.413412][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.441026][ T4185] device veth1_macvtap entered promiscuous mode [ 55.450605][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 55.460341][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.468769][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.477358][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.486218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.501791][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.513218][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.523684][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.540264][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.551639][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.572414][ T4187] device veth0_macvtap entered promiscuous mode [ 55.586099][ T4187] device veth1_macvtap entered promiscuous mode [ 55.594762][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.603397][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.604609][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.614937][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 55.629204][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 55.631108][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.638249][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 55.654179][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.662296][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 55.680119][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.692675][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.702609][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.713154][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.725702][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.736220][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.747520][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.770619][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.781805][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.792007][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.802781][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.812869][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.823610][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.833694][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.844888][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.855938][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.865831][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.874862][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.883548][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.892632][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.903024][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.912018][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.921798][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 55.931451][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 55.945200][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.955109][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.960131][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.963654][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.973967][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.992417][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.002272][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.013041][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.028372][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.048989][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.060542][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.070851][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.081609][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.091847][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.102794][ T4249] Bluetooth: hci4: command 0x040f tx timeout [ 56.107402][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.109178][ T4249] Bluetooth: hci0: command 0x040f tx timeout [ 56.118675][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.125040][ T4249] Bluetooth: hci1: command 0x040f tx timeout [ 56.140438][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.142028][ T4249] Bluetooth: hci3: command 0x040f tx timeout [ 56.152959][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.167151][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.175453][ T4249] Bluetooth: hci2: command 0x040f tx timeout [ 56.175939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.190233][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.199234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 56.208423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 56.220024][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.229596][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.238934][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.249561][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.273560][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.282779][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.291683][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.300527][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.325173][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.333455][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.346500][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.356441][ T1483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.365471][ T1483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.398696][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.520990][ T1483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.533586][ T1483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.543203][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.593746][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.629798][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.663570][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.664533][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.687965][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.705059][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.716292][ T1483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 56.718414][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.762406][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.764137][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.796445][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.805947][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.824221][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.838275][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.854055][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.979335][ T4306] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 57.122185][ T4313] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 57.180720][ T4313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 57.383234][ T4296] loop0: detected capacity change from 0 to 32768 [ 57.420390][ T4296] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4296) [ 57.437394][ T4325] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9'. [ 57.493227][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.502454][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.528673][ T4296] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 57.544272][ T4296] BTRFS info (device loop0): using free space tree [ 57.557255][ T4296] BTRFS info (device loop0): has skinny extents [ 57.797328][ T4328] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9'. [ 57.837060][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.844381][ T4328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.852787][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.859940][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.492012][ T4249] Bluetooth: hci3: command 0x0419 tx timeout [ 58.498671][ T4249] Bluetooth: hci1: command 0x0419 tx timeout [ 58.504810][ T4249] Bluetooth: hci0: command 0x0419 tx timeout [ 58.511000][ T4249] Bluetooth: hci4: command 0x0419 tx timeout [ 58.517330][ T4249] Bluetooth: hci2: command 0x0419 tx timeout [ 58.524345][ T4328] device bridge0 entered promiscuous mode [ 58.636033][ T4328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9'. [ 58.647637][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.654878][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.662833][ T4296] BTRFS info (device loop0): enabling ssd optimizations [ 58.736315][ T4363] Zero length message leads to an empty skb [ 58.753063][ T4328] syz.3.9 (4328) used greatest stack depth: 20368 bytes left [ 58.787526][ T4366] netlink: 'syz.3.14': attribute type 1 has an invalid length. [ 58.810485][ T4366] device geneve2 entered promiscuous mode [ 59.371730][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22'. [ 59.509917][ T4390] netlink: 8 bytes leftover after parsing attributes in process `syz.4.23'. [ 59.583762][ T4392] VFS: Mount too revealing [ 60.534758][ T4437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 60.599054][ T4437] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 62.352705][ T4484] tipc: Failed to remove unknown binding: 66,1,1/0:2171291871/2171291873 [ 62.391000][ T4484] tipc: Failed to remove unknown binding: 66,1,1/0:2171291871/2171291873 [ 62.427283][ T4484] tipc: Failed to remove unknown binding: 66,1,1/0:2171291871/2171291873 [ 62.846649][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.56'. [ 63.057001][ T4493] bond0: (slave bond_slave_1): Releasing backup interface [ 63.341389][ T4510] loop3: detected capacity change from 0 to 256 [ 63.404302][ T4510] exFAT-fs (loop3): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 63.426288][ T4510] exFAT-fs (loop3): Filesystem has been set read-only [ 63.433162][ T4510] exFAT-fs (loop3): failed to load upcase table [ 63.465157][ T4510] exFAT-fs (loop3): failed to recognize exfat type [ 63.539894][ T4518] loop0: detected capacity change from 0 to 256 [ 63.600048][ T4518] exfat: Deprecated parameter 'utf8' [ 63.605995][ T4518] exfat: Deprecated parameter 'utf8' [ 63.612009][ T4518] exfat: Deprecated parameter 'utf8' [ 63.652091][ T4518] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 64.775665][ T4545] syz.4.70: vmalloc error: size 12884901888, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 64.812136][ T4545] CPU: 0 PID: 4545 Comm: syz.4.70 Not tainted syzkaller #0 [ 64.819376][ T4545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.829442][ T4545] Call Trace: [ 64.832713][ T4545] [ 64.835631][ T4545] dump_stack_lvl+0x188/0x250 [ 64.840314][ T4545] ? rcu_lock_release+0x5/0x20 [ 64.845068][ T4545] ? show_regs_print_info+0x20/0x20 [ 64.850267][ T4545] ? load_image+0x400/0x400 [ 64.854772][ T4545] warn_alloc+0x243/0x320 [ 64.859091][ T4545] ? __lock_acquire+0x7d10/0x7d10 [ 64.864103][ T4545] ? zone_watermark_ok_safe+0x240/0x240 [ 64.869644][ T4545] ? mark_lock+0x94/0x320 [ 64.873963][ T4545] __vmalloc_node_range+0x2b1/0x8b0 [ 64.879156][ T4545] ? memslot_rmap_alloc+0x65/0x2c0 [ 64.884258][ T4545] __vmalloc+0x76/0x80 [ 64.888316][ T4545] ? memslot_rmap_alloc+0x65/0x2c0 [ 64.893415][ T4545] memslot_rmap_alloc+0x65/0x2c0 [ 64.898340][ T4545] kvm_arch_prepare_memory_region+0xb0/0xb60 [ 64.904306][ T4545] ? kvm_set_memslot+0x65e/0x1a10 [ 64.909323][ T4545] kvm_set_memslot+0x671/0x1a10 [ 64.914173][ T4545] ? __kvm_memslots+0x1a0/0x1a0 [ 64.919023][ T4545] __kvm_set_memory_region+0xb3d/0xdd0 [ 64.924476][ T4545] ? kvm_put_kvm_no_destroy+0x80/0x80 [ 64.929836][ T4545] ? lockdep_hardirqs_on+0x94/0x140 [ 64.935032][ T4545] ? exc_page_fault+0x88/0x100 [ 64.939810][ T4545] ? mutex_lock_io_nested+0x60/0x60 [ 64.945013][ T4545] ? _copy_from_user+0x11/0x170 [ 64.949866][ T4545] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 64.955758][ T4545] kvm_vm_ioctl+0x8fe/0xb30 [ 64.960255][ T4545] ? kvm_device_release+0x1f0/0x1f0 [ 64.965447][ T4545] ? tomoyo_path_number_perm+0x5b4/0x660 [ 64.971072][ T4545] ? verify_lock_unused+0x140/0x140 [ 64.976296][ T4545] ? bpf_lsm_file_ioctl+0x5/0x10 [ 64.981232][ T4545] ? security_file_ioctl+0x7c/0xa0 [ 64.986333][ T4545] ? kvm_device_release+0x1f0/0x1f0 [ 64.991543][ T4545] __se_sys_ioctl+0xfa/0x170 [ 64.996126][ T4545] do_syscall_64+0x4c/0xa0 [ 65.000532][ T4545] ? clear_bhb_loop+0x30/0x80 [ 65.005199][ T4545] ? clear_bhb_loop+0x30/0x80 [ 65.009873][ T4545] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 65.015772][ T4545] RIP: 0033:0x7f3648fe5eb9 [ 65.020180][ T4545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.039779][ T4545] RSP: 002b:00007f3647241028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.048187][ T4545] RAX: ffffffffffffffda RBX: 00007f3649260fa0 RCX: 00007f3648fe5eb9 [ 65.056153][ T4545] RDX: 0000200000000180 RSI: 000000004020ae46 RDI: 0000000000000006 [ 65.064118][ T4545] RBP: 00007f3649053c1f R08: 0000000000000000 R09: 0000000000000000 [ 65.072079][ T4545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.080041][ T4545] R13: 00007f3649261038 R14: 00007f3649260fa0 R15: 00007ffead8e18a8 [ 65.088026][ T4545] [ 65.221861][ T4545] Mem-Info: [ 65.226868][ T4545] active_anon:331 inactive_anon:5496 isolated_anon:0 [ 65.226868][ T4545] active_file:4578 inactive_file:36633 isolated_file:0 [ 65.226868][ T4545] unevictable:769 dirty:1759 writeback:0 [ 65.226868][ T4545] slab_reclaimable:20227 slab_unreclaimable:95018 [ 65.226868][ T4545] mapped:29408 shmem:1643 pagetables:614 bounce:0 [ 65.226868][ T4545] kernel_misc_reclaimable:0 [ 65.226868][ T4545] free:1391858 free_pcp:12591 free_cma:0 [ 65.293512][ T4545] Node 0 active_anon:1392kB inactive_anon:21376kB active_file:18108kB inactive_file:146532kB unevictable:1540kB isolated(anon):0kB isolated(file):0kB mapped:117632kB dirty:7036kB writeback:0kB shmem:4596kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11904kB pagetables:2456kB all_unreclaimable? no [ 65.339022][ T4545] Node 1 active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:2076kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB all_unreclaimable? no [ 65.468523][ T4545] Node 0 DMA free:15360kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.666753][ T4545] lowmem_reserve[]: 0 2539 2540 2540 2540 [ 65.672566][ T4545] Node 0 DMA32 free:1639804kB min:34784kB low:43480kB high:52176kB reserved_highatomic:0KB active_anon:1492kB inactive_anon:23576kB active_file:18108kB inactive_file:146532kB unevictable:1540kB writepending:7036kB present:3129332kB managed:2606560kB mlocked:0kB bounce:0kB free_pcp:38216kB local_pcp:18832kB free_cma:0kB [ 65.716254][ T4567] netlink: 'syz.2.77': attribute type 1 has an invalid length. [ 65.888509][ T4567] bond1 (unregistering): Released all slaves [ 65.889768][ T4545] lowmem_reserve[]: 0 0 0 0 0 [ 65.910568][ T4545] Node 0 Normal free:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:660kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 66.004786][ T4545] lowmem_reserve[]: 0 0 0 0 0 [ 66.009982][ T4545] Node 1 Normal free:3910212kB min:55108kB low:68884kB high:82660kB reserved_highatomic:0KB active_anon:32kB inactive_anon:508kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4119672kB mlocked:0kB bounce:0kB free_pcp:12728kB local_pcp:5404kB free_cma:0kB [ 66.051140][ T4545] lowmem_reserve[]: 0 0 0 0 0 [ 66.059477][ T4545] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 66.074716][ T4545] Node 0 DMA32: 20*4kB (ME) 1*8kB (M) 3*16kB (UME) 25*32kB (UM) 28*64kB (ME) 20*128kB (ME) 17*256kB (M) 10*512kB (ME) 5*1024kB (ME) 2*2048kB (ME) 394*4096kB (M) = 1637800kB [ 66.093745][ T4545] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 66.106606][ T4545] Node 1 Normal: 65*4kB (UME) 22*8kB (UME) 19*16kB (UME) 43*32kB (UME) 28*64kB (UME) 20*128kB (UME) 5*256kB (U) 4*512kB (UE) 1*1024kB (U) 2*2048kB (ME) 951*4096kB (M) = 3910212kB [ 66.126229][ T4545] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.136401][ T4545] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.146084][ T4545] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 66.191343][ T4545] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 66.227011][ T4545] 46918 total pagecache pages [ 66.253042][ T4545] 0 pages in swap cache [ 66.270350][ T4545] Swap cache stats: add 0, delete 0, find 0/0 [ 66.277026][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 66.299548][ T4545] Free swap = 124996kB [ 66.303983][ T4545] Total swap = 124996kB [ 66.318495][ T4545] 2097051 pages RAM [ 66.337173][ T4545] 0 pages HighMem/MovableOnly [ 66.366095][ T4545] 411488 pages reserved [ 66.398516][ T4545] 0 pages cma reserved [ 66.934067][ T4405] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 67.304105][ T4405] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 67.324917][ T4405] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 67.435138][ T4405] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 67.476921][ T4405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 67.509432][ T4405] usb 5-1: SerialNumber: syz [ 67.925286][ T4612] loop0: detected capacity change from 0 to 32768 [ 67.935702][ T4405] usb 5-1: 0:2 : does not exist [ 67.976967][ T4405] usb 5-1: USB disconnect, device number 2 [ 67.994947][ T4612] ======================================================= [ 67.994947][ T4612] WARNING: The mand mount option has been deprecated and [ 67.994947][ T4612] and is ignored by this kernel. Remove the mand [ 67.994947][ T4612] option from the mount to silence this warning. [ 67.994947][ T4612] ======================================================= [ 68.122102][ T4612] JBD2: Ignoring recovery information on journal [ 68.126288][ T4614] overlayfs: failed to set xattr on upper [ 68.134935][ T4614] overlayfs: ...falling back to index=off,metacopy=off. [ 68.190764][ T4612] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 68.307484][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 68.357784][ T26] audit: type=1800 audit(1770299988.093:2): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.91" name="file1" dev="loop0" ino=19106 res=0 errno=0 [ 68.752750][ T4189] ocfs2: Unmounting device (7,0) on (node local) [ 68.957861][ T4634] syz.0.95 sent an empty control message without MSG_MORE. [ 70.773823][ C1] sched: RT throttling activated [ 71.368204][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.375034][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.461447][ T4649] loop2: detected capacity change from 0 to 1764 [ 71.469506][ T4646] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 72.016559][ T4671] loop3: detected capacity change from 0 to 512 [ 72.079833][ T4671] EXT4-fs (loop3): Ignoring removed oldalloc option [ 72.231933][ T4671] EXT4-fs (loop3): 1 truncate cleaned up [ 72.281514][ T4671] EXT4-fs (loop3): mounted filesystem without journal. Opts: noinit_itable,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,usrquota,. Quota mode: writeback. [ 72.339955][ T4679] capability: warning: `syz.0.112' uses deprecated v2 capabilities in a way that may be insecure [ 72.590012][ T4665] loop4: detected capacity change from 0 to 32768 [ 72.599931][ T4688] loop0: detected capacity change from 0 to 1024 [ 72.640798][ T4665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.109 (4665) [ 72.690761][ T4688] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 72.713142][ T4688] EXT4-fs (loop0): Unrecognized mount option "audit" or missing value [ 72.719972][ T4665] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 72.772142][ T4665] BTRFS info (device loop4): force clearing of disk cache [ 72.819243][ T4665] BTRFS info (device loop4): enabling auto defrag [ 72.838826][ T4665] BTRFS info (device loop4): enabling ssd optimizations [ 72.856455][ T4665] BTRFS info (device loop4): max_inline at 0 [ 72.893856][ T4665] BTRFS info (device loop4): enabling disk space caching [ 72.955837][ T4665] BTRFS info (device loop4): disk space caching is enabled [ 72.963083][ T4665] BTRFS info (device loop4): has skinny extents [ 73.404388][ T4746] process 'syz.0.119' launched './file0' with NULL argv: empty string added [ 73.444405][ T4731] loop1: detected capacity change from 0 to 4096 [ 73.448403][ T4745] loop3: detected capacity change from 0 to 256 [ 73.466345][ T4731] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 73.655771][ T4665] BTRFS info (device loop4): clearing free space tree [ 73.695015][ T4665] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.718078][ T4731] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 73.767457][ T4665] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.805768][ T4731] ntfs3: loop1: Failed to load $Extend. [ 74.032134][ T4768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.124'. [ 74.221189][ T4716] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 74.346028][ T4778] loop3: detected capacity change from 0 to 256 [ 74.347415][ T4775] Illegal XDP return value 2007330857, expect packet loss! [ 74.514505][ T4781] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 74.532301][ T26] audit: type=1800 audit(1770299994.263:3): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.127" name="file1" dev="loop3" ino=1048593 res=0 errno=0 [ 74.588513][ T4781] netlink: 17 bytes leftover after parsing attributes in process `syz.1.130'. [ 74.738306][ T4784] loop0: detected capacity change from 0 to 4096 [ 74.766017][ T4788] Process accounting resumed [ 74.859392][ T4784] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 75.005410][ T4798] PKCS8: Unsupported PKCS#8 version [ 75.028102][ T4800] loop2: detected capacity change from 0 to 1024 [ 75.142259][ T4800] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,journal_dev=0x0000000000000080,nombcache,nobarrier,init_itable,errors=remount-ro,. Quota mode: none. [ 75.179749][ T4805] loop1: detected capacity change from 0 to 128 [ 75.262547][ T4805] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.294133][ T4805] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.387195][ T4800] EXT4-fs error (device loop2): __ext4_get_inode_loc:4327: comm syz.2.134: Invalid inode table block 17587891077129 in block_group 0 [ 75.405298][ T4800] EXT4-fs (loop2): Remounting filesystem read-only [ 75.422945][ T4814] netlink: 'syz.4.129': attribute type 2 has an invalid length. [ 75.723638][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 75.793273][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 75.825264][ T4820] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 75.861378][ T4820] device bridge_slave_0 left promiscuous mode [ 75.876615][ T4820] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.929690][ T4820] device bridge_slave_1 left promiscuous mode [ 75.952883][ T4820] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.985751][ T4820] bond0: (slave bond_slave_0): Releasing backup interface [ 76.023327][ T4820] bond0: (slave bond_slave_1): Releasing backup interface [ 76.115098][ T4820] team0: Port device team_slave_0 removed [ 76.152713][ T4820] team0: Port device team_slave_1 removed [ 76.169455][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.188101][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.211192][ T4820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.234560][ T4820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.489534][ T1107] cfg80211: failed to load regulatory.db [ 76.730919][ T4851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.151'. [ 76.768241][ T4852] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 76.869167][ T4857] loop2: detected capacity change from 0 to 128 [ 76.909135][ T4857] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.546571][ T4882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.164'. [ 77.570421][ T4878] kvm: pic: level sensitive irq not supported [ 77.570654][ T4878] kvm: pic: non byte read [ 77.594509][ T4878] kvm: pic: non byte read [ 77.597615][ T4882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.164'. [ 77.598960][ T4878] kvm: pic: non byte read [ 77.628466][ T4878] kvm: pic: non byte read [ 77.633363][ T4878] kvm: pic: non byte read [ 77.645841][ T4878] kvm: pic: non byte read [ 77.650370][ T4878] kvm: pic: non byte read [ 77.659271][ T4878] kvm: pic: non byte read [ 77.667536][ T4878] kvm: pic: non byte read [ 77.682819][ T4878] kvm: pic: non byte read [ 78.063840][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.073855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.083760][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!! [ 78.198813][ T4909] device bond1 entered promiscuous mode [ 78.217351][ T4914] netlink: 'syz.4.177': attribute type 3 has an invalid length. [ 78.226792][ T4914] netlink: 'syz.4.177': attribute type 3 has an invalid length. [ 78.240204][ T4909] device bridge2 entered promiscuous mode [ 78.248866][ T4909] bond1: (slave bridge2): making interface the new active one [ 78.261177][ T4909] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 78.974211][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 78.983375][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 78.992386][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #308!!! [ 79.741333][ T4962] loop1: detected capacity change from 0 to 32768 [ 79.773181][ T4979] loop4: detected capacity change from 0 to 64 [ 79.801320][ T4962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.191 (4962) [ 79.884781][ T4962] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 79.911739][ T4962] BTRFS info (device loop1): turning on async discard [ 79.921358][ T4979] netlink: 24 bytes leftover after parsing attributes in process `syz.4.199'. [ 79.930785][ T4962] BTRFS info (device loop1): setting nodatacow, compression disabled [ 79.960899][ T4962] BTRFS info (device loop1): enabling ssd optimizations [ 80.009988][ T4962] BTRFS info (device loop1): using spread ssd allocation scheme [ 80.052114][ T4962] BTRFS info (device loop1): max_inline at 23 [ 80.080745][ T4983] tipc: Started in network mode [ 80.086132][ T4962] BTRFS info (device loop1): using free space tree [ 80.101509][ T4962] BTRFS info (device loop1): has skinny extents [ 80.102538][ T4983] tipc: Node identity 4246, cluster identity 4711 [ 80.173416][ T4983] tipc: Node number set to 16966 [ 80.715481][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #100!!! [ 80.743847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 80.754168][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 81.058304][ T4997] 9pnet: p9_errstr2errno: server reported unknown error di3 [ 81.133648][ T5005] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.341535][ T5020] device bridge0 entered promiscuous mode [ 81.467368][ T26] audit: type=1326 audit(1770300001.203:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 81.521155][ T5033] netlink: 'syz.4.210': attribute type 1 has an invalid length. [ 81.543092][ T26] audit: type=1326 audit(1770300001.233:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 81.640052][ T26] audit: type=1326 audit(1770300001.233:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 81.918597][ T5035] device geneve0 entered promiscuous mode [ 81.932718][ T26] audit: type=1326 audit(1770300001.233:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.025121][ T26] audit: type=1326 audit(1770300001.233:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.058949][ T5035] bond1: (slave geneve0): making interface the new active one [ 82.126977][ T5035] bond1: (slave geneve0): Enslaving as an active interface with an up link [ 82.253912][ T26] audit: type=1326 audit(1770300001.233:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.284232][ T5035] syz.4.210 (5035) used greatest stack depth: 20112 bytes left [ 82.399330][ T26] audit: type=1326 audit(1770300001.233:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.448736][ T26] audit: type=1326 audit(1770300001.233:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.474220][ T26] audit: type=1326 audit(1770300001.253:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.499124][ T26] audit: type=1326 audit(1770300001.253:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5022 comm="syz.2.208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 82.530179][ T5049] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.537867][ T5049] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.568475][ T5049] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.591851][ T5049] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.671547][ T5056] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 82.727067][ T5056] bond1: (slave lo): Enslaving as a backup interface with an up link [ 82.776367][ T5056] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 82.813447][ T5061] netlink: 28 bytes leftover after parsing attributes in process `syz.0.218'. [ 82.835435][ T5061] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 82.853993][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.861923][ T5062] netlink: 'syz.0.218': attribute type 10 has an invalid length. [ 82.877675][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.885055][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.002121][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.009289][ T5062] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.017890][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.025038][ T5062] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.042062][ T5062] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.094021][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 83.214092][ T7] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 83.223118][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.255809][ T7] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 83.302376][ T5069] loop1: detected capacity change from 0 to 512 [ 83.329869][ T5069] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.387219][ T5069] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.408473][ T5073] sctp: [Deprecated]: syz.2.223 (pid 5073) Use of int in max_burst socket option. [ 83.408473][ T5073] Use struct sctp_assoc_value instead [ 83.434116][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 83.436347][ T5069] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.453507][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.466996][ T5077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.225'. [ 83.479583][ T5069] EXT4-fs (loop1): 1 truncate cleaned up [ 83.485779][ T5069] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 83.505852][ T7] usb 5-1: Product: syz [ 83.518432][ T5077] loop2: detected capacity change from 0 to 512 [ 83.545925][ T7] usb 5-1: Manufacturer: syz [ 83.550797][ T7] usb 5-1: SerialNumber: syz [ 83.620273][ T5077] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 83.641006][ T5083] tipc: Started in network mode [ 83.652734][ T5083] tipc: Node identity de2d822c3633, cluster identity 4711 [ 83.662026][ T5083] tipc: Enabled bearer , priority 0 [ 83.669025][ T5077] System zones: 0-2, 18-18, 34-35 [ 83.694676][ T5083] device syzkaller0 entered promiscuous mode [ 83.710234][ T5077] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 83.738086][ T5077] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.748829][ T5082] tipc: Resetting bearer [ 83.818983][ T5082] tipc: Disabling bearer [ 83.886075][ T4402] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.959302][ T5096] kvm: pic: non byte write [ 84.086011][ T5104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.232'. [ 84.099413][ T5107] overlayfs: failed to clone upperpath [ 84.136838][ T4402] usb 1-1: Using ep0 maxpacket: 32 [ 84.154250][ T7] usb 5-1: 0:2 : does not exist [ 84.217046][ T7] usb 5-1: USB disconnect, device number 3 [ 84.264407][ T4402] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 84.277795][ T4402] usb 1-1: config 0 has no interface number 0 [ 84.399079][ T4535] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.406872][ T4535] Bluetooth: hci5: Frame reassembly failed (-84) [ 84.444020][ T4402] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 84.453251][ T4402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.462816][ T4402] usb 1-1: Product: syz [ 84.467392][ T4402] usb 1-1: Manufacturer: syz [ 84.472013][ T4402] usb 1-1: SerialNumber: syz [ 84.481937][ T4402] usb 1-1: config 0 descriptor?? [ 84.525084][ T4402] smsc95xx v2.0.0 [ 84.931698][ T5131] loop5: detected capacity change from 0 to 7 [ 84.949546][ T4175] Dev loop5: unable to read RDB block 7 [ 84.955692][ T4175] loop5: unable to read partition table [ 84.961870][ T4175] loop5: partition table beyond EOD, truncated [ 84.973516][ T4402] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 84.993340][ T4402] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 85.008017][ T5131] Dev loop5: unable to read RDB block 7 [ 85.013743][ T5131] loop5: unable to read partition table [ 85.020677][ T5131] loop5: partition table beyond EOD, truncated [ 85.038212][ T5131] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 85.250734][ T5150] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 85.260509][ T5150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.252'. [ 85.613229][ T5157] loop1: detected capacity change from 0 to 512 [ 85.657719][ T5157] EXT4-fs (loop1): Ignoring removed oldalloc option [ 85.675806][ T5157] EXT4-fs (loop1): 1 truncate cleaned up [ 85.681571][ T5157] EXT4-fs (loop1): mounted filesystem without journal. Opts: noinit_itable,bsdgroups,lazytime,errors=remount-ro,jqfmt=vfsv1,oldalloc,usrquota,. Quota mode: writeback. [ 86.394389][ T4402] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 86.459932][ T4402] smsc95xx: probe of 1-1:0.67 failed with error -71 [ 86.604159][ T4402] usb 1-1: USB disconnect, device number 2 [ 86.742544][ T5169] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.855962][ T3520] Bluetooth: hci5: command 0x1003 tx timeout [ 86.871553][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 87.112243][ T5175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.261'. [ 87.329047][ T5185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.265'. [ 87.347991][ T5185] HTB: quantum of class 80060008 is small. Consider r2q change. [ 87.357254][ T5185] HTB: quantum of class 80060008 is small. Consider r2q change. [ 88.078145][ T5188] netlink: 'syz.0.266': attribute type 3 has an invalid length. [ 88.114248][ T5188] netlink: 'syz.0.266': attribute type 3 has an invalid length. [ 88.270165][ T5197] binder: 5196:5197 ioctl c0306201 0 returned -14 [ 88.337962][ T5206] binder: 5196:5206 ioctl c0306201 200000000300 returned -14 [ 88.617477][ T5215] loop2: detected capacity change from 0 to 7 [ 88.630486][ T5215] Dev loop2: unable to read RDB block 7 [ 88.636198][ T5215] loop2: unable to read partition table [ 88.642107][ T5215] loop2: partition table beyond EOD, truncated [ 88.664008][ T5215] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 88.679735][ T3561] Dev loop2: unable to read RDB block 7 [ 88.685801][ T3561] loop2: unable to read partition table [ 88.691604][ T3561] loop2: partition table beyond EOD, truncated [ 88.885725][ T4402] Bluetooth: hci5: command 0x1001 tx timeout [ 88.892414][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 89.058184][ T5197] binder: 5196:5197 ioctl c0306201 2000000003c0 returned -14 [ 89.065843][ T4249] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 89.234307][ T5225] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.364826][ T5235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.284'. [ 89.409097][ T5237] overlayfs: failed to clone upperpath [ 89.474114][ T4249] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.503875][ T4249] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.569588][ T5243] loop1: detected capacity change from 0 to 1024 [ 89.593040][ T5243] EXT4-fs (loop1): inline encryption not supported [ 89.608415][ T5243] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 89.614188][ T4249] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.649912][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 89.663617][ T5243] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 89.673871][ T4249] usb 5-1: SerialNumber: syz [ 90.020961][ T4249] usb 5-1: 0:2 : does not exist [ 90.047925][ T5254] loop1: detected capacity change from 0 to 512 [ 90.104040][ T4249] usb 5-1: USB disconnect, device number 4 [ 90.108154][ T5254] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.126795][ T5254] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 90.222811][ T5254] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.289: corrupted inode contents [ 90.303986][ T5254] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.289: mark_inode_dirty error [ 90.325932][ T5254] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.289: corrupted inode contents [ 90.345296][ T5254] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.289: mark_inode_dirty error [ 90.365590][ T4175] udevd[4175]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.783174][ T5273] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 90.965215][ T3520] Bluetooth: hci5: command 0x1009 tx timeout [ 91.063511][ T5283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.299'. [ 91.083096][ T5283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.299'. [ 91.109404][ T5283] netlink: 'syz.4.299': attribute type 10 has an invalid length. [ 91.129318][ T5283] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.136660][ T5283] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.298938][ T5288] loop4: detected capacity change from 0 to 512 [ 91.450885][ T5288] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 91.524329][ T5288] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 92.257327][ T5288] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.332096][ T5288] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=842c01c, mo2=0002] [ 92.345013][ T5288] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 92.387457][ T5288] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 92.421665][ T5288] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noinit_itable,nomblk_io_submit,noblock_validity,data_err=abort,data_err=ignore,jqfmt=vfsv0,barrier=0x000000000000d95a,debug,,errors=continue. Quota mode: none. [ 92.742539][ T5288] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 93.433779][ T5319] loop4: detected capacity change from 0 to 512 [ 93.434538][ T5321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.311'. [ 93.449451][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 93.477918][ T5321] netlink: 'syz.3.311': attribute type 10 has an invalid length. [ 93.479229][ T5319] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 93.501367][ T5319] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2802e12c, mo2=0002] [ 93.503721][ T5321] device bridge0 left promiscuous mode [ 93.509968][ T5319] System zones: 1-12 [ 93.520884][ T5319] EXT4-fs (loop4): orphan cleanup on readonly fs [ 93.530466][ T5319] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.312: invalid indirect mapped block 12 (level 1) [ 93.549003][ T5321] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.556355][ T5321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.563693][ T5321] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.570797][ T5321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.581579][ T5319] EXT4-fs (loop4): Remounting filesystem read-only [ 93.588643][ T5319] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.312: invalid indirect mapped block 2 (level 2) [ 93.602440][ T5319] EXT4-fs (loop4): Remounting filesystem read-only [ 93.614997][ T5319] EXT4-fs (loop4): 1 truncate cleaned up [ 93.633552][ T5319] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,jqfmt=vfsv1,noload,errors=remount-ro,sb=0x00000000000006f9. Quota mode: none. [ 93.637976][ T5321] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 94.387887][ T5332] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 94.439135][ T5332] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 94.468792][ T5341] block device autoloading is deprecated and will be removed. [ 94.703259][ T5353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.324'. [ 94.725834][ T5354] syz.1.323 uses obsolete (PF_INET,SOCK_PACKET) [ 95.024051][ T5356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.325'. [ 95.059212][ T5354] device syzkaller1 entered promiscuous mode [ 95.913620][ T5381] netlink: 'syz.0.331': attribute type 4 has an invalid length. [ 95.952629][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 95.952641][ T26] audit: type=1326 audit(1770300015.683:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.3.330" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4feb306eb9 code=0x0 [ 96.850782][ T5411] netlink: 16 bytes leftover after parsing attributes in process `syz.3.344'. [ 96.912710][ T5415] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 97.620744][ T5431] loop1: detected capacity change from 0 to 256 [ 97.758748][ T5431] FAT-fs (loop1): Directory bread(block 64) failed [ 97.793140][ T5431] FAT-fs (loop1): Directory bread(block 65) failed [ 97.813286][ T5431] FAT-fs (loop1): Directory bread(block 66) failed [ 97.827326][ T5431] FAT-fs (loop1): Directory bread(block 67) failed [ 97.834604][ T5431] FAT-fs (loop1): Directory bread(block 68) failed [ 97.841607][ T5431] FAT-fs (loop1): Directory bread(block 69) failed [ 97.849266][ T5431] FAT-fs (loop1): Directory bread(block 70) failed [ 97.869796][ T5431] FAT-fs (loop1): Directory bread(block 71) failed [ 97.887117][ T5431] FAT-fs (loop1): Directory bread(block 72) failed [ 97.901295][ T5431] FAT-fs (loop1): Directory bread(block 73) failed [ 98.613715][ T5468] netlink: 24 bytes leftover after parsing attributes in process `syz.3.367'. [ 98.681716][ T5468] netlink: 4 bytes leftover after parsing attributes in process `syz.3.367'. [ 98.930063][ T5477] netlink: 'syz.3.371': attribute type 5 has an invalid length. [ 99.581695][ T5496] < [ 99.707336][ T5504] netlink: 24 bytes leftover after parsing attributes in process `syz.0.380'. [ 99.821910][ T5506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 100.249855][ T5527] comedi comedi0: Minor 2 could not be opened [ 100.460550][ T5530] 9pnet: Insufficient options for proto=fd [ 100.650038][ T5510] loop4: detected capacity change from 0 to 32768 [ 100.708368][ T5510] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.381 (5510) [ 100.732522][ T5514] loop0: detected capacity change from 0 to 32768 [ 100.759917][ T5510] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 100.801933][ T5510] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 100.822074][ T5510] BTRFS info (device loop4): use lzo compression, level 0 [ 100.877272][ T5510] BTRFS info (device loop4): max_inline at 0 [ 100.892057][ T5510] BTRFS info (device loop4): using free space tree [ 100.910065][ T5514] XFS (loop0): Mounting V5 Filesystem [ 100.914196][ T5510] BTRFS info (device loop4): has skinny extents [ 100.936260][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.3.389'. [ 101.025071][ T5514] XFS (loop0): Ending clean mount [ 101.369942][ T5570] overlayfs: failed to clone upperpath [ 101.382815][ T5510] BTRFS info (device loop4): enabling ssd optimizations [ 101.472018][ T4189] XFS (loop0): Unmounting Filesystem [ 101.487711][ T5510] BTRFS error (device loop4): unrecognized mount option 'ÿÿÿÿÿÿÿÿÿÿ0x0000000000000000ÿÿ18446744073709551615' [ 102.621188][ T5581] loop2: detected capacity change from 0 to 32768 [ 102.711550][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 103.164289][ T7] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 103.183488][ T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 103.230096][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.265744][ T7] usb 1-1: config 0 descriptor?? [ 103.322400][ T5622] loop4: detected capacity change from 0 to 32768 [ 103.405047][ T5622] XFS (loop4): Mounting V5 Filesystem [ 103.572989][ T5622] XFS (loop4): Ending clean mount [ 103.601605][ T5622] XFS (loop4): Quotacheck needed: Please wait. [ 103.728759][ T5622] XFS (loop4): Quotacheck: Done. [ 103.754229][ T26] audit: type=1800 audit(1770300023.483:31): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.407" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 103.894068][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.901520][ T5646] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.950071][ T5646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.984469][ T5646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.342317][ T4187] XFS (loop4): Unmounting Filesystem [ 104.921598][ T5665] loop2: detected capacity change from 0 to 8192 [ 104.988913][ T5665] loop2: p1 p2 p4 < > [ 104.993043][ T5665] loop2: partition table partially beyond EOD, truncated [ 105.045571][ T5665] loop2: p1 start 16777216 is beyond EOD, truncated [ 105.059499][ T5665] loop2: p2 size 515840 extends beyond EOD, truncated [ 105.087851][ T5665] loop2: p4 start 16777216 is beyond EOD, truncated [ 105.370222][ T4175] udevd[4175]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 105.390509][ T4242] usb 1-1: USB disconnect, device number 3 [ 106.812158][ T5699] loop4: detected capacity change from 0 to 128 [ 106.829399][ T5698] loop0: detected capacity change from 0 to 512 [ 106.944318][ T5699] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.022056][ T5699] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 107.051445][ T5705] devpts: called with bogus options [ 107.167933][ T5707] netlink: 'syz.0.431': attribute type 10 has an invalid length. [ 107.190205][ T5707] device syz_tun entered promiscuous mode [ 107.265451][ T5707] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.407840][ T5711] loop0: detected capacity change from 0 to 4096 [ 107.438471][ T5711] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 107.458893][ T5699] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 107.533778][ T5712] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 107.918411][ T5735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.005217][ T5735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.080652][ T5739] tipc: Failed to remove unknown binding: 66,0,0/0:3991716464/3991716465 [ 108.135032][ T5739] tipc: Failed to remove unknown binding: 66,0,0/0:3991716464/3991716465 [ 108.685293][ T5603] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.850601][ T5776] tipc: Failed to remove unknown binding: 66,0,0/16966:1261226614/1261226615 [ 108.860683][ T5776] tipc: Failed to remove unknown binding: 66,0,0/16966:1261226614/1261226615 [ 108.973973][ T5603] usb 1-1: Using ep0 maxpacket: 32 [ 109.103992][ T5603] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 109.113274][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.157894][ T5603] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 109.594152][ T4242] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 109.964058][ T4242] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 109.972239][ T4242] usb 2-1: config 0 has no interface number 0 [ 109.978848][ T4242] usb 2-1: config 0 interface 41 has no altsetting 0 [ 110.144078][ T4242] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 110.153712][ T4242] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.162414][ T4242] usb 2-1: Product: syz [ 110.167360][ T4242] usb 2-1: Manufacturer: syz [ 110.172151][ T4242] usb 2-1: SerialNumber: syz [ 110.181462][ T4242] usb 2-1: config 0 descriptor?? [ 110.204366][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.211551][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.464012][ T5603] gspca_nw80x: reg_w err -71 [ 110.469300][ T5603] nw80x: probe of 1-1:3.0 failed with error -71 [ 110.479546][ T5603] usb 1-1: USB disconnect, device number 4 [ 110.825180][ T5807] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.834218][ T5807] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.843086][ T5807] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.852742][ T5807] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.028923][ T5817] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 111.107139][ T4242] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 111.126622][ T5828] binder: 5827:5828 unknown command 0 [ 111.134904][ T5828] binder: 5827:5828 ioctl c0306201 200000000080 returned -22 [ 111.152866][ T5831] loop4: detected capacity change from 0 to 512 [ 111.242027][ T5831] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 111.258950][ T5831] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.297761][ T5831] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.478: corrupted xattr block 33 [ 111.317978][ T5831] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.478: corrupted xattr block 33 [ 111.989609][ T5868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.491'. [ 112.604408][ T4242] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 112.660053][ T4242] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 112.708243][ T4242] CoreChips: probe of 2-1:0.41 failed with error -71 [ 112.736397][ T4242] usb 2-1: USB disconnect, device number 2 [ 113.061979][ T5914] loop4: detected capacity change from 0 to 4096 [ 113.114643][ T5914] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 113.397703][ T5930] loop1: detected capacity change from 0 to 128 [ 113.583044][ T5930] attempt to access beyond end of device [ 113.583044][ T5930] loop1: rw=2049, want=250, limit=128 [ 113.661039][ T5915] device syz_tun left promiscuous mode [ 113.710724][ T5915] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.718082][ T5915] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.791386][ T5912] loop2: detected capacity change from 0 to 32768 [ 113.885164][ T5912] XFS (loop2): Mounting V5 Filesystem [ 113.970414][ T5912] XFS (loop2): Ending clean mount [ 114.640728][ T5959] kvm: vcpu 0: requested 242 ns lapic timer period limited to 200000 ns [ 114.649883][ T5959] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 114.658470][ T4185] XFS (loop2): Unmounting Filesystem [ 115.097868][ T5915] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.116448][ T5915] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.154084][ T5915] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.177214][ T5915] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.330273][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.513'. [ 115.607690][ T5995] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 115.622364][ T5994] loop0: detected capacity change from 0 to 1024 [ 116.012749][ T6012] kvm: pic: single mode not supported [ 116.012832][ T6012] picdev_read: 77 callbacks suppressed [ 116.012842][ T6012] kvm: pic: non byte read [ 116.038309][ T6012] kvm: pic: level sensitive irq not supported [ 116.038370][ T6012] kvm: pic: non byte read [ 116.051511][ T6012] kvm: pic: non byte read [ 116.056273][ T6012] kvm: pic: non byte read [ 116.061216][ T6012] kvm: pic: non byte read [ 116.070022][ T6012] kvm: pic: non byte read [ 116.075246][ T6012] kvm: pic: single mode not supported [ 116.075263][ T6012] kvm: pic: level sensitive irq not supported [ 116.083341][ T6012] kvm: pic: non byte read [ 116.094425][ T6012] kvm: pic: non byte read [ 116.099092][ T6012] kvm: pic: non byte read [ 116.233310][ T1154] hfsplus: b-tree write err: -5, ino 3 [ 116.335206][ T6031] team0: Device veth1_vlan failed to register rx_handler [ 116.391111][ T1154] Bluetooth: hci5: Frame reassembly failed (-84) [ 116.533942][ T3520] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 116.891058][ T6052] loop0: detected capacity change from 0 to 128 [ 116.897723][ T3520] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 116.910610][ T3520] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 116.920732][ T3520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.934144][ T3520] usb 5-1: config 0 descriptor?? [ 116.996306][ T26] audit: type=1326 audit(1770300036.733:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6049 comm="syz.3.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4feb306eb9 code=0x0 [ 117.055769][ T6052] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 117.074218][ T6052] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 117.105862][ T6052] EXT4-fs (loop0): shut down requested (1) [ 117.124768][ T6052] fscrypt (loop0, inode 12): Error -5 getting encryption context [ 117.534041][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.541541][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.551444][ T6067] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.559017][ T6067] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.625210][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 117.635946][ T6070] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 117.798680][ T6074] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 118.585141][ T3520] Bluetooth: hci5: command 0x1003 tx timeout [ 118.740774][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 118.906707][ T6081] program syz.1.561 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.230290][ T4242] usb 5-1: USB disconnect, device number 5 [ 119.413610][ T6105] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 120.114475][ T6108] overlayfs: failed to clone upperpath [ 120.803991][ T3520] Bluetooth: hci5: command 0x1001 tx timeout [ 120.812079][ T4199] Bluetooth: hci5: sending frame failed (-49) [ 122.576972][ T6129] loop0: detected capacity change from 0 to 32768 [ 122.624889][ T6149] binder_alloc: 6148: binder_alloc_buf size 17432 failed, no address space [ 122.664204][ T6149] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 122.801129][ T6129] XFS (loop0): Mounting V5 Filesystem [ 122.894148][ T4404] Bluetooth: hci5: command 0x1009 tx timeout [ 122.897301][ T6166] netlink: 'syz.4.590': attribute type 1 has an invalid length. [ 123.097807][ T6169] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.115023][ T6129] XFS (loop0): Ending clean mount [ 123.132083][ T6161] md: could not open device unknown-block(0,0). [ 123.139754][ T6169] bond2: (slave bond3): making interface the new active one [ 123.153947][ T6161] md: md_import_device returned -6 [ 123.171507][ T6167] md2: error: bitmap file must be a regular file [ 123.188500][ T6169] bond2: (slave bond3): Enslaving as an active interface with an up link [ 123.222115][ T6166] netlink: 28 bytes leftover after parsing attributes in process `syz.4.590'. [ 123.235985][ T6129] XFS (loop0): Quotacheck needed: Please wait. [ 123.257050][ T6166] device bond2 entered promiscuous mode [ 123.266951][ T6176] VFS: Mount too revealing [ 123.323968][ T6166] device bond3 entered promiscuous mode [ 123.330620][ T6166] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.391516][ T6129] XFS (loop0): Quotacheck: Done. [ 123.484231][ T4189] XFS (loop0): Unmounting Filesystem [ 123.613120][ T6186] loop4: detected capacity change from 0 to 764 [ 123.711137][ T6188] device bond2 entered promiscuous mode [ 125.046220][ T6202] ÿ: renamed from bond_slave_0 [ 125.516200][ T6222] loop4: detected capacity change from 0 to 16 [ 125.523112][ T6221] loop0: detected capacity change from 0 to 128 [ 125.596201][ T6222] erofs: (device loop4): mounted with root inode @ nid 36. [ 125.706961][ T6222] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 125.766236][ T6222] attempt to access beyond end of device [ 125.766236][ T6222] loop4: rw=0, want=64, limit=16 [ 125.818170][ T6222] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 125.883986][ T6222] erofs: (device loop4): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 125.961969][ T6222] attempt to access beyond end of device [ 125.961969][ T6222] loop4: rw=0, want=64, limit=16 [ 126.018870][ T6222] erofs: (device loop4): z_erofs_readpage: failed to read, err [-95] [ 126.076987][ T6236] sctp: [Deprecated]: syz.3.616 (pid 6236) Use of struct sctp_assoc_value in delayed_ack socket option. [ 126.076987][ T6236] Use struct sctp_sack_info instead [ 126.122740][ T6228] ODEBUG: Out of memory. ODEBUG disabled [ 126.940785][ T6228] syz.4.610 (6228): drop_caches: 2 [ 126.959014][ T6254] bond3: (slave ip6gretap1): no link monitoring support [ 127.001317][ T6254] bond3: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 127.057173][ T6254] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 127.353097][ T6281] netlink: 24 bytes leftover after parsing attributes in process `syz.1.635'. [ 127.365034][ T4404] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.496287][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.646'. [ 127.660646][ T26] audit: type=1326 audit(1770300047.393:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 127.683266][ T26] audit: type=1326 audit(1770300047.413:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 127.733908][ T26] audit: type=1326 audit(1770300047.443:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 127.799346][ T26] audit: type=1326 audit(1770300047.443:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 127.828340][ T6291] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 127.885940][ T4404] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.292124][ T26] audit: type=1326 audit(1770300047.443:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 128.315162][ T6293] loop0: detected capacity change from 0 to 16 [ 128.336298][ T26] audit: type=1326 audit(1770300047.443:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 128.371400][ T4404] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.381928][ T4404] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 128.391391][ T4404] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.425502][ T4404] usb 3-1: config 0 descriptor?? [ 128.448970][ T26] audit: type=1326 audit(1770300047.443:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 128.454106][ T6297] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.471743][ T26] audit: type=1326 audit(1770300047.443:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 128.500378][ T6293] erofs: (device loop0): mounted with root inode @ nid 36. [ 128.519105][ T26] audit: type=1326 audit(1770300047.443:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 128.565940][ T6293] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 128.585805][ T26] audit: type=1326 audit(1770300047.443:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6288 comm="syz.1.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d49cf1eb9 code=0x7ffc0000 [ 128.614138][ T6293] attempt to access beyond end of device [ 128.614138][ T6293] loop0: rw=0, want=64, limit=16 [ 128.644586][ T6293] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 128.823584][ T6302] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 128.858864][ T6302] attempt to access beyond end of device [ 128.858864][ T6302] loop0: rw=0, want=64, limit=16 [ 128.892801][ T6302] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95] [ 128.943360][ T4404] cp2112 0003:10C4:EA90.0001: item fetching failed at offset 5/7 [ 128.960353][ T4404] cp2112 0003:10C4:EA90.0001: parse failed [ 128.974222][ T4404] cp2112: probe of 0003:10C4:EA90.0001 failed with error -22 [ 129.117297][ T6293] syz.0.638 (6293): drop_caches: 2 [ 129.190001][ T6309] netlink: 'syz.1.644': attribute type 1 has an invalid length. [ 129.248237][ T6309] 8021q: adding VLAN 0 to HW filter on device bond5 [ 129.257375][ T6309] bond4: (slave bond5): making interface the new active one [ 129.265121][ T6309] bond4: (slave bond5): Enslaving as an active interface with an up link [ 129.277089][ T6312] netlink: 68 bytes leftover after parsing attributes in process `syz.0.643'. [ 129.286597][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.644'. [ 129.295937][ T6309] device bond4 entered promiscuous mode [ 129.301497][ T6309] device bond5 entered promiscuous mode [ 129.307530][ T6309] 8021q: adding VLAN 0 to HW filter on device bond4 [ 129.660116][ T6336] loop1: detected capacity change from 0 to 64 [ 130.020259][ T6350] loop1: detected capacity change from 0 to 512 [ 130.051444][ T6350] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.074787][ T6350] EXT4-fs (loop1): required journal recovery suppressed and not mounted read-only [ 130.197023][ T4404] usb 3-1: USB disconnect, device number 2 [ 130.254492][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 130.414998][ T6365] loop1: detected capacity change from 0 to 256 [ 130.485042][ T6367] loop4: detected capacity change from 0 to 1024 [ 130.502393][ T6365] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 130.604984][ T6367] EXT4-fs (loop4): mounted filesystem without journal. Opts: abort,min_batch_time=0x0000000000000001,usrjquota=,,errors=continue. Quota mode: none. [ 130.764280][ T4187] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 130.818717][ T4187] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #15: comm syz-executor: mark_inode_dirty error [ 131.254075][ T4404] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.291427][ T6421] ÿ: renamed from bond_slave_0 [ 131.624160][ T4404] usb 5-1: Using ep0 maxpacket: 32 [ 131.744210][ T4404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.805183][ T4404] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.820420][ T4404] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 131.833607][ T4404] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.929829][ T4404] usb 5-1: config 0 descriptor?? [ 132.011435][ T6434] netlink: 28 bytes leftover after parsing attributes in process `syz.3.691'. [ 132.303521][ T6431] loop2: detected capacity change from 0 to 32768 [ 132.320165][ T6449] udc-core: couldn't find an available UDC or it's busy [ 132.329491][ T6449] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.398941][ T6431] XFS (loop2): Mounting V5 Filesystem [ 132.465573][ T6431] XFS (loop2): Ending clean mount [ 132.614029][ T4404] usbhid 5-1:0.0: can't add hid device: -71 [ 132.622431][ T4404] usbhid: probe of 5-1:0.0 failed with error -71 [ 132.637921][ T4404] usb 5-1: USB disconnect, device number 6 [ 132.805488][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.811932][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.858803][ T6431] syz.2.690 (6431): drop_caches: 2 [ 133.029630][ T13] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 133.096711][ T13] XFS (loop2): Corruption warning: Metadata has LSN (1:1536) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve. [ 133.113402][ T4185] XFS (loop2): Unmounting Filesystem [ 133.148366][ T13] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_cntbt block 0x8 [ 133.161099][ T13] XFS (loop2): Unmount and run xfs_repair [ 133.171890][ T13] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 133.179551][ T13] 00000000: 41 42 33 43 00 00 00 03 ff ff ff ff ff ff ff ff AB3C............ [ 133.204222][ T13] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 06 00 ................ [ 133.240411][ T13] 00000020: 00 00 00 00 00 00 42 cb 9f 91 9c b7 20 0a 10 1d ......B..... ... [ 133.263989][ T13] 00000030: 00 00 00 00 83 85 41 d8 00 00 00 07 00 00 00 01 ......A......... [ 133.278743][ T13] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0 ........... .... [ 133.291400][ T13] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.306590][ T13] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.318122][ T13] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 133.328664][ T13] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x8 len 4 error 74 [ 133.342999][ T13] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x515/0x8b0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 133.358531][ T13] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 133.534482][ T4242] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 133.660584][ T6472] chnl_net:caif_netlink_parms(): no params data found [ 133.789415][ T6490] loop2: detected capacity change from 0 to 4096 [ 133.914804][ T4242] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.009679][ T6472] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.020087][ T6472] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.031760][ T6472] device bridge_slave_0 entered promiscuous mode [ 134.052283][ T6472] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.061488][ T6472] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.078431][ T6472] device bridge_slave_1 entered promiscuous mode [ 134.084164][ T4242] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.116387][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.141846][ T6472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 134.143499][ T4242] usb 5-1: Product: syz [ 134.167537][ T6472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 134.176132][ T4242] usb 5-1: Manufacturer: syz [ 134.188636][ T4242] usb 5-1: SerialNumber: syz [ 134.290063][ T6472] team0: Port device team_slave_0 added [ 134.323363][ T6472] team0: Port device team_slave_1 added [ 134.357624][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 134.364868][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.393226][ T6472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 134.410328][ T4345] tipc: Left network mode [ 134.411608][ T6472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 134.423178][ T6472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 134.452826][ T6472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.551684][ T6472] device hsr_slave_0 entered promiscuous mode [ 134.569659][ T6472] device hsr_slave_1 entered promiscuous mode [ 134.582435][ T6472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 134.592076][ T6472] Cannot create hsr debugfs directory [ 134.938136][ T6472] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 134.959663][ T6472] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 134.975511][ T6472] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 134.991944][ T6472] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 135.148585][ T6472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.167126][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 135.224694][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 135.245338][ T6472] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.313725][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 135.336368][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 135.365211][ T4242] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 135.371667][ T4242] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 135.384240][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.391327][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.419719][ T4242] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 135.443971][ T5602] Bluetooth: hci5: command 0x0409 tx timeout [ 135.464301][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 135.486027][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 135.501532][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 135.513304][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.520469][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.529533][ T6529] af_packet: tpacket_rcv: packet too big, clamped from 4087 to 4294967272. macoff=96 [ 135.554501][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 135.567956][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 135.589063][ T4242] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 135.598042][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 135.612884][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 135.631917][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 135.667510][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 135.690551][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 135.776218][ T4345] device hsr_slave_0 left promiscuous mode [ 135.839380][ T4345] device hsr_slave_1 left promiscuous mode [ 135.856316][ T4345] device bridge_slave_1 left promiscuous mode [ 135.891965][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.952820][ T6540] binder: 6539:6540 ioctl c0306201 2000000003c0 returned -14 [ 135.967302][ T4345] device bridge_slave_0 left promiscuous mode [ 135.976675][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.327559][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 136.357936][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 136.375819][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.420017][ T4345] bond0 (unregistering): (slave c0ÿ): Releasing backup interface [ 136.636448][ T4345] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 136.653212][ T4345] bond0 (unregistering): Released all slaves [ 136.728988][ T6472] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.752746][ T6472] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.783700][ T4242] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 136.788805][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 136.813062][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 136.831552][ T4242] usb 5-1: USB disconnect, device number 7 [ 136.845547][ T4242] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 136.856544][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 136.873189][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 136.882842][ T1154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 137.017826][ T6575] tipc: Started in network mode [ 137.022754][ T6575] tipc: Node identity 080211000001, cluster identity 4711 [ 137.068987][ T6575] tipc: Enabled bearer , priority 0 [ 137.098969][ T6580] device syzkaller0 entered promiscuous mode [ 137.283773][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.302682][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.346966][ T6472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.117626][ T4242] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 138.125220][ T5603] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 138.134840][ T5602] Bluetooth: hci5: command 0x041b tx timeout [ 138.246158][ T5602] tipc: Node number set to 134418688 [ 138.444063][ T4242] usb 5-1: Using ep0 maxpacket: 32 [ 138.566245][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.699188][ T5603] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.754658][ T4242] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 138.814583][ T4242] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.900325][ T5603] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 138.986701][ T4242] usb 5-1: Product: syz [ 139.072084][ T4242] usb 5-1: Manufacturer: syz [ 139.087341][ T5603] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 139.096835][ T4242] usb 5-1: SerialNumber: syz [ 139.117716][ T5603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.165985][ T4242] usb 5-1: config 0 descriptor?? [ 139.172778][ T5603] usb 1-1: config 0 descriptor?? [ 139.218953][ T4242] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 139.247258][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 139.276428][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 139.302407][ T6614] batman_adv: batadv0: Adding interface: dummy0 [ 139.330234][ T6614] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.392119][ T6614] batman_adv: batadv0: Interface activated: dummy0 [ 139.500285][ T6617] batadv0: mtu less than device minimum [ 139.508715][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.521703][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.533098][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.544565][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.555936][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.567353][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.578716][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.590064][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.601899][ T6617] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 139.647343][ T5603] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 139.667735][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 139.678169][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 139.713198][ T6472] device veth0_vlan entered promiscuous mode [ 139.732640][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 139.749075][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 139.759321][ T5603] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 139.797658][ T6472] device veth1_vlan entered promiscuous mode [ 139.879895][ T6472] device veth0_macvtap entered promiscuous mode [ 139.922216][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 139.934514][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 139.962980][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 139.991620][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 140.016007][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 140.056202][ T6472] device veth1_macvtap entered promiscuous mode [ 140.105395][ T6631] loop5: detected capacity change from 0 to 7 [ 140.119602][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.141201][ T6631] Dev loop5: unable to read RDB block 7 [ 140.155645][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.164110][ T6631] loop5: unable to read partition table [ 140.166184][ T5603] Bluetooth: hci5: command 0x040f tx timeout [ 140.182929][ T6631] loop5: partition table beyond EOD, truncated [ 140.188918][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.216519][ T6631] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 140.220923][ T6472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.251568][ T6472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.266689][ T6472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.281976][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 140.324819][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 140.359980][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 140.390530][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 140.439057][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 140.467274][ T6472] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.508105][ T6472] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.539949][ T6472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.578103][ T6472] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.744639][ T6569] udc-core: couldn't find an available UDC or it's busy [ 140.751770][ T6569] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 140.808403][ T6652] device syzkaller0 entered promiscuous mode [ 140.839133][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.862838][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.923205][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 140.938904][ T4535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.972973][ T4535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.031384][ T4716] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 141.214041][ T4242] gspca_ov534_9: reg_w failed -71 [ 141.262622][ T6655] loop1: detected capacity change from 0 to 32768 [ 141.328656][ T6655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.737 (6655) [ 141.348276][ T6655] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 141.357121][ T6655] BTRFS info (device loop1): turning on sync discard [ 141.363910][ T6655] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 141.373302][ T6655] BTRFS info (device loop1): use zstd compression, level 3 [ 141.380973][ T6655] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 141.391641][ T6655] BTRFS info (device loop1): trying to use backup root at mount time [ 141.399980][ T6655] BTRFS info (device loop1): enabling auto defrag [ 141.406538][ T6655] BTRFS info (device loop1): using free space tree [ 141.413059][ T6655] BTRFS info (device loop1): has skinny extents [ 141.535948][ T4242] gspca_ov534_9: Unknown sensor 0000 [ 141.536016][ T4242] ov534_9: probe of 5-1:0.0 failed with error -22 [ 141.576417][ T4351] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 141.621021][ T6655] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 141.630430][ T4535] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 141.661500][ T4242] usb 5-1: USB disconnect, device number 8 [ 141.724037][ T6655] BTRFS warning (device loop1): couldn't read tree root [ 141.731719][ T6655] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 141.741793][ T6655] BTRFS warning (device loop1): couldn't read tree root [ 141.830884][ T4404] usb 1-1: USB disconnect, device number 5 [ 141.836864][ T6655] BTRFS info (device loop1): enabling ssd optimizations [ 141.848040][ T6655] BTRFS info (device loop1): clearing free space tree [ 141.855470][ T6655] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.865237][ T6655] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.900544][ T6655] BTRFS info (device loop1): creating free space tree [ 141.909233][ T6655] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.918662][ T6692] loop0: detected capacity change from 0 to 1024 [ 141.919109][ T6655] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.948687][ T6655] BTRFS info (device loop1): checking UUID tree [ 142.107353][ T6692] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 142.168898][ T6692] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.244511][ T1107] Bluetooth: hci5: command 0x0419 tx timeout [ 142.597406][ T6717] loop4: detected capacity change from 0 to 1024 [ 142.743342][ T6717] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,nojournal_checksum,data_err=ignore,dioread_lock,data_err=ignore,mb_optimize_scan=0x0000000000000000,jqfmt=vfsold,user_xattr,nodioread_nolock,nogrpid,norecovery,errors=remount-ro,nodioread_nolock,nojournal_checksum,. Quota mode: none. [ 142.802257][ T6691] loop5: detected capacity change from 0 to 32768 [ 142.831669][ T4175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4175) [ 142.922707][ T6691] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.741 (6691) [ 142.974051][ T6691] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 143.008788][ T6691] BTRFS info (device loop5): setting nodatacow, compression disabled [ 143.037487][ T6691] BTRFS info (device loop5): force clearing of disk cache [ 143.059054][ T4351] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm kworker/u4:9: lblock 0 mapped to illegal pblock 0 (length 4) [ 143.082236][ T6691] BTRFS info (device loop5): enabling ssd optimizations [ 143.117146][ T6691] BTRFS info (device loop5): using spread ssd allocation scheme [ 143.141887][ T6691] BTRFS info (device loop5): turning off barriers [ 143.162056][ T6691] BTRFS info (device loop5): disabling free space tree [ 143.177545][ T4351] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 143.179887][ T6691] BTRFS info (device loop5): not using ssd optimizations [ 143.202667][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 143.202682][ T26] audit: type=1326 audit(1770300062.933:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.251513][ T4351] EXT4-fs (loop0): This should not happen!! Data will be lost [ 143.251513][ T4351] [ 143.269866][ T6691] BTRFS info (device loop5): not using spread ssd allocation scheme [ 143.304072][ T6691] BTRFS info (device loop5): has skinny extents [ 143.328165][ T26] audit: type=1326 audit(1770300062.933:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.372940][ T26] audit: type=1326 audit(1770300062.933:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.473543][ T26] audit: type=1326 audit(1770300062.933:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.552130][ T26] audit: type=1326 audit(1770300062.933:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.580948][ T26] audit: type=1326 audit(1770300062.933:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.604162][ T26] audit: type=1326 audit(1770300062.953:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.627088][ T26] audit: type=1326 audit(1770300062.953:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.749" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c96a77eb9 code=0x7ffc0000 [ 143.697281][ T6691] BTRFS info (device loop5): clearing free space tree [ 143.755117][ T6758] netlink: 'syz.0.748': attribute type 4 has an invalid length. [ 143.799840][ T6691] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 143.899039][ T6691] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 144.028899][ T6778] tipc: Started in network mode [ 144.056757][ T6778] tipc: Node identity 42e8b8eeb5ae, cluster identity 4711 [ 144.113708][ T6778] tipc: Enabled bearer , priority 0 [ 144.267514][ T6780] device syzkaller0 entered promiscuous mode [ 144.371474][ T6776] tipc: Resetting bearer [ 144.472067][ T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 144.628911][ T6776] tipc: Disabling bearer [ 144.743887][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 144.864097][ T21] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 144.892736][ T21] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.920212][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.953051][ T6807] loop0: detected capacity change from 0 to 8 [ 144.967264][ T21] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.002667][ T21] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.059524][ T21] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 145.086467][ T6810] [ 145.102407][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.362874][ T6822] loop0: detected capacity change from 0 to 1024 [ 145.384076][ T21] usb 2-1: GET_CAPABILITIES returned 0 [ 145.389597][ T21] usbtmc 2-1:16.0: can't read capabilities [ 145.532906][ T6822] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 145.691955][ T21] usb 2-1: USB disconnect, device number 3 [ 146.380027][ T6881] kernel read not supported for file /file0 (pid: 6881 comm: syz.2.775) [ 146.471922][ T26] audit: type=1800 audit(1770300066.203:77): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.775" name="file0" dev="mqueue" ino=43127 res=0 errno=0 [ 146.609765][ T6894] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 146.691560][ T6894] bond2: (slave geneve2): Error -99 calling set_mac_address [ 146.990772][ T6900] batman_adv: batadv0: Interface deactivated: dummy0 [ 147.481047][ T6900] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.490362][ T6900] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.499331][ T6900] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.508235][ T6900] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.577341][ T6900] device bond2 left promiscuous mode [ 147.607623][ T6900] device bond4 left promiscuous mode [ 147.612971][ T6900] device bond5 left promiscuous mode [ 147.651900][ T6913] netlink: 176 bytes leftover after parsing attributes in process `syz.4.785'. [ 147.760286][ T4535] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.869545][ T4535] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.987848][ T4535] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.082152][ T4535] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.118965][ T6934] loop2: detected capacity change from 0 to 1024 [ 148.208588][ T6934] EXT4-fs (loop2): inline encryption not supported [ 148.239528][ T6934] EXT4-fs (loop2): Ignoring removed nobh option [ 148.274016][ T6934] EXT4-fs (loop2): Ignoring removed bh option [ 148.299110][ T6934] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.357427][ T6934] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,nodelalloc,init_itable=0x0000000000000003,inlinecrypt,data_err=ignore,nodiscard,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 149.093382][ T26] audit: type=1800 audit(1770300068.823:78): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.793" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 149.141215][ T6949] loop1: detected capacity change from 0 to 512 [ 149.268375][ T6949] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 149.283719][ T6932] chnl_net:caif_netlink_parms(): no params data found [ 149.300568][ T6934] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.793: Allocating blocks 257-513 which overlap fs metadata [ 149.324565][ T6949] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 149.406404][ T6957] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.537793][ T6961] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 149.600203][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.605031][ T6961] overlayfs: failed to set xattr on upper [ 149.609124][ T6932] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.622548][ T6932] device bridge_slave_0 entered promiscuous mode [ 149.632840][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.646154][ T6961] overlayfs: ...falling back to index=off,metacopy=off. [ 149.653302][ T6932] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.665017][ T6961] overlayfs: conflicting lowerdir path [ 149.671612][ T6932] device bridge_slave_1 entered promiscuous mode [ 149.712894][ T6971] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.720355][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.832624][ T6932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.869158][ T26] audit: type=1326 audit(1770300069.603:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc4822aeb9 code=0x0 [ 149.916546][ T6932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.984868][ T26] audit: type=1326 audit(1770300069.663:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.008319][ C0] vkms_vblank_simulate: vblank timer overrun [ 150.158953][ T26] audit: type=1326 audit(1770300069.663:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.227175][ T6799] Bluetooth: hci2: command 0x0409 tx timeout [ 150.234127][ T26] audit: type=1326 audit(1770300069.663:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.256942][ T26] audit: type=1326 audit(1770300069.663:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.296701][ T26] audit: type=1326 audit(1770300069.663:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.330161][ T6995] [ 150.332614][ T6995] ============================= [ 150.357493][ T6995] WARNING: suspicious RCU usage [ 150.365929][ T6995] syzkaller #0 Not tainted SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 150.373352][ T26] audit: type=1326 audit(1770300069.663:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.375734][ T6995] ----------------------------- [ 150.396345][ T26] audit: type=1326 audit(1770300069.663:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.413209][ T6995] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 150.424666][ T26] audit: type=1326 audit(1770300069.663:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6983 comm="syz.0.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc4822aeb9 code=0x7ffc0000 [ 150.521234][ T6995] [ 150.521234][ T6995] other info that might help us debug this: [ 150.521234][ T6995] [ 150.536318][ T6995] [ 150.536318][ T6995] rcu_scheduler_active = 2, debug_locks = 1 [ 150.551853][ T6995] 1 lock held by syz.4.803/6995: [ 150.565469][ T6995] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 150.594941][ T6995] [ 150.594941][ T6995] stack backtrace: [ 150.600883][ T6995] CPU: 1 PID: 6995 Comm: syz.4.803 Not tainted syzkaller #0 [ 150.608173][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.618230][ T6995] Call Trace: [ 150.621516][ T6995] [ 150.624440][ T6995] dump_stack_lvl+0x188/0x250 [ 150.629132][ T6995] ? load_image+0x400/0x400 [ 150.633702][ T6995] ? show_regs_print_info+0x20/0x20 [ 150.638930][ T6995] ? lockdep_rcu_suspicious+0x110/0x180 [ 150.644570][ T6995] ? local_bh_enable+0x20/0x20 [ 150.649344][ T6995] rhltable_lookup+0x7a9/0x7c0 [ 150.654112][ T6995] ? local_bh_enable+0x20/0x20 [ 150.658901][ T6995] ? mr_mfc_find_parent+0x190/0x190 [ 150.664102][ T6995] ? mark_lock+0x94/0x320 [ 150.668450][ T6995] ? local_bh_enable+0x20/0x20 [ 150.673214][ T6995] ? mark_lock+0x94/0x320 [ 150.677549][ T6995] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 150.683532][ T6995] ? lock_chain_count+0x20/0x20 [ 150.688385][ T6995] mr_mfc_find_any_parent+0xb6/0x1e0 [ 150.693694][ T6995] ? local_bh_enable+0x20/0x20 [ 150.698461][ T6995] ip_mr_forward+0x24c/0xf90 [ 150.703064][ T6995] ipmr_mfc_add+0x23cc/0x2d40 [ 150.707753][ T6995] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 150.712695][ T6995] ? __lock_acquire+0x7d10/0x7d10 [ 150.717737][ T6995] ip_mroute_setsockopt+0xeaf/0x1250 [ 150.723033][ T6995] ? ipmr_rule_default+0x70/0x70 [ 150.727987][ T6995] ? __might_sleep+0xf0/0xf0 [ 150.732579][ T6995] ip_setsockopt+0x568/0x3130 [ 150.737264][ T6995] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 150.742632][ T6995] ? aa_sk_perm+0x7dc/0x910 [ 150.747147][ T6995] ? aa_af_perm+0x340/0x340 [ 150.751642][ T6995] ? __fget_files+0x40f/0x480 [ 150.756332][ T6995] ? aa_sock_opt_perm+0x74/0x100 [ 150.761275][ T6995] ? sock_common_setsockopt+0x32/0xb0 [ 150.766652][ T6995] ? raw_setsockopt+0xc5/0x180 [ 150.771432][ T6995] ? sock_common_recvmsg+0x1c0/0x1c0 [ 150.776719][ T6995] __sys_setsockopt+0x2bf/0x3d0 [ 150.781575][ T6995] __x64_sys_setsockopt+0xb1/0xc0 [ 150.786602][ T6995] do_syscall_64+0x4c/0xa0 [ 150.791013][ T6995] ? clear_bhb_loop+0x30/0x80 [ 150.795690][ T6995] ? clear_bhb_loop+0x30/0x80 [ 150.800367][ T6995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 150.806260][ T6995] RIP: 0033:0x7f3648fe5eb9 [ 150.810676][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.830286][ T6995] RSP: 002b:00007f36471ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 150.838716][ T6995] RAX: ffffffffffffffda RBX: 00007f3649261180 RCX: 00007f3648fe5eb9 [ 150.846690][ T6995] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 150.854664][ T6995] RBP: 00007f3649053c1f R08: 000000000000003c R09: 0000000000000000 [ 150.862639][ T6995] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 150.870613][ T6995] R13: 00007f3649261218 R14: 00007f3649261180 R15: 00007ffead8e18a8 [ 150.878604][ T6995] [ 150.893547][ T6995] [ 150.895973][ T6995] ============================= [ 150.900867][ T6995] WARNING: suspicious RCU usage [ 150.910170][ T6995] syzkaller #0 Not tainted [ 150.914924][ T6995] ----------------------------- [ 150.919779][ T6995] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 150.932744][ T6995] [ 150.932744][ T6995] other info that might help us debug this: [ 150.932744][ T6995] [ 150.943283][ T6995] [ 150.943283][ T6995] rcu_scheduler_active = 2, debug_locks = 1 [ 150.955401][ T6995] 1 lock held by syz.4.803/6995: [ 150.960359][ T6995] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 150.973094][ T6995] [ 150.973094][ T6995] stack backtrace: [ 150.981044][ T6995] CPU: 1 PID: 6995 Comm: syz.4.803 Not tainted syzkaller #0 [ 150.988337][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 150.998375][ T6995] Call Trace: [ 151.001637][ T6995] [ 151.004543][ T6995] dump_stack_lvl+0x188/0x250 [ 151.009204][ T6995] ? load_image+0x400/0x400 [ 151.013684][ T6995] ? show_regs_print_info+0x20/0x20 [ 151.018861][ T6995] ? lockdep_rcu_suspicious+0x110/0x180 [ 151.024387][ T6995] ? local_bh_enable+0x20/0x20 [ 151.029151][ T6995] rhltable_lookup+0x52a/0x7c0 [ 151.033894][ T6995] ? local_bh_enable+0x20/0x20 [ 151.038639][ T6995] ? mr_mfc_find_parent+0x190/0x190 [ 151.043821][ T6995] ? mark_lock+0x94/0x320 [ 151.048138][ T6995] ? local_bh_enable+0x20/0x20 [ 151.052874][ T6995] ? mark_lock+0x94/0x320 [ 151.057180][ T6995] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 151.063144][ T6995] ? lock_chain_count+0x20/0x20 [ 151.067978][ T6995] mr_mfc_find_any_parent+0xb6/0x1e0 [ 151.073344][ T6995] ? local_bh_enable+0x20/0x20 [ 151.078095][ T6995] ip_mr_forward+0x24c/0xf90 [ 151.082691][ T6995] ipmr_mfc_add+0x23cc/0x2d40 [ 151.087352][ T6995] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 151.092266][ T6995] ? __lock_acquire+0x7d10/0x7d10 [ 151.097276][ T6995] ip_mroute_setsockopt+0xeaf/0x1250 [ 151.102540][ T6995] ? ipmr_rule_default+0x70/0x70 [ 151.107459][ T6995] ? __might_sleep+0xf0/0xf0 [ 151.112027][ T6995] ip_setsockopt+0x568/0x3130 [ 151.116685][ T6995] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 151.122029][ T6995] ? aa_sk_perm+0x7dc/0x910 [ 151.126517][ T6995] ? aa_af_perm+0x340/0x340 [ 151.130995][ T6995] ? __fget_files+0x40f/0x480 [ 151.135652][ T6995] ? aa_sock_opt_perm+0x74/0x100 [ 151.140566][ T6995] ? sock_common_setsockopt+0x32/0xb0 [ 151.145920][ T6995] ? raw_setsockopt+0xc5/0x180 [ 151.150663][ T6995] ? sock_common_recvmsg+0x1c0/0x1c0 [ 151.155922][ T6995] __sys_setsockopt+0x2bf/0x3d0 [ 151.160752][ T6995] __x64_sys_setsockopt+0xb1/0xc0 [ 151.165751][ T6995] do_syscall_64+0x4c/0xa0 [ 151.170146][ T6995] ? clear_bhb_loop+0x30/0x80 [ 151.174811][ T6995] ? clear_bhb_loop+0x30/0x80 [ 151.179481][ T6995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.185349][ T6995] RIP: 0033:0x7f3648fe5eb9 [ 151.189740][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.209321][ T6995] RSP: 002b:00007f36471ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.217713][ T6995] RAX: ffffffffffffffda RBX: 00007f3649261180 RCX: 00007f3648fe5eb9 [ 151.225671][ T6995] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 151.233650][ T6995] RBP: 00007f3649053c1f R08: 000000000000003c R09: 0000000000000000 [ 151.241602][ T6995] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 151.249554][ T6995] R13: 00007f3649261218 R14: 00007f3649261180 R15: 00007ffead8e18a8 [ 151.257514][ T6995] [ 151.261974][ T6995] [ 151.264484][ T6995] ============================= [ 151.269575][ T6995] WARNING: suspicious RCU usage [ 151.274618][ T6995] syzkaller #0 Not tainted [ 151.279032][ T6995] ----------------------------- [ 151.283991][ T6995] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 151.292667][ T6995] [ 151.292667][ T6995] other info that might help us debug this: [ 151.292667][ T6995] [ 151.302996][ T6995] [ 151.302996][ T6995] rcu_scheduler_active = 2, debug_locks = 1 [ 151.311140][ T6995] 1 lock held by syz.4.803/6995: [ 151.316137][ T6995] #0: ffffffff8d43c548 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 151.326026][ T6995] [ 151.326026][ T6995] stack backtrace: [ 151.331901][ T6995] CPU: 1 PID: 6995 Comm: syz.4.803 Not tainted syzkaller #0 [ 151.339162][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 151.349211][ T6995] Call Trace: [ 151.352472][ T6995] [ 151.355384][ T6995] dump_stack_lvl+0x188/0x250 [ 151.360047][ T6995] ? load_image+0x400/0x400 [ 151.364532][ T6995] ? show_regs_print_info+0x20/0x20 [ 151.369714][ T6995] ? lockdep_rcu_suspicious+0x110/0x180 [ 151.375256][ T6995] ? local_bh_enable+0x20/0x20 [ 151.380014][ T6995] rhltable_lookup+0x61e/0x7c0 [ 151.384775][ T6995] ? local_bh_enable+0x20/0x20 [ 151.389556][ T6995] ? mr_mfc_find_parent+0x190/0x190 [ 151.394738][ T6995] ? mark_lock+0x94/0x320 [ 151.399068][ T6995] ? local_bh_enable+0x20/0x20 [ 151.403815][ T6995] ? mark_lock+0x94/0x320 [ 151.408137][ T6995] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 151.414096][ T6995] ? lock_chain_count+0x20/0x20 [ 151.418923][ T6995] mr_mfc_find_any_parent+0xb6/0x1e0 [ 151.424186][ T6995] ? local_bh_enable+0x20/0x20 [ 151.428934][ T6995] ip_mr_forward+0x24c/0xf90 [ 151.433505][ T6995] ipmr_mfc_add+0x23cc/0x2d40 [ 151.438179][ T6995] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 151.443118][ T6995] ? __lock_acquire+0x7d10/0x7d10 [ 151.448132][ T6995] ip_mroute_setsockopt+0xeaf/0x1250 [ 151.453399][ T6995] ? ipmr_rule_default+0x70/0x70 [ 151.458335][ T6995] ? __might_sleep+0xf0/0xf0 [ 151.462903][ T6995] ip_setsockopt+0x568/0x3130 [ 151.467568][ T6995] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 151.472917][ T6995] ? aa_sk_perm+0x7dc/0x910 [ 151.477406][ T6995] ? aa_af_perm+0x340/0x340 [ 151.481892][ T6995] ? __fget_files+0x40f/0x480 [ 151.486557][ T6995] ? aa_sock_opt_perm+0x74/0x100 [ 151.491493][ T6995] ? sock_common_setsockopt+0x32/0xb0 [ 151.496846][ T6995] ? raw_setsockopt+0xc5/0x180 [ 151.501586][ T6995] ? sock_common_recvmsg+0x1c0/0x1c0 [ 151.506854][ T6995] __sys_setsockopt+0x2bf/0x3d0 [ 151.511688][ T6995] __x64_sys_setsockopt+0xb1/0xc0 [ 151.516696][ T6995] do_syscall_64+0x4c/0xa0 [ 151.521092][ T6995] ? clear_bhb_loop+0x30/0x80 [ 151.525745][ T6995] ? clear_bhb_loop+0x30/0x80 [ 151.530414][ T6995] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 151.536285][ T6995] RIP: 0033:0x7f3648fe5eb9 [ 151.540698][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.560374][ T6995] RSP: 002b:00007f36471ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.568802][ T6995] RAX: ffffffffffffffda RBX: 00007f3649261180 RCX: 00007f3648fe5eb9 [ 151.576845][ T6995] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 151.584801][ T6995] RBP: 00007f3649053c1f R08: 000000000000003c R09: 0000000000000000 [ 151.592770][ T6995] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 151.600721][ T6995] R13: 00007f3649261218 R14: 00007f3649261180 R15: 00007ffead8e18a8 [ 151.608685][ T6995] [ 151.665625][ T6983] bond0: (slave syz_tun): Releasing backup interface [ 151.914134][ T4189] syz-executor (4189) used greatest stack depth: 20080 bytes left [ 152.356696][ T4535] device hsr_slave_0 left promiscuous mode [ 152.363280][ T4535] device hsr_slave_1 left promiscuous mode [ 152.376507][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.385644][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.394291][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.401965][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.410854][ T4535] device bridge_slave_1 left promiscuous mode [ 152.419608][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.429584][ T4535] device bridge_slave_0 left promiscuous mode [ 152.436084][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.467277][ T4535] device veth1_macvtap left promiscuous mode [ 152.473683][ T4535] device veth0_macvtap left promiscuous mode [ 152.480655][ T4535] device veth1_vlan left promiscuous mode [ 152.486903][ T4535] device veth0_vlan left promiscuous mode [ 152.609243][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 152.622506][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 152.636196][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.648665][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.700651][ T4535] bond0 (unregistering): Released all slaves [ 154.268959][ T4535] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.320300][ T4535] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.379153][ T4535] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.431371][ T4535] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.551718][ T4535] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.609827][ T4535] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.653462][ T4535] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.720547][ T4535] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.457621][ T4535] tipc: Disabling bearer [ 155.464405][ T4535] tipc: Left network mode [ 155.504282][ T4535] tipc: Left network mode [ 155.522225][ T4535] tipc: Left network mode [ 155.740921][ T4535] bond3: (slave ip6gretap1): Releasing backup interface [ 156.824688][ T4535] device hsr_slave_0 left promiscuous mode [ 156.830897][ T4535] device hsr_slave_1 left promiscuous mode [ 156.837245][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.844872][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.852421][ T4535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.860025][ T4535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.867569][ T4535] device bridge_slave_1 left promiscuous mode [ 156.873718][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.881688][ T4535] device bridge_slave_0 left promiscuous mode [ 156.888181][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.897701][ T4535] device bridge_slave_1 left promiscuous mode [ 156.904001][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.911758][ T4535] device bridge_slave_0 left promiscuous mode [ 156.918138][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.929250][ T4535] device hsr_slave_0 left promiscuous mode [ 156.935740][ T4535] device hsr_slave_1 left promiscuous mode [ 156.942479][ T4535] device bridge_slave_1 left promiscuous mode [ 156.948695][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.957901][ T4535] device bridge_slave_0 left promiscuous mode [ 156.964189][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.976182][ T4535] device hsr_slave_0 left promiscuous mode [ 156.982338][ T4535] device hsr_slave_1 left promiscuous mode [ 156.988607][ T4535] device bridge_slave_1 left promiscuous mode [ 156.994858][ T4535] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.002740][ T4535] device bridge_slave_0 left promiscuous mode [ 157.009289][ T4535] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.031420][ T4535] device hsr_slave_0 left promiscuous mode [ 157.038989][ T4535] device hsr_slave_1 left promiscuous mode [ 157.045638][ T4535] batman_adv: batadv0: Removing interface: dummy0 [ 157.058081][ T4535] device veth1_macvtap left promiscuous mode [ 157.064143][ T4535] device veth0_macvtap left promiscuous mode [ 157.070187][ T4535] device veth1_vlan left promiscuous mode [ 157.077237][ T4535] device veth0_vlan left promiscuous mode [ 157.083689][ T4535] device veth1_macvtap left promiscuous mode [ 157.090136][ T4535] device veth0_macvtap left promiscuous mode [ 157.096510][ T4535] device veth1_vlan left promiscuous mode [ 157.102269][ T4535] device veth0_vlan left promiscuous mode [ 157.210236][ T4535] bond2 (unregistering): Released all slaves [ 157.346211][ T4535] bond1 (unregistering): (slave bridge2): Releasing active interface [ 157.397129][ T4535] bond1 (unregistering): Released all slaves [ 157.504254][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 157.519157][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 157.530539][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.578557][ T4535] bond0 (unregistering): Released all slaves [ 157.615665][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.628763][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.676276][ T4535] bond0 (unregistering): Released all slaves [ 157.739635][ T4535] bond2 (unregistering): (slave bond3): Releasing backup interface [ 157.747815][ T4535] device bond3 left promiscuous mode [ 157.754490][ T4535] bond3 (unregistering): Released all slaves [ 157.764020][ T4535] bond2 (unregistering): Released all slaves [ 157.773601][ T4535] bond1 (unregistering): (slave geneve0): Releasing active interface [ 157.784745][ T4535] bond1 (unregistering): Released all slaves [ 157.842851][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 157.859888][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 157.871940][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.885965][ T4535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.931149][ T4535] bond0 (unregistering): Released all slaves [ 158.077475][ T4535] team0 (unregistering): Port device team_slave_1 removed [ 158.089851][ T4535] team0 (unregistering): Port device team_slave_0 removed [ 158.100930][ T4535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.114924][ T4535] bond0 (unregistering): (slave c0ÿ): Releasing backup interface [ 158.164135][ T4535] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 158.172633][ T4535] bond0 (unregistering): Released all slaves [ 158.243478][ T4535] bond4 (unregistering): (slave bond5): Releasing backup interface [ 158.252605][ T4535] bond5 (unregistering): Released all slaves [ 158.263432][ T4535] bond4 (unregistering): Released all slaves [ 158.317761][ T4535] bond3 (unregistering): Released all slaves [ 158.328227][ T4535] bond2 (unregistering): Released all slaves [ 158.377308][ T4535] bond1 (unregistering): (slave lo): Releasing backup interface [ 158.385567][ T4535] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 158.397267][ T4535] bond1 (unregistering): Released all slaves [ 158.506316][ T4535] bond0 (unregistering): Released all slaves