last executing test programs: 8m11.402045652s ago: executing program 32 (id=685): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024", @ANYBLOB="97b61e88553572fd2efdef5bcdc603f5cf17a49bf1d8457078ace3df30c7c941b1103b86953f4b1b43816a58622af5d511ff04c37a8893dc5ea494888e218c88326783f69ee710da511f74fe812d33a93825fb7eb8eca7196d483f5689286f28bf447eca9c6676aad40948ce1a2154e82ce6ecb85f76965d75d05e46"], 0xfe, 0x2ce, &(0x7f00000008c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) 8m11.288251848s ago: executing program 33 (id=686): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000000c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@noquota}]}, 0x1, 0x440, &(0x7f0000000780)="$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") sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 7m22.549624912s ago: executing program 34 (id=846): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x2005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)="42ec", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000002080)="9f", 0x1}], 0x1}}], 0x2, 0x48045) 4m4.377394785s ago: executing program 7 (id=1908): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 4m3.324063999s ago: executing program 6 (id=1918): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f17", 0x69, 0x840, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d3427", 0x10}, {0x0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m2.881839952s ago: executing program 6 (id=1922): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x280, 0x1000, 0x0, 0x1, 0x0, {0x0, 0x9}, {0x350, 0x20002, 0xfffffffd}, {0xf4ef}, {0x4, 0x0, 0x7fe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x4}) 4m2.72363338s ago: executing program 7 (id=1923): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 4m2.682920232s ago: executing program 6 (id=1924): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)}], 0x2}, 0x5) 4m2.295198292s ago: executing program 6 (id=1926): r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000e75f9208c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300001007c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4008c001, 0x0) 4m2.186197478s ago: executing program 0 (id=1927): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2], 0x44}}, 0x2000800) 4m2.185827207s ago: executing program 7 (id=1928): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 4m2.038802845s ago: executing program 7 (id=1929): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m1.781138279s ago: executing program 0 (id=1930): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @empty}, {0x2, 0x4000, @multicast2}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xa4, 0x0, 0x0, 0x0, 0x404, 0x0, 0x4, 0x0, 0x1}) 4m1.691745854s ago: executing program 7 (id=1931): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)={0x0, 0x3e, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000280)={0x20, 0x0, 0x5, "b48c15160c"}, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x7f}}) 4m1.691234503s ago: executing program 0 (id=1933): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pipe(&(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) 3m59.905719845s ago: executing program 0 (id=1938): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703010000001f00000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a36", 0x40}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3m59.111811746s ago: executing program 6 (id=1939): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x4780, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x1cf) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.stat\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x8000, 0x44, 0x18}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 3m59.012426032s ago: executing program 6 (id=1940): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2], 0x44}}, 0x2000800) 3m58.687589048s ago: executing program 7 (id=1941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m57.68373539s ago: executing program 0 (id=1942): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 3m57.617211823s ago: executing program 0 (id=1943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x3f, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x3, 0x5}, {0x60000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0xd000, 0xf, 0x3, 0x12, 0x7, 0x4, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0x200000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x0, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x31, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m44.572377236s ago: executing program 35 (id=1936): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000f00)=@newtfilter={0x94, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_ife={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x4, 0xa, 0x3}, 0x1}}, @TCA_IFE_METALST={0x10, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x224f}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x94}}, 0x800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 3m44.482833431s ago: executing program 36 (id=1937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8064}, 0x20040084) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0xf}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x14) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)}], 0x2}, 0x5) 3m43.13943975s ago: executing program 37 (id=1940): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x803, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2], 0x44}}, 0x2000800) 3m43.016231076s ago: executing program 38 (id=1941): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m41.571871461s ago: executing program 39 (id=1943): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x3, 0x200000180, 0x2, 0x29, 0xf1, 0x100000001, 0x10, 0x5, 0x0, 0x29, 0x0, 0x3, 0x9, 0xbd9], 0x9000, 0x4f100}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x3, 0x6, 0x4, 0x200000000000043, 0x2000004, 0x0, 0x2004cb, 0x0, 0xa7c, 0x9, 0x20000008, 0x8000000009, 0x803, 0x0, 0x9, 0x9], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee3001, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x80}, {0x5000, 0x33000, 0x3, 0x0, 0x3f, 0x5, 0x75, 0x6, 0x36, 0xd, 0x6, 0x89}, {0x0, 0x9000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x3, 0x5}, {0x60000, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0x0, 0x8, 0x7, 0xe}, {0x1, 0xd000, 0xf, 0x3, 0x12, 0x7, 0x4, 0x8, 0x6, 0x9, 0xf7, 0x97}, {0x200000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x0, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xdddd0000, 0x4000, 0xa, 0x5, 0xcd, 0x31, 0xff, 0x9, 0x2, 0x2c, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0xf000, 0x7}, 0x80000021, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x6800000000000000, 0x5, 0x2, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m8.883828042s ago: executing program 9 (id=2127): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x20, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f8035", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m7.76356809s ago: executing program 9 (id=2131): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca20000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000300), &(0x7f0000000280)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x49, &(0x7f0000000400)=ANY=[], 0x0) 2m7.491484024s ago: executing program 9 (id=2134): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x208240, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0x12, 0x4, 0x0, 0x0) 2m5.791744231s ago: executing program 9 (id=2138): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0xffff, 0x8}, {0x2}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c00090008"], 0x4c}}, 0x40000) 2m3.936150887s ago: executing program 9 (id=2140): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f17", 0x69, 0x840, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d3427", 0x10}, {0x0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m3.171663296s ago: executing program 9 (id=2143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) rmdir(0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000700)=""/246, &(0x7f0000000800)=0xf6) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000002280)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x9, 0x1, 0xffff0001, 0x10001, 0x4, 0x7a, 0x5, 0x0, 0x6, 0x88, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x49d, 0xa94, 0xabe, 0x1, 0x6, 0x6, 0x101, 0x0, 0x5d, 0x73f9d07d, 0x2, 0xd96, 0x0, 0x7, 0x0, 0xd9ea, 0x7, 0x1, 0x80000001, 0x1, 0x5, 0x1, 0x2, 0x9, 0x7330, 0x6, 0xc9b, 0x0, 0x7fff, 0x73, 0x6, 0x9, 0x5, 0xffff, 0x6, 0x4, 0x1, 0xdd, 0x6, 0xef83, 0x564c, 0x0, 0x6, 0x5, 0x1, 0x4, 0x4, 0xf, 0x9b9a, 0x308, 0x100, 0x5, 0x4, 0x8, 0x10, 0x8, 0xa, 0x1, 0x4, 0x0, 0x1, 0x100, 0x5, 0x1000, 0x6, 0x6, 0x7, 0xec, 0x1, 0xb2d9, 0x7, 0xd, 0x6, 0x7, 0x8341, 0x49, 0x8, 0x4, 0x4, 0x5, 0x1442, 0x40, 0x7, 0x200, 0x7fffffff, 0x1, 0x4f, 0x8, 0xfffffffb, 0x5, 0x8002, 0x0, 0x3, 0xc4, 0xfffffc01, 0x2, 0x2, 0x80000000, 0x400, 0xb, 0x0, 0xc2, 0xffffffff, 0x1, 0x3, 0x6, 0x80000001, 0x6, 0x6, 0x80, 0x3, 0x4]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 1m46.964821513s ago: executing program 40 (id=2143): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpgid(0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) rmdir(0x0) getsockopt$sock_buf(r2, 0x1, 0x1f, &(0x7f0000000700)=""/246, &(0x7f0000000800)=0xf6) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x80c406, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/895, @ANYRES8, @ANYBLOB="3314f54e5fd2edf68f060b6dc46e6726b43f6ee9ddde462c40e60f24007b2bab9e62e0cb8f8765d8cbe7f5463bcb92c74efb73ef0f526fe4056777ed73b012c79f7de0f43b0840ffd77dc59c2f080b4e37bbf7b0a7c58486ec28cc997fb50b582ce980b04cde0666cb1514340a36a20c20bc6ec73af2f34d53b12df083d642b8e66055ff69d88264abb6d6922fb288698e8bb5728002858a45c8"], 0x1, 0x2b1, &(0x7f0000000100)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCL_SETVESABLANK(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000cc0)={'lo\x00', &(0x7f0000002280)=@ethtool_per_queue_op={0x4b, 0xf, [0x6, 0x9, 0x1, 0xffff0001, 0x10001, 0x4, 0x7a, 0x5, 0x0, 0x6, 0x88, 0x80000000, 0x10000, 0x6, 0x5, 0x8, 0x49d, 0xa94, 0xabe, 0x1, 0x6, 0x6, 0x101, 0x0, 0x5d, 0x73f9d07d, 0x2, 0xd96, 0x0, 0x7, 0x0, 0xd9ea, 0x7, 0x1, 0x80000001, 0x1, 0x5, 0x1, 0x2, 0x9, 0x7330, 0x6, 0xc9b, 0x0, 0x7fff, 0x73, 0x6, 0x9, 0x5, 0xffff, 0x6, 0x4, 0x1, 0xdd, 0x6, 0xef83, 0x564c, 0x0, 0x6, 0x5, 0x1, 0x4, 0x4, 0xf, 0x9b9a, 0x308, 0x100, 0x5, 0x4, 0x8, 0x10, 0x8, 0xa, 0x1, 0x4, 0x0, 0x1, 0x100, 0x5, 0x1000, 0x6, 0x6, 0x7, 0xec, 0x1, 0xb2d9, 0x7, 0xd, 0x6, 0x7, 0x8341, 0x49, 0x8, 0x4, 0x4, 0x5, 0x1442, 0x40, 0x7, 0x200, 0x7fffffff, 0x1, 0x4f, 0x8, 0xfffffffb, 0x5, 0x8002, 0x0, 0x3, 0xc4, 0xfffffc01, 0x2, 0x2, 0x80000000, 0x400, 0xb, 0x0, 0xc2, 0xffffffff, 0x1, 0x3, 0x6, 0x80000001, 0x6, 0x6, 0x80, 0x3, 0x4]}}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) 38.611449339s ago: executing program 8 (id=2555): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 38.533476592s ago: executing program 8 (id=2556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0xc2224000) prctl$PR_GET_NAME(0x10, &(0x7f0000000000)=""/100) 38.239802597s ago: executing program 8 (id=2557): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x11, 0x2}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@local, @empty, 0xff000000, 0xff, 'pim6reg0\x00', 'macsec0\x00', {0xff}, {}, 0x0, 0x0, 0x68}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1b, 0x800, 0xd, 0x7, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10008, &(0x7f0000000000)={[{@debug}, {@nogrpid}]}, 0xff, 0x49e, &(0x7f0000000f40)="$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") sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) 37.347642483s ago: executing program 8 (id=2558): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 37.041339339s ago: executing program 8 (id=2559): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000004c0)=""/217, 0xd9}], 0x1) syz_emit_ethernet(0x18, &(0x7f0000000780)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x2}}, {@mpls_mc={0x8848, {[], @generic="0e9e51d04d34"}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 36.443300251s ago: executing program 8 (id=2565): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x40, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40) 36.097546028s ago: executing program 41 (id=2565): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x40, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40001}, 0x40) 6.770772351s ago: executing program 4 (id=2763): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000400)) 6.673267226s ago: executing program 4 (id=2765): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) fcntl$addseals(r0, 0x409, 0x6) 6.447751107s ago: executing program 4 (id=2766): r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0xd0, 0x4, "", [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x2d}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x1, 0x10}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x4, 0x25, 0x10}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9e, {0xfffffffffffffe8b}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.149033453s ago: executing program 1 (id=2770): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x400080, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xc000}}) 5.872532167s ago: executing program 1 (id=2774): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x400000000000003, 0x40, 0x42}, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 5.727615454s ago: executing program 1 (id=2776): r0 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x21b4, 0x81, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x22, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x77, 0x3, 0xc0, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x40, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.760861916s ago: executing program 4 (id=2782): r0 = fsopen(&(0x7f0000000300)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.controllers\x00', 0x300, 0x0) read$FUSE(r2, &(0x7f0000000400)={0x2020}, 0x207f) 3.187348515s ago: executing program 2 (id=2787): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b02", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000e80)={0x14, 0x0, 0x0}, &(0x7f00000010c0)={0x44, &(0x7f0000000ec0)={0x40, 0x31, 0x13, "3f71353b158d8162f0ffae92d30c4b3aedf2c7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.599742386s ago: executing program 1 (id=2794): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = dup(r0) bind$802154_raw(r1, &(0x7f00000016c0)={0x27, @long={0x3, 0x3}}, 0x14) 2.599486306s ago: executing program 4 (id=2795): sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42", 0x66, 0x840, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd664af774c32d3427", 0x10}, {0x0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}}) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.599365406s ago: executing program 5 (id=2796): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f0000000040)) 2.497540921s ago: executing program 1 (id=2798): mknod$loop(0x0, 0x6000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfff2) sched_setscheduler(0x0, 0x5, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) readlink(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_getres(0x97f489cd154b7916, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_cmd={0xe, 0x1001, 0x7fff, 0x0, 0x3, 0x4, 0x41, 0x5, 0x8, 0x6, 0x7, 0x4, 0xfff3, 0x80, 0x84, 0x7f, [0x7fffffff, 0x4]}}) r4 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$link(0x8, r4, r4) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000002f40), 0xfc, 0x56f, &(0x7f0000003780)="$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") r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6(0xa, 0x800, 0x7) creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x164) 2.413297575s ago: executing program 5 (id=2799): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0x0, 0x0, 0x180, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x0, 0x200000, 0x7, 0xfffffffffffffffd}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 2.412758365s ago: executing program 2 (id=2800): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000280)={0x19, 0x0, 0x6, 0x2013, 0xa, 0x100, 0x2, 0x87, 0xffffffffffffffff}) 2.163534888s ago: executing program 5 (id=2802): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) 1.051271206s ago: executing program 3 (id=2803): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@cr4={0x1, 0x2069e2}], 0x1) 1.051164166s ago: executing program 2 (id=2804): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_POISON(r0, 0xc020aa08, &(0x7f0000001740)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 770.47349ms ago: executing program 3 (id=2805): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 770.30098ms ago: executing program 2 (id=2806): syz_usb_connect$uac3(0x5, 0xaf, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x2, 0x0, 0x40, 0x7fd, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x7f, 0x0, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x20, 0x30, 0x23}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x17, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x5, {0xa, 0x25, 0x25, 0xf, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x74, 0x29, 0xc2, {0xa, 0x25, 0x25, 0x7fffffff, 0x1, 0xbe1}}}}}}}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) 770.22482ms ago: executing program 3 (id=2807): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x14, 0x301, 0x70bd2d, 0x25dfdbfc, {0xa}}, 0x14}}, 0x0) 770.16879ms ago: executing program 5 (id=2808): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_SCRUB_METADATA(r0, 0xc040583c, 0x0) 740.464252ms ago: executing program 3 (id=2809): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x20, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_BYTES={0xc}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 702.295753ms ago: executing program 4 (id=2810): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r0 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000204f045db600000000000109022d00010000600209040010050300010009210000360122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 487.713575ms ago: executing program 5 (id=2811): r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[]) socket$nl_generic(0x10, 0x3, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 477.708765ms ago: executing program 3 (id=2812): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 351.269692ms ago: executing program 2 (id=2813): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f00000000c0)=0x7) 292.491055ms ago: executing program 3 (id=2814): r0 = syz_usb_connect$uac1(0x0, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x200c, 0x100b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x3, 0xa0, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0x0, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x3, 0x3, 0x10, {0x7, 0x25, 0x1, 0xc, 0x8, 0x3ff}}}}}}}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000700)={0x14, 0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0003c2000000c203"]}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000001a80)={0x14, 0x0, &(0x7f00000019c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000001f80)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x25, @string={0x25, 0x3, "96780110e9950b1b3439ce8f682b3870efd638d736a22487ebcecab123b077d62c5188"}}, 0x0, 0x0, 0x0}, 0x0) 187.74115ms ago: executing program 2 (id=2815): syz_usb_connect$uac2(0x0, 0x85, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x582, 0x25, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x73, 0x3, 0x1, 0x9, 0x0, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x9, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x20, 0x5, 0x13, 0xfc}, [@selector_unit={0x5, 0x24, 0xb, 0xcd}, @selector_unit={0x5, 0x24, 0xb, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x4, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0x1, 0x8f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x6, 0x8, 0x5, {0x8, 0x25, 0x1, 0x80, 0x0, 0xf6, 0x2}}}}}}}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 97.123805ms ago: executing program 1 (id=2816): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x9, 0x6, 0x400, 0x3ff, 0x89, 0x0, 0x3, 0x8d], 0x100000, 0x2c08c6}) prlimit64(0x0, 0xd, &(0x7f0000000040)={0x0, 0x100}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 5 (id=2817): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) r4 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000080)={r3, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): [ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 503.643978][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 503.653525][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 503.662705][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 503.701848][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 503.712100][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 503.724171][T11503] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 503.915971][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 503.955141][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 503.980066][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.045725][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.066666][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.084151][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.093914][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.116892][T11505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.156859][T11505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.202268][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.212470][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.341617][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.349494][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.476004][ T6792] Bluetooth: hci8: command 0x0419 tx timeout [ 504.529112][T11503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.808153][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.818285][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.860123][T11505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.973315][T11521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.143130][T11521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.196222][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.205876][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.297050][T11521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.376813][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.388693][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.405442][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.414309][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 505.468166][T11521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.522351][T11503] device veth0_vlan entered promiscuous mode [ 505.546023][T11503] device veth1_vlan entered promiscuous mode [ 505.592659][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.611749][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 505.621052][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.661309][T11505] device veth0_vlan entered promiscuous mode [ 505.680872][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.689464][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.719481][T11505] device veth1_vlan entered promiscuous mode [ 505.738571][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.751452][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 505.774210][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 505.816795][T11503] device veth0_macvtap entered promiscuous mode [ 505.949423][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 505.966434][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 505.980241][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.001652][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.026648][T11503] device veth1_macvtap entered promiscuous mode [ 506.151646][T11505] device veth0_macvtap entered promiscuous mode [ 506.188767][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.211473][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 506.221891][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 506.273361][T11505] device veth1_macvtap entered promiscuous mode [ 506.283515][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 506.293388][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 506.302640][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.314440][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.325071][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.336044][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.346348][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.360629][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.370509][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.396187][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.407193][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.417936][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.442203][T11503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.603248][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 506.622073][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 506.643757][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.656186][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.666848][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.677811][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.688339][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.701621][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.711876][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.722742][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.733581][T11503] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.750588][T11503] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.773213][T11503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.847268][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.858856][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.869806][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.881492][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.891430][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.901986][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.913313][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.924062][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.935402][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.945966][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.956466][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.968491][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.981609][T11505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.998317][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 507.008359][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 507.017775][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 507.029021][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 507.041742][T11503] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.053256][T11503] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.062930][T11503] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.072675][T11503] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.097742][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.111456][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.122243][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.134689][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.144988][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.155764][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.167615][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.178455][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.189240][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.200822][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.211321][T11505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 507.222200][T11505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 507.234118][T11505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.253603][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 507.269526][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 507.293972][T11505] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.304735][T11505] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.314121][T11505] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.323342][T11505] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.546298][ T8918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.564117][ T8918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.584032][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 507.651253][ T8918] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.659249][ T8918] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.694279][ T8935] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.731494][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 507.759925][ T8918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.779282][ T8918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.798475][ T8935] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.832752][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.848213][ T4496] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.869156][ T4496] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.878542][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 507.903216][ T8935] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.991919][ T8935] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.043471][T11657] No such timeout policy "syz1" [ 508.339416][ T8935] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.860382][ T8935] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.117851][ T8935] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.203688][ T8935] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.236739][T11671] loop8: detected capacity change from 0 to 256 [ 509.310333][T11525] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.355572][T11525] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.394877][T11525] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.517979][T11521] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.562283][T11521] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.596967][T11521] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 509.654902][ T8935] tipc: Left network mode [ 509.656032][T11525] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.702967][T11521] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 509.724846][ T8935] tipc: Left network mode [ 509.788586][T11519] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 509.908968][T11519] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 509.937955][T11519] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 509.989656][T11519] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 510.147696][T11525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.164894][T11521] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.208867][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.225207][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.255860][T11525] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.294371][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.305257][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.317212][T11521] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.333151][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.344097][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.353273][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.360414][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.392667][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.406894][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.418306][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.428295][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.438016][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.445172][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.455795][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.464901][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.475967][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.483220][ T4496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.600125][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.692688][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.712209][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.741696][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 510.771897][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 510.789742][T11700] loop8: detected capacity change from 0 to 8192 [ 510.810940][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 510.823420][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.842919][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.863513][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.870907][ T4496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.888190][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.906666][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.915686][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.958023][T11707] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1958'. [ 511.055154][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1958'. [ 511.124754][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.139325][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.169636][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.212452][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.251748][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.270158][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.291827][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 511.306086][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 511.315205][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.322729][ T4496] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.336216][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.352072][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.371022][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.378154][ T4496] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.406274][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.415707][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.424653][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.453948][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.473041][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.515806][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.549612][T11503] FAT-fs (loop8): error, invalid access to FAT (entry 0x0000e1b1) [ 511.559053][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.591308][T11503] FAT-fs (loop8): Filesystem has been set read-only [ 511.601783][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.631164][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.661206][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.746703][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.781567][T11733] loop9: detected capacity change from 0 to 256 [ 511.811975][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.845303][T11736] loop8: detected capacity change from 0 to 128 [ 511.854308][T11521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.861370][T11733] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 511.881495][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.904993][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.937455][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.957663][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.957926][T11733] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 511.978214][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.015570][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.048416][T11519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 512.090652][T11733] FAT-fs (loop9): Filesystem has been set read-only [ 512.097403][T11519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 512.122850][T11525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.133543][T11733] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 512.152890][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.181034][T11733] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 512.183568][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 512.206071][ T26] audit: type=1800 audit(1776814860.017:18): pid=11733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1961" name="file1" dev="loop9" ino=1048641 res=0 errno=0 [ 512.245778][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 512.257940][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 512.267427][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 512.301499][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.469158][ T1276] attempt to access beyond end of device [ 512.469158][ T1276] loop8: rw=1, want=521, limit=128 [ 512.512547][ T1276] attempt to access beyond end of device [ 512.512547][ T1276] loop8: rw=1, want=1041, limit=128 [ 512.554587][ T1276] attempt to access beyond end of device [ 512.554587][ T1276] loop8: rw=1, want=529, limit=128 [ 512.677953][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.698029][ T4227] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 512.720960][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.785771][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.822339][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.830396][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.878241][T11525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.911107][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.922730][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.932768][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 512.960779][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 512.982915][T11521] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.040320][T11519] device veth0_vlan entered promiscuous mode [ 513.086928][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.102713][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.126273][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 513.146551][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.167052][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.186032][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.217245][T11519] device veth1_vlan entered promiscuous mode [ 513.226735][T11772] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1964'. [ 513.252334][T11776] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1964'. [ 513.311123][ T4227] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 513.320414][ T4227] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.331905][ T4227] usb 10-1: Product: syz [ 513.357761][ T4227] usb 10-1: Manufacturer: syz [ 513.371341][ T4227] usb 10-1: SerialNumber: syz [ 513.397577][ T4227] usb 10-1: config 0 descriptor?? [ 513.423836][ T8935] device hsr_slave_0 left promiscuous mode [ 513.438745][ T8935] device hsr_slave_1 left promiscuous mode [ 513.451579][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.459313][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.482436][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.490065][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.509757][ T8935] device bridge_slave_1 left promiscuous mode [ 513.518420][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.531974][ T8935] device bridge_slave_0 left promiscuous mode [ 513.538364][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.561515][ T8935] device hsr_slave_0 left promiscuous mode [ 513.568175][ T8935] device hsr_slave_1 left promiscuous mode [ 513.578130][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.591598][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.610948][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.618481][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.626895][ T8935] device bridge_slave_1 left promiscuous mode [ 513.636549][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.655711][ T8935] device bridge_slave_0 left promiscuous mode [ 513.671329][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.696985][ T4227] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 513.716437][ T8935] device veth1_macvtap left promiscuous mode [ 513.735987][ T8935] device veth0_macvtap left promiscuous mode [ 513.759686][ T8935] device veth1_vlan left promiscuous mode [ 513.768077][ T8935] device veth0_vlan left promiscuous mode [ 513.788659][ T8935] device veth1_macvtap left promiscuous mode [ 513.800678][ T8935] device veth0_macvtap left promiscuous mode [ 513.806939][ T8935] device veth1_vlan left promiscuous mode [ 513.825099][ T8935] device veth0_vlan left promiscuous mode [ 514.840239][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 514.858440][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 514.874876][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.894563][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.024886][ T8935] bond0 (unregistering): Released all slaves [ 515.532901][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 515.556195][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 515.574491][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 515.665221][ T8935] bond0 (unregistering): Released all slaves [ 515.730930][ T4227] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -71 [ 515.742637][ T4227] usb 10-1: USB disconnect, device number 2 [ 515.764308][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 515.780504][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 515.796230][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 515.807003][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 515.854505][T11525] device veth0_vlan entered promiscuous mode [ 515.874443][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 515.883286][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 515.899638][T11525] device veth1_vlan entered promiscuous mode [ 515.925365][T11519] device veth0_macvtap entered promiscuous mode [ 515.950451][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 515.981627][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.002128][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 516.020854][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.036434][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.055595][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.087490][T11521] device veth0_vlan entered promiscuous mode [ 516.118837][T11519] device veth1_macvtap entered promiscuous mode [ 516.136997][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 516.171484][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.190040][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 516.206114][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 516.244424][T11521] device veth1_vlan entered promiscuous mode [ 516.312510][T11834] Disabled LAPIC found during irq injection [ 516.312776][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 516.356587][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 516.387295][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 516.407665][T11829] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 516.417075][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 516.425154][T11829] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 516.436504][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 516.446990][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 516.484989][T11525] device veth0_macvtap entered promiscuous mode [ 516.502291][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.529536][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.550342][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.597018][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.617441][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.629256][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.641079][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.652695][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.663676][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 516.677443][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.690317][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 516.706374][T11525] device veth1_macvtap entered promiscuous mode [ 516.748685][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 516.758386][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 516.774528][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 516.790362][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 516.838661][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.856272][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.875501][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.908151][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.936926][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 516.966078][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 516.994833][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.016740][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.040385][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 517.060672][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.087377][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.113379][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 517.135541][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 517.192282][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 517.232853][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 517.284783][T11521] device veth0_macvtap entered promiscuous mode [ 517.305218][T11519] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.324548][T11519] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.344589][T11519] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.380597][T11519] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.454132][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.490676][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.540579][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.610650][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.630219][T11861] kvm: pic: single mode not supported [ 517.631500][T11861] kvm: pic: level sensitive irq not supported [ 517.650661][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.652701][T11861] kvm: pic: level sensitive irq not supported [ 517.657261][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.703547][T11861] kvm: pic: level sensitive irq not supported [ 517.740649][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.807219][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.849453][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.890077][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 517.929865][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 517.962975][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.003325][T11525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.035034][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 518.068793][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 518.103979][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 518.134182][T11521] device veth1_macvtap entered promiscuous mode [ 518.167451][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.213214][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.246500][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.280706][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.313669][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.369589][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.407197][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.448327][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.489274][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.530923][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.551964][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 518.580691][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.621742][T11525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.630369][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 518.665535][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 518.739184][T11525] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.787842][T11525] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.839562][T11525] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.853724][T11881] block device autoloading is deprecated and will be removed. [ 518.861001][T11525] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.903265][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 518.955084][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 518.987197][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.011333][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.041281][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.060576][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.088095][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.110082][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.132782][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.152543][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.172378][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.190915][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.212905][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.230701][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.259232][T11521] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.314623][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 519.331749][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 519.422021][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.463574][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.508955][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.540664][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.580641][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.610671][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.640633][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.651696][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.661890][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.676016][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.686580][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.710137][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.738224][T11521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.770624][T11521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.792442][T11521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.922839][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.938411][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.001474][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 520.015523][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 520.046808][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.239643][T11521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.256259][T11521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.267316][T11521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.276611][T11521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 520.341211][T11890] device syzkaller0 entered promiscuous mode [ 520.490822][ T6996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.540719][ T6996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.608785][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 520.633380][ T466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.667402][ T466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.724720][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.752115][ T4496] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.791094][ T4496] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.877886][ T6999] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 520.891270][ T8918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.899177][ T8918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.946922][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.973929][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 521.011395][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.032353][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 521.952835][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 521.963644][T11932] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1947'. [ 522.220914][T11943] netlink: 40 bytes leftover after parsing attributes in process `syz.8.1982'. [ 522.397318][T11952] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.472617][T11954] sch_tbf: burst 548 is lower than device syzkaller0 mtu (1500) ! [ 522.556715][T11956] device syzkaller0 entered promiscuous mode [ 522.899603][T11970] tipc: Started in network mode [ 522.935157][T11970] tipc: Node identity 8edd5215afd1, cluster identity 4711 [ 522.969057][T11970] tipc: Enabled bearer , priority 0 [ 523.010324][T11977] device syzkaller0 entered promiscuous mode [ 523.131156][T11970] tipc: Resetting bearer [ 523.201898][T11968] tipc: Resetting bearer [ 523.266606][T11968] tipc: Disabling bearer [ 523.314026][T11984] device syzkaller0 entered promiscuous mode [ 524.007991][T12007] loop2: detected capacity change from 0 to 1024 [ 524.191612][T12007] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 524.831937][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1996'. [ 525.081985][T12024] xt_hashlimit: size too large, truncated to 1048576 [ 525.749786][T12036] device syzkaller0 entered promiscuous mode [ 526.135075][T12046] loop1: detected capacity change from 0 to 128 [ 526.172478][T12045] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2000'. [ 526.595907][T12052] No such timeout policy "syz1" [ 526.852232][T12054] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2002'. [ 526.863921][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2002'. [ 527.354543][T12060] loop9: detected capacity change from 0 to 40427 [ 527.768862][T12060] F2FS-fs (loop9): invalid crc value [ 527.823896][T12060] F2FS-fs (loop9): Found nat_bits in checkpoint [ 527.888572][T12060] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 528.091962][T12069] tipc: Started in network mode [ 528.124362][T12069] tipc: Node identity da6b71f00c9a, cluster identity 4711 [ 528.205046][T12069] tipc: Enabled bearer , priority 0 [ 528.251357][T12072] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 528.908868][T12070] device syzkaller0 entered promiscuous mode [ 529.181357][T12068] tipc: Resetting bearer [ 529.187666][T11505] attempt to access beyond end of device [ 529.187666][T11505] loop9: rw=2049, want=45104, limit=40427 [ 529.249302][T12068] tipc: Disabling bearer [ 530.880759][T12094] device syzkaller0 entered promiscuous mode [ 531.018051][T12095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2008'. [ 531.064033][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2008'. [ 531.385210][T12107] device syzkaller0 entered promiscuous mode [ 531.522304][T12111] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2012'. [ 531.674469][ T8935] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.754497][T12119] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2014'. [ 531.798099][ T8935] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.902333][T12116] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2014'. [ 532.314622][ T8935] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.936155][ T8935] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.011234][T12130] tipc: Enabled bearer , priority 0 [ 533.044535][T12131] device syzkaller0 entered promiscuous mode [ 533.114072][T12127] tipc: Resetting bearer [ 533.172936][T12126] tipc: Resetting bearer [ 533.237605][T12126] tipc: Disabling bearer [ 533.520695][ T8935] tipc: Left network mode [ 533.566022][T12136] loop2: detected capacity change from 0 to 1024 [ 533.746053][T12141] loop1: detected capacity change from 0 to 40427 [ 533.796817][T12141] F2FS-fs (loop1): invalid crc value [ 533.889027][T12141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 533.943928][T12151] loop9: detected capacity change from 0 to 128 [ 534.047873][T12141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 534.395972][T12136] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 534.468329][T12158] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 535.836495][T12173] device syzkaller0 entered promiscuous mode [ 536.317847][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2020'. [ 536.411909][T12184] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2020'. [ 537.028150][T12197] device syzkaller0 entered promiscuous mode [ 537.152805][T12202] loop1: detected capacity change from 0 to 512 [ 537.247024][T12202] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 537.259885][T12205] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2024'. [ 537.331727][T12202] System zones: 1-12 [ 537.364921][T12202] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2025: missing EA_INODE flag [ 537.484561][T12202] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2025: error while reading EA inode 12 err=-117 [ 537.523372][T12219] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2026'. [ 537.534438][T12219] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2026'. [ 537.552946][T12202] EXT4-fs (loop1): 1 orphan inode deleted [ 537.583116][T12202] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 539.071001][ T8935] device hsr_slave_0 left promiscuous mode [ 539.077660][ T8935] device hsr_slave_1 left promiscuous mode [ 539.211831][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.219569][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.279520][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.293345][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.314344][ T8935] device bridge_slave_1 left promiscuous mode [ 539.338022][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.360248][ T8935] device bridge_slave_0 left promiscuous mode [ 539.370788][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.491787][ T8935] device veth1_macvtap left promiscuous mode [ 539.498015][ T8935] device veth0_macvtap left promiscuous mode [ 539.545615][ T8935] device veth1_vlan left promiscuous mode [ 539.565831][ T8935] device veth0_vlan left promiscuous mode [ 540.390448][T12245] loop1: detected capacity change from 0 to 40427 [ 540.438237][T12245] F2FS-fs (loop1): invalid crc value [ 540.462954][T12245] F2FS-fs (loop1): Found nat_bits in checkpoint [ 540.608187][T12245] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 541.673243][T11521] attempt to access beyond end of device [ 541.673243][T11521] loop1: rw=2049, want=45104, limit=40427 [ 541.891466][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 541.924860][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 542.300812][T12234] device syzkaller0 entered promiscuous mode [ 543.214412][T12286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2035'. [ 544.433009][T12302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2038'. [ 544.995153][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2040'. [ 545.017325][T12323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2040'. [ 545.925427][T12326] loop1: detected capacity change from 0 to 512 [ 546.027058][T12326] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 546.095940][T12326] System zones: 1-12 [ 546.172412][T12331] tipc: Started in network mode [ 546.183207][T12331] tipc: Node identity 229d498dd8dc, cluster identity 4711 [ 546.201013][T12331] tipc: Enabled bearer , priority 0 [ 546.208251][T12326] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2042: missing EA_INODE flag [ 546.250117][T12331] device syzkaller0 entered promiscuous mode [ 546.261891][T12326] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2042: error while reading EA inode 12 err=-117 [ 546.315723][T12326] EXT4-fs (loop1): 1 orphan inode deleted [ 546.331220][T12331] tipc: Resetting bearer [ 546.340647][T12326] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 546.382524][T12330] tipc: Resetting bearer [ 546.614316][T12330] tipc: Disabling bearer [ 547.581340][T12347] device syzkaller0 entered promiscuous mode [ 547.866056][T12353] device syzkaller0 entered promiscuous mode [ 548.876451][T12381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2052'. [ 549.122924][T12341] loop8: detected capacity change from 0 to 40427 [ 549.266515][T12341] F2FS-fs (loop8): invalid crc value [ 549.541613][T12341] F2FS-fs (loop8): Found nat_bits in checkpoint [ 550.643569][T12400] tipc: Started in network mode [ 550.648701][T12400] tipc: Node identity 86bca5e1dd7e, cluster identity 4711 [ 550.758472][T12400] tipc: Enabled bearer , priority 0 [ 550.802159][T12404] device syzkaller0 entered promiscuous mode [ 550.899183][T12400] tipc: Resetting bearer [ 551.004331][T12399] tipc: Resetting bearer [ 551.091696][T12399] tipc: Disabling bearer [ 551.276360][T12414] loop8: detected capacity change from 0 to 512 [ 551.491720][T12414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 551.509723][T12414] System zones: 1-12 [ 551.570897][T12414] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2056: missing EA_INODE flag [ 551.589839][T12414] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2056: error while reading EA inode 12 err=-117 [ 551.603655][T12414] EXT4-fs (loop8): 1 orphan inode deleted [ 551.609538][T12414] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 551.825411][T12429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2058'. [ 551.836708][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2058'. [ 552.391810][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2060'. [ 552.613398][T12436] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2060'. [ 553.841285][T12457] device syzkaller0 entered promiscuous mode [ 553.920893][T12462] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2064'. [ 554.069108][T12461] device syzkaller0 entered promiscuous mode [ 555.047937][ T8935] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.236955][T12478] tipc: Enabled bearer , priority 0 [ 555.284284][ T8935] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.353197][T12478] device syzkaller0 entered promiscuous mode [ 555.407116][ T8935] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.454253][T12478] tipc: Resetting bearer [ 555.478765][T12477] tipc: Resetting bearer [ 555.521662][T12477] tipc: Disabling bearer [ 555.603796][ T8935] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.965790][ T8935] tipc: Left network mode [ 556.426458][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2072'. [ 556.438138][T12508] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2072'. [ 556.466052][T12474] loop8: detected capacity change from 0 to 40427 [ 556.588939][T12474] F2FS-fs (loop8): invalid crc value [ 556.676484][T12474] F2FS-fs (loop8): Found nat_bits in checkpoint [ 557.009038][T12474] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 557.358975][T12525] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 558.160253][T12528] loop9: detected capacity change from 0 to 512 [ 558.220071][T11503] attempt to access beyond end of device [ 558.220071][T11503] loop8: rw=2049, want=45104, limit=40427 [ 558.308050][T12528] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 558.330953][T12531] device syzkaller0 entered promiscuous mode [ 558.376687][T12528] System zones: 1-12 [ 558.410835][T12528] EXT4-fs error (device loop9): ext4_xattr_inode_iget:401: inode #12: comm syz.9.2073: missing EA_INODE flag [ 558.510703][T12528] EXT4-fs error (device loop9): ext4_xattr_inode_iget:406: comm syz.9.2073: error while reading EA inode 12 err=-117 [ 558.571494][T12528] EXT4-fs (loop9): 1 orphan inode deleted [ 558.577577][T12528] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 559.217272][ T8935] device hsr_slave_0 left promiscuous mode [ 559.240939][ T8935] device hsr_slave_1 left promiscuous mode [ 559.283780][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.356726][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.411381][ T8935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.480907][ T8935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.523723][ T8935] device bridge_slave_1 left promiscuous mode [ 559.530298][ T8935] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.607185][ T8935] device bridge_slave_0 left promiscuous mode [ 559.628876][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.785727][ T8935] device veth1_macvtap left promiscuous mode [ 559.799207][ T8935] device veth0_macvtap left promiscuous mode [ 559.820698][ T8935] device veth1_vlan left promiscuous mode [ 559.826748][ T8935] device veth0_vlan left promiscuous mode [ 560.763252][ T8935] bond1 (unregistering): (slave geneve2): Releasing active interface [ 560.804307][ T8935] bond1 (unregistering): Released all slaves [ 561.509494][ T8935] team0 (unregistering): Port device team_slave_1 removed [ 561.533201][ T8935] team0 (unregistering): Port device team_slave_0 removed [ 561.550968][ T8935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.577032][ T8935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.689040][ T8935] bond0 (unregistering): Released all slaves [ 561.737902][T12551] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2076'. [ 562.049621][T12589] tipc: Enabled bearer , priority 0 [ 562.107558][T12587] device syzkaller0 entered promiscuous mode [ 562.120045][T12586] tipc: Resetting bearer [ 562.158720][T12586] tipc: Disabling bearer [ 562.964337][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.130763][T12608] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2082'. [ 563.200643][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2084'. [ 563.209856][T12616] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2084'. [ 563.370290][T12622] loop3: detected capacity change from 0 to 512 [ 563.448547][T12622] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 563.495667][T12622] System zones: 1-12 [ 563.520757][T12622] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.2086: missing EA_INODE flag [ 563.541849][T12622] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2086: error while reading EA inode 12 err=-117 [ 563.588411][T12622] EXT4-fs (loop3): 1 orphan inode deleted [ 563.613125][T12622] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 564.576379][T12642] device syzkaller0 entered promiscuous mode [ 566.110211][T12657] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2091'. [ 566.364815][T12662] loop1: detected capacity change from 0 to 1024 [ 566.379940][T12663] device syzkaller0 entered promiscuous mode [ 566.482679][T12665] tipc: Enabled bearer , priority 0 [ 566.502424][T12665] device syzkaller0 entered promiscuous mode [ 566.607217][T12662] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 566.650239][T12664] tipc: Resetting bearer [ 566.862477][T12664] tipc: Disabling bearer [ 567.086634][T12647] loop3: detected capacity change from 0 to 40427 [ 567.216752][T12647] F2FS-fs (loop3): invalid crc value [ 567.819382][T12647] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 568.092711][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 568.105544][T12698] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2097'. [ 568.484993][T12710] device syzkaller0 entered promiscuous mode [ 568.830493][T12717] loop3: detected capacity change from 0 to 512 [ 568.903382][T12719] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2102'. [ 568.995649][T12717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 569.011192][T12717] System zones: 1-12 [ 569.040449][T12717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.2101: missing EA_INODE flag [ 569.053722][T12717] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2101: error while reading EA inode 12 err=-117 [ 569.068696][T12717] EXT4-fs (loop3): 1 orphan inode deleted [ 569.138243][T12717] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 569.417382][T12732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2103'. [ 570.272205][T12743] loop8: detected capacity change from 0 to 128 [ 570.379289][T12747] tipc: Started in network mode [ 570.394797][T12747] tipc: Node identity 4e30a1ad2b5, cluster identity 4711 [ 570.415168][T12747] tipc: Enabled bearer , priority 0 [ 570.472526][T12750] device syzkaller0 entered promiscuous mode [ 571.429914][ T4228] tipc: Node number set to 1700831661 [ 571.478218][T12746] tipc: Resetting bearer [ 571.590214][T12746] tipc: Disabling bearer [ 573.231386][T12772] device syzkaller0 entered promiscuous mode [ 573.584894][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2112'. [ 573.596652][T12782] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2112'. [ 573.618208][T12779] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2113'. [ 573.787532][T12754] loop9: detected capacity change from 0 to 40427 [ 573.886601][T12754] F2FS-fs (loop9): invalid crc value [ 573.941847][T12754] F2FS-fs (loop9): Found nat_bits in checkpoint [ 574.109285][T12754] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 574.889205][T12812] loop2: detected capacity change from 0 to 512 [ 574.964822][T12812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 575.004899][T12812] System zones: 1-12 [ 575.028027][T12812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.2117: missing EA_INODE flag [ 575.106813][T12812] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2117: error while reading EA inode 12 err=-117 [ 575.181076][T12812] EXT4-fs (loop2): 1 orphan inode deleted [ 575.187013][T12812] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 576.044576][T12827] device syzkaller0 entered promiscuous mode [ 578.578439][T12859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2123'. [ 578.811485][T12863] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2124'. [ 579.067890][T12876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2126'. [ 579.079132][T12876] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2126'. [ 579.133315][T11505] attempt to access beyond end of device [ 579.133315][T11505] loop9: rw=2049, want=45104, limit=40427 [ 580.185164][T12904] loop1: detected capacity change from 0 to 512 [ 580.288628][T12904] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 580.328804][T12904] System zones: 1-12 [ 580.397938][T12904] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2130: missing EA_INODE flag [ 580.449846][T12904] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2130: error while reading EA inode 12 err=-117 [ 580.484281][T12904] EXT4-fs (loop1): 1 orphan inode deleted [ 580.491932][T12904] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 580.721841][T12914] device syzkaller0 entered promiscuous mode [ 580.811026][T12918] device syzkaller0 entered promiscuous mode [ 582.287048][T12935] loop8: detected capacity change from 0 to 1024 [ 582.336918][T12933] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2136'. [ 582.633232][T12935] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 584.669186][T12950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2139'. [ 584.680110][T12950] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2139'. [ 585.028837][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2142'. [ 586.314036][T13004] device syzkaller0 entered promiscuous mode [ 586.472990][T13011] loop9: detected capacity change from 0 to 128 [ 586.536369][T13014] loop1: detected capacity change from 0 to 512 [ 586.647888][T13014] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 586.684513][T13014] System zones: 1-12 [ 586.704657][T13014] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2149: missing EA_INODE flag [ 586.720686][T13014] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2149: error while reading EA inode 12 err=-117 [ 586.738036][T13018] device syzkaller0 entered promiscuous mode [ 586.742037][T13014] EXT4-fs (loop1): 1 orphan inode deleted [ 586.790848][T13014] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 587.283078][T13029] loop8: detected capacity change from 0 to 1024 [ 587.788699][T13029] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 589.191021][T13042] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2153'. [ 590.107269][T13059] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2156'. [ 590.118827][T13059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2156'. [ 591.389177][T13075] device syzkaller0 entered promiscuous mode [ 591.486258][T13079] device syzkaller0 entered promiscuous mode [ 593.319969][T13101] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2165'. [ 593.626958][T13108] loop3: detected capacity change from 0 to 512 [ 593.807833][T13114] loop1: detected capacity change from 0 to 1024 [ 594.128392][T13108] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 594.153159][T13116] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2169'. [ 594.296197][T13114] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 594.422000][T13108] System zones: 1-12 [ 594.684930][T13108] EXT4-fs error (device loop3): ext4_xattr_inode_iget:401: inode #12: comm syz.3.2167: missing EA_INODE flag [ 594.750657][T13108] EXT4-fs error (device loop3): ext4_xattr_inode_iget:406: comm syz.3.2167: error while reading EA inode 12 err=-117 [ 595.012278][T13108] EXT4-fs (loop3): 1 orphan inode deleted [ 595.018076][T13108] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 596.320551][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2171'. [ 596.331650][T13145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 599.351425][T13178] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2178'. [ 599.849478][T13197] loop1: detected capacity change from 0 to 1024 [ 600.225745][T13197] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 602.092834][T13218] loop1: detected capacity change from 0 to 512 [ 602.150229][T13184] loop8: detected capacity change from 0 to 40427 [ 602.314359][T13218] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 602.330686][T13218] System zones: 1-12 [ 602.452851][T13225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2185'. [ 602.613636][T13218] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2186: missing EA_INODE flag [ 602.688876][T13218] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2186: error while reading EA inode 12 err=-117 [ 602.760699][T13218] EXT4-fs (loop1): 1 orphan inode deleted [ 602.766578][T13218] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 604.001162][ T4227] Bluetooth: hci0: command 0x0409 tx timeout [ 604.045712][ T8937] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.345417][ T8937] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.411959][T13215] chnl_net:caif_netlink_parms(): no params data found [ 604.538390][ T8937] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.709856][ T8937] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.821383][T13215] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.870622][T13215] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.882113][T13215] device bridge_slave_0 entered promiscuous mode [ 604.991996][T13215] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.999383][T13215] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.079568][T13215] device bridge_slave_1 entered promiscuous mode [ 605.203673][T13215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.252721][T13215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.392938][T13215] team0: Port device team_slave_0 added [ 605.420273][ T8937] tipc: Left network mode [ 605.428684][T13283] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2192'. [ 605.494427][T13215] team0: Port device team_slave_1 added [ 605.751932][T13215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.776275][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.993214][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 606.000087][T13215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.072218][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 606.143492][T13215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.157818][T13215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.280206][T13215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.414774][T13215] device hsr_slave_0 entered promiscuous mode [ 606.454928][T13215] device hsr_slave_1 entered promiscuous mode [ 606.499047][T13215] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 606.540612][T13215] Cannot create hsr debugfs directory [ 608.737093][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 609.153070][T13327] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2197'. [ 610.669897][T13351] loop8: detected capacity change from 0 to 512 [ 610.685154][T13354] loop2: detected capacity change from 0 to 256 [ 610.777768][T13351] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 610.800425][T13351] System zones: 1-12 [ 610.879876][T13351] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2207: missing EA_INODE flag [ 610.902738][T13351] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2207: error while reading EA inode 12 err=-117 [ 610.917634][ T4297] Bluetooth: hci0: command 0x0419 tx timeout [ 610.955579][T13351] EXT4-fs (loop8): 1 orphan inode deleted [ 610.969548][T13351] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 611.120856][ T4297] Bluetooth: hci7: command 0x0406 tx timeout [ 611.139452][ T4297] Bluetooth: hci8: command 0x0406 tx timeout [ 611.155493][T13354] FAT-fs (loop2): Directory bread(block 64) failed [ 611.287542][ T4297] Bluetooth: hci9: command 0x0406 tx timeout [ 611.320745][T13354] FAT-fs (loop2): Directory bread(block 65) failed [ 611.511148][T13354] FAT-fs (loop2): Directory bread(block 66) failed [ 611.730666][T13354] FAT-fs (loop2): Directory bread(block 67) failed [ 611.737564][T13354] FAT-fs (loop2): Directory bread(block 68) failed [ 611.808835][T13354] FAT-fs (loop2): Directory bread(block 69) failed [ 611.860750][T13362] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2205'. [ 611.880710][T13354] FAT-fs (loop2): Directory bread(block 70) failed [ 611.887618][T13354] FAT-fs (loop2): Directory bread(block 71) failed [ 611.922105][T13354] FAT-fs (loop2): Directory bread(block 72) failed [ 612.030680][T13354] FAT-fs (loop2): Directory bread(block 73) failed [ 612.279567][T13372] loop3: detected capacity change from 0 to 1024 [ 612.529113][T13372] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 613.543122][ T8937] device hsr_slave_0 left promiscuous mode [ 613.723247][ T8937] device hsr_slave_1 left promiscuous mode [ 614.219463][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.249717][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.288190][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.329824][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.371457][ T8937] device bridge_slave_1 left promiscuous mode [ 614.377837][ T8937] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.442918][ T8937] device bridge_slave_0 left promiscuous mode [ 614.488861][ T8937] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.530133][ T8937] device veth1_macvtap left promiscuous mode [ 614.572948][ T8937] device veth0_macvtap left promiscuous mode [ 614.579080][ T8937] device veth1_vlan left promiscuous mode [ 614.635438][ T8937] device veth0_vlan left promiscuous mode [ 615.605630][ T8937] team0 (unregistering): Port device team_slave_1 removed [ 615.644979][ T8937] team0 (unregistering): Port device team_slave_0 removed [ 615.671899][ T8937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.709386][ T8937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.863524][ T8937] bond0 (unregistering): Released all slaves [ 615.980316][T13215] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 616.042610][T13215] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 616.107232][T13215] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 616.132159][T13215] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 616.373413][T13419] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2215'. [ 616.849172][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2215'. [ 617.067694][T13215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.286552][T13215] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.008783][T13430] loop8: detected capacity change from 0 to 512 [ 618.491986][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 618.523634][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 618.543401][T13430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 618.570872][T13430] System zones: 1-12 [ 618.584080][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 618.613469][T13430] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2220: missing EA_INODE flag [ 618.649323][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 618.688814][T13430] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2220: error while reading EA inode 12 err=-117 [ 618.718424][ T8911] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.725842][ T8911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.759079][T13430] EXT4-fs (loop8): 1 orphan inode deleted [ 618.830655][T13430] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 618.901933][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 619.029313][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 619.119290][ T8911] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.126734][ T8911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.239082][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 619.301558][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 619.353943][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 619.414925][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 619.504895][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 619.562225][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 619.597725][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 619.657426][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 619.698785][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 619.726691][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 619.775179][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2222'. [ 620.074210][T13215] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.137235][T13215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 620.166325][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 620.179861][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 620.454475][T13455] device syzkaller0 entered promiscuous mode [ 620.658444][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 620.676526][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 620.725523][T13215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.806762][T13471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2228'. [ 621.826187][T13471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2228'. [ 624.393429][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.785454][T13499] loop3: detected capacity change from 0 to 1024 [ 625.752974][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 625.800324][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 626.259710][T13499] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 626.760872][ T8932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 626.774871][ T8932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 626.979713][T13215] device veth0_vlan entered promiscuous mode [ 627.040308][ T8932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 627.064406][ T8932] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 627.168219][T13215] device veth1_vlan entered promiscuous mode [ 627.349698][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 627.376646][ T8911] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 627.417357][T13215] device veth0_macvtap entered promiscuous mode [ 627.468601][T13512] device syzkaller0 entered promiscuous mode [ 627.557160][T13215] device veth1_macvtap entered promiscuous mode [ 627.676361][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.818134][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.883303][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.938963][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.979970][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.026553][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.067518][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.122168][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.169078][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 628.191083][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.202669][T13215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 628.292855][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 628.305462][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 628.341511][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 628.357332][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 628.380293][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.436119][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.447792][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.469055][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.595658][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.609216][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.619601][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.633622][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 628.739769][T13215] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 628.869988][T13215] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 629.042192][T13215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 629.067171][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 629.076779][ T8924] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 629.108952][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2240'. [ 629.522299][T13215] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.800675][T13215] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.862057][T13215] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.975017][T13215] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.155136][T13536] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 630.200986][T13536] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 630.299260][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.330755][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.386778][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 630.511104][ T8924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 630.518982][ T8924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 630.552299][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 630.755920][T13567] device syzkaller0 entered promiscuous mode [ 631.123444][T13579] kvm: pic: level sensitive irq not supported [ 631.123534][T13579] kvm: pic: level sensitive irq not supported [ 631.707162][T13599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.729480][T13599] device batadv_slave_0 entered promiscuous mode [ 632.623342][T13630] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 632.662796][T13630] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 634.065094][T13605] loop8: detected capacity change from 0 to 40427 [ 634.107929][T13605] F2FS-fs (loop8): invalid crc value [ 634.147543][T13605] F2FS-fs (loop8): Found nat_bits in checkpoint [ 634.347919][T13605] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 635.486295][T11503] attempt to access beyond end of device [ 635.486295][T11503] loop8: rw=2049, want=45104, limit=40427 [ 635.637880][T13689] fuse: Bad value for 'fd' [ 635.953339][T13700] device syzkaller0 entered promiscuous mode [ 637.792953][T13752] loop2: detected capacity change from 0 to 128 [ 637.909749][T13752] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 638.040682][T13752] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 638.350878][ T8932] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 639.019144][T13731] loop5: detected capacity change from 0 to 40427 [ 639.039280][T13791] loop2: detected capacity change from 0 to 512 [ 639.309626][T13731] F2FS-fs (loop5): invalid crc value [ 639.801001][T13731] F2FS-fs (loop5): Found nat_bits in checkpoint [ 639.829359][T13791] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 639.908908][T13791] System zones: 1-12 [ 639.960770][T13791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.2302: missing EA_INODE flag [ 640.000707][T13731] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 640.050858][T13791] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.2302: error while reading EA inode 12 err=-117 [ 640.180790][T13791] EXT4-fs (loop2): 1 orphan inode deleted [ 640.248534][T13791] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 640.412418][T13813] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 641.646530][T13215] attempt to access beyond end of device [ 641.646530][T13215] loop5: rw=2049, want=45104, limit=40427 [ 642.306748][T13826] loop8: detected capacity change from 0 to 1024 [ 642.955792][T13826] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 646.078620][T13869] cgroup: Unknown subsys name 'nofavordynmods' [ 646.824143][T13883] netlink: 'syz.1.2322': attribute type 1 has an invalid length. [ 647.656550][T13900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2326'. [ 647.677139][T13900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2326'. [ 648.604838][T13872] loop5: detected capacity change from 0 to 40427 [ 648.658249][T13872] F2FS-fs (loop5): invalid crc value [ 648.714628][T13872] F2FS-fs (loop5): Found nat_bits in checkpoint [ 648.858767][T13872] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 650.011423][T13215] attempt to access beyond end of device [ 650.011423][T13215] loop5: rw=2049, want=45104, limit=40427 [ 650.573998][T13940] team0: Port device vlan2 added [ 652.189363][T13986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2345'. [ 653.257855][T14021] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 653.310567][T14021] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 653.381228][T14021] overlayfs: missing 'lowerdir' [ 653.604308][T14031] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 653.696809][T14031] overlayfs: missing 'lowerdir' [ 653.724420][T14040] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2361'. [ 654.524157][T14067] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 654.642647][T14072] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 654.712948][T14072] overlayfs: missing 'lowerdir' [ 655.421191][T14109] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2382'. [ 655.460682][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 655.482532][T14109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2382'. [ 655.916570][T14136] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2393'. [ 656.054504][T14143] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 656.122519][T14147] tmpfs: Bad value for 'nr_inodes' [ 656.563520][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2406'. [ 657.273687][ T26] audit: type=1326 audit(1776815005.087:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14213 comm="syz.5.2415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x0 [ 657.597407][T14232] overlayfs: failed to clone upperpath [ 658.398848][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 658.413043][T14262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2427'. [ 659.259596][T14271] device sit0 entered promiscuous mode [ 659.293594][T14271] netlink: 'syz.3.2433': attribute type 1 has an invalid length. [ 659.349313][T14271] netlink: 'syz.3.2433': attribute type 3 has an invalid length. [ 659.683577][T14296] loop2: detected capacity change from 0 to 164 [ 659.843525][T14296] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 659.988610][T14313] loop8: detected capacity change from 0 to 16 [ 660.057548][T14313] erofs: (device loop8): mounted with root inode @ nid 36. [ 660.165597][T14313] attempt to access beyond end of device [ 660.165597][T14313] loop8: rw=524288, want=1072, limit=16 [ 660.261527][T14316] overlayfs: failed to clone upperpath [ 660.269930][ T4187] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 660.299452][T14313] erofs: (device loop8): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 660.308907][T14313] attempt to access beyond end of device [ 660.308907][T14313] loop8: rw=524288, want=56, limit=16 [ 660.323183][T14313] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 660.348192][ T26] audit: type=1800 audit(1776815008.157:20): pid=14313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2445" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 660.500427][T14313] syz.8.2445 (14313) used greatest stack depth: 19888 bytes left [ 660.950266][T14348] netlink: 'syz.8.2458': attribute type 4 has an invalid length. [ 661.131194][T14356] loop8: detected capacity change from 0 to 512 [ 661.184284][T14356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 661.210804][T14356] System zones: 1-12 [ 661.237260][T14356] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2461: missing EA_INODE flag [ 661.294576][T14356] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2461: error while reading EA inode 12 err=-117 [ 661.393461][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2463'. [ 661.681401][T14356] EXT4-fs (loop8): 1 orphan inode deleted [ 661.887657][T14356] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 662.520934][T14379] loop1: detected capacity change from 0 to 164 [ 662.618743][T14379] rock: directory entry would overflow storage [ 662.649445][T14379] rock: sig=0x4543, size=28, remaining=18 [ 663.190858][T14415] capability: warning: `syz.2.2482' uses deprecated v2 capabilities in a way that may be insecure [ 663.217688][T14418] loop8: detected capacity change from 0 to 512 [ 663.318920][T14418] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 663.407686][T14418] System zones: 1-12 [ 663.415311][T14418] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2481: missing EA_INODE flag [ 663.430862][T14418] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2481: error while reading EA inode 12 err=-117 [ 663.450872][T14418] EXT4-fs (loop8): 1 orphan inode deleted [ 663.460522][T14418] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 665.189162][T14510] netlink: 'syz.2.2512': attribute type 7 has an invalid length. [ 665.226483][T14510] netlink: 'syz.2.2512': attribute type 8 has an invalid length. [ 665.515533][T14531] loop2: detected capacity change from 0 to 128 [ 665.821904][T14540] device syzkaller0 entered promiscuous mode [ 667.135133][T14561] device veth3 entered promiscuous mode [ 667.174066][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 667.936575][T14601] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2541'. [ 668.025413][T14612] loop2: detected capacity change from 0 to 256 [ 669.025590][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 669.427491][T14602] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.747377][T14651] loop8: detected capacity change from 0 to 512 [ 669.808455][T14651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 669.819183][T14651] System zones: 1-12 [ 669.833766][T14651] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #12: comm syz.8.2557: missing EA_INODE flag [ 669.846827][T14651] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.2557: error while reading EA inode 12 err=-117 [ 669.860992][T14651] EXT4-fs (loop8): 1 orphan inode deleted [ 669.866877][T14651] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 670.340421][T14602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.970321][T14602] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.985347][T14602] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 670.994675][T14602] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.004740][T14602] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.287349][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2544'. [ 671.573041][T14675] loop2: detected capacity change from 0 to 128 [ 671.716060][T14675] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2564'. [ 671.849174][T14675] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.857232][T14675] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.130797][T14691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2569'. [ 672.206497][T14696] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 672.962764][T14705] chnl_net:caif_netlink_parms(): no params data found [ 673.317304][T14705] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.359938][T14705] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.369013][T14705] device bridge_slave_0 entered promiscuous mode [ 673.389116][T14705] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.401020][T14705] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.413348][T14705] device bridge_slave_1 entered promiscuous mode [ 673.528284][T14705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.574243][T14705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.762720][T14705] team0: Port device team_slave_0 added [ 673.787912][T14705] team0: Port device team_slave_1 added [ 673.871722][T14705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.920804][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.079562][T14705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.138877][T14705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.150732][T14705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.184474][T14705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.480907][ T4226] Bluetooth: hci1: command 0x0409 tx timeout [ 675.256792][T14705] device hsr_slave_0 entered promiscuous mode [ 675.283070][T14803] sctp: [Deprecated]: syz.5.2603 (pid 14803) Use of int in max_burst socket option deprecated. [ 675.283070][T14803] Use struct sctp_assoc_value instead [ 675.583795][T14705] device hsr_slave_1 entered promiscuous mode [ 675.649519][T14705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 675.710660][T14705] Cannot create hsr debugfs directory [ 676.560724][T13683] Bluetooth: hci1: command 0x041b tx timeout [ 678.531583][T14862] loop5: detected capacity change from 0 to 16 [ 678.640819][ T4226] Bluetooth: hci1: command 0x040f tx timeout [ 678.721502][T14862] erofs: (device loop5): mounted with root inode @ nid 36. [ 678.767665][ T4187] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[9000] [ 678.816190][T14862] erofs: (device loop5): z_erofs_lz4_decompress: failed to decompress 4876 in[4096, 0] out[8192] [ 678.874277][ T26] audit: type=1800 audit(1776815026.687:21): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2620" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 679.698310][T14883] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.705848][T14883] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.443271][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 680.725223][ T4226] Bluetooth: hci1: command 0x0419 tx timeout [ 680.937682][T14883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.440135][T14883] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.451445][T14883] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.460416][T14883] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.469655][T14883] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.618577][T14883] syz.5.2623 (14883) used greatest stack depth: 19792 bytes left [ 681.737790][ T4289] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.817790][T14908] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 681.866866][ T4289] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.007063][ T4289] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.108209][ T4289] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.461248][ T4289] tipc: Left network mode [ 682.467522][T14705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.526222][T14705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 682.656873][T14705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 682.682727][T14705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 682.995174][T14705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.108190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.150748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.489551][T14705] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.677696][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.698101][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.762224][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.769345][ T466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.790159][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.799988][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.808898][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.816077][ T466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.851501][T14986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2650'. [ 683.879110][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 684.092102][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.107897][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.133272][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.248041][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.882194][T14705] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 684.927993][T14705] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 684.974236][T14993] netlink: 'syz.5.2652': attribute type 4 has an invalid length. [ 684.982239][T14993] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.2652'. [ 685.023424][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.061283][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.071806][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.096274][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.127263][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.143964][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.175071][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.201057][ T6996] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 685.851211][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.086190][ T26] audit: type=1326 audit(1776815033.897:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 686.188048][T15033] device bridge_slave_0 left promiscuous mode [ 686.209557][T15033] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.218387][ T26] audit: type=1326 audit(1776815033.897:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 686.281557][T15033] device bridge_slave_1 left promiscuous mode [ 686.315624][ T26] audit: type=1326 audit(1776815033.917:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 686.340019][T15033] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.463453][ T26] audit: type=1326 audit(1776815033.897:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 686.486849][ T26] audit: type=1326 audit(1776815033.917:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 686.806846][ T26] audit: type=1326 audit(1776815033.917:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 687.004092][T15033] bond0: (slave bond_slave_0): Releasing backup interface [ 687.229719][ T26] audit: type=1326 audit(1776815033.917:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 687.270704][ T26] audit: type=1326 audit(1776815033.917:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 687.302105][ T26] audit: type=1326 audit(1776815033.917:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 687.325753][T15033] bond0: (slave bond_slave_1): Releasing backup interface [ 687.338079][ T26] audit: type=1326 audit(1776815033.917:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15036 comm="syz.5.2665" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f035b586819 code=0x7ffc0000 [ 687.634795][T15033] team0: Port device team_slave_0 removed [ 687.688284][T15033] team0: Port device team_slave_1 removed [ 687.767230][T15033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 687.860867][T15033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 687.978760][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2672'. [ 688.191733][ T4289] device hsr_slave_0 left promiscuous mode [ 688.228939][ T4289] device hsr_slave_1 left promiscuous mode [ 688.267038][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.298434][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.329863][ T4289] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.356482][ T4289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.401369][ T4289] device bridge_slave_1 left promiscuous mode [ 688.440702][ T4289] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.493984][ T4289] device bridge_slave_0 left promiscuous mode [ 688.517707][ T4289] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.551867][ T4289] device veth1_macvtap left promiscuous mode [ 688.576771][ T4289] device veth0_macvtap left promiscuous mode [ 688.608285][ T4289] device veth1_vlan left promiscuous mode [ 688.615900][ T4289] device veth0_vlan left promiscuous mode [ 689.586372][ T4289] team0 (unregistering): Port device team_slave_1 removed [ 689.617524][ T4289] team0 (unregistering): Port device team_slave_0 removed [ 689.645880][ T4289] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.680217][ T4289] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.071681][ T4289] bond0 (unregistering): Released all slaves [ 690.172155][T14705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.687746][T14705] device veth0_vlan entered promiscuous mode [ 690.716560][T14705] device veth1_vlan entered promiscuous mode [ 690.757723][T14705] device veth0_macvtap entered promiscuous mode [ 690.776087][T14705] device veth1_macvtap entered promiscuous mode [ 690.809182][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.819991][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.838702][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.850491][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.870758][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.890192][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.902378][T14705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.922151][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.941015][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.958994][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.971852][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.990861][T14705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.009548][T14705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.021556][T14705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.040827][T14705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.049689][T14705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.067431][T14705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.076829][T14705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.189717][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.220160][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.252543][T15108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2684'. [ 691.349959][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 691.367661][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 691.385528][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 691.398916][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 691.413370][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 691.428381][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 691.460294][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 691.476749][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 691.488263][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 691.504124][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 691.521784][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 691.538861][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 691.554670][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 691.574148][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 691.590592][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 691.600069][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 691.619401][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2690'. [ 691.656793][T15124] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2691'. [ 691.852926][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 691.864071][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 691.894411][ T8918] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 691.904996][ T466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.990582][ T466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 692.001617][ T466] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 692.070065][T15160] loop1: detected capacity change from 0 to 512 [ 692.155861][T15160] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002] [ 692.208151][T15160] System zones: 1-12 [ 692.280379][T15160] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #12: comm syz.1.2701: missing EA_INODE flag [ 692.365494][T15160] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2701: error while reading EA inode 12 err=-117 [ 692.405388][T15160] EXT4-fs (loop1): 1 orphan inode deleted [ 692.434180][T15160] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback. [ 694.071918][T15210] loop5: detected capacity change from 0 to 128 [ 694.226257][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.335315][T15210] FAT-fs (loop5): Filesystem has been set read-only [ 694.382419][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.498482][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.590073][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.671233][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.680351][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2717'. [ 694.730623][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.749951][T15229] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2717'. [ 694.827577][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.873185][T15233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2717'. [ 694.920603][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 694.949654][T15233] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2717'. [ 694.994774][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.051344][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.059942][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.137962][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.178667][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.209866][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.268097][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.320546][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.353865][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.400729][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.409611][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.500540][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.509065][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.627246][T15271] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2734'. [ 695.661392][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.670111][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.747948][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.757160][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.779918][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 695.865114][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.117646][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.202993][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.310979][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.408439][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.465288][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.536599][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.617066][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.703437][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.795541][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.885714][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 696.953467][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 697.040829][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 697.108071][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 697.219038][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 697.260588][T15210] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 52) [ 697.358125][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 697.358144][ T26] audit: type=1800 audit(1776815045.167:60): pid=15210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2712" name="file1" dev="loop5" ino=1048660 res=0 errno=0 [ 697.655993][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2744'. [ 698.534277][T15356] loop1: detected capacity change from 0 to 1024 [ 701.350899][T15367] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2764'. [ 701.740561][ T5646] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 701.970560][ T23] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 701.986924][ T5646] usb 6-1: Using ep0 maxpacket: 32 [ 702.110727][ T5646] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 702.138378][ T5646] usb 6-1: config 0 has no interface number 0 [ 702.145248][ T5646] usb 6-1: config 0 interface 184 has no altsetting 0 [ 702.330773][ T5646] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 702.345095][ T5646] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.360555][ T5646] usb 6-1: Product: syz [ 702.370965][ T5646] usb 6-1: Manufacturer: syz [ 702.380750][ T5646] usb 6-1: SerialNumber: syz [ 702.391073][ T23] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 702.407837][ T5646] usb 6-1: config 0 descriptor?? [ 702.410692][ T23] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 702.456283][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 702.463123][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 702.463522][ T5646] smsc75xx v1.0.0 [ 702.472526][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.477555][ T23] usb 5-1: config 0 descriptor?? [ 702.541116][T15373] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 702.559670][T15373] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 702.640536][ T1108] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 703.408116][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.450644][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.488710][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.524089][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.563352][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.599858][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.639234][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.675812][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.715323][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.755087][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.799633][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.840700][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.875671][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 703.931966][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.002433][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.063099][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.108151][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.240590][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.305230][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.365136][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.424443][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.500547][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.560115][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.620724][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.670157][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.734853][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.763029][ T5646] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 704.775685][ T5646] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 704.785105][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.785933][ T5646] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 704.804924][ T5646] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 704.827116][ T5646] usb 6-1: USB disconnect, device number 17 [ 704.867649][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.898136][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.928672][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 704.931338][ T1108] usb 2-1: unable to get BOS descriptor or descriptor too short [ 704.979427][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.013344][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.030928][ T1108] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 705.051422][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.059950][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.092516][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.111645][ T1108] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7 [ 705.121988][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.158727][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.197910][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.226779][T15472] input input39: cannot allocate more than FF_MAX_EFFECTS effects [ 705.242306][ T23] logitech-hidpp-device 0003:046D:C086.0008: unknown main item tag 0x0 [ 705.318946][ T23] logitech-hidpp-device 0003:046D:C086.0008: hidraw0: USB HID v0.05 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 705.360622][ T1108] usb 2-1: string descriptor 0 read error: -71 [ 705.367072][ T1108] usb 2-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 705.418530][ T23] usb 5-1: USB disconnect, device number 9 [ 705.421908][ T1108] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 705.530977][ T1108] usb 2-1: can't set config #1, error -71 [ 705.587286][ T1108] usb 2-1: USB disconnect, device number 3 [ 705.774836][T15486] fido_id[15486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 705.975240][T15498] loop1: detected capacity change from 0 to 1024 [ 706.381293][T15498] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 707.740678][ T4297] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 708.030639][ T4297] usb 5-1: Using ep0 maxpacket: 32 [ 708.116849][T15555] page:ffffea000114aac0 refcount:4 mapcount:1 mapping:ffff88807e7ff340 index:0x0 pfn:0x452ab [ 708.128299][T15555] memcg:ffff88805890c000 [ 708.132594][T15555] aops:shmem_aops ino:99 [ 708.136899][T15555] flags: 0xfff00000080017(locked|referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 708.147817][T15555] raw: 00fff00000080017 ffffea0001071548 ffffea000114aa88 ffff88807e7ff340 [ 708.156543][T15555] raw: 0000000000000000 0000000000000000 0000000400000000 ffff88805890c000 [ 708.165167][T15555] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 708.172227][T15555] page_owner tracks the page as allocated [ 708.178204][T15555] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 15556, ts 708085633355, free_ts 708050093276 [ 708.193286][T15555] get_page_from_freelist+0x1bbd/0x1ca0 [ 708.198890][T15555] __alloc_pages+0x1ee/0x480 [ 708.203533][T15555] alloc_pages_vma+0x393/0x7c0 [ 708.208462][T15555] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 708.214156][T15555] shmem_getpage_gfp+0x14f4/0x2d40 [ 708.219635][T15555] shmem_read_mapping_page_gfp+0x96/0x100 [ 708.225407][T15555] udmabuf_create+0x895/0x1570 [ 708.230217][T15555] udmabuf_ioctl+0x1f3/0x300 [ 708.234974][T15555] __se_sys_ioctl+0xfa/0x170 [ 708.239617][T15555] do_syscall_64+0x4c/0xa0 [ 708.244304][T15555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.250250][T15555] page last free stack trace: [ 708.255047][T15555] free_unref_page_prepare+0x637/0x6c0 [ 708.260555][T15555] free_unref_page_list+0x119/0x820 [ 708.266039][T15555] release_pages+0x186c/0x1be0 [ 708.270373][ T4297] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.271019][T15555] tlb_finish_mmu+0x1b4/0x370 [ 708.285977][T15555] exit_mmap+0x3d0/0x640 [ 708.290269][T15555] __mmput+0x115/0x3b0 [ 708.294383][T15555] exit_mm+0x588/0x6e0 [ 708.298492][T15555] do_exit+0x5a9/0x20c0 [ 708.301551][ T4297] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.302678][T15555] do_group_exit+0x12e/0x300 [ 708.302701][T15555] __x64_sys_exit_group+0x3b/0x40 [ 708.302719][T15555] do_syscall_64+0x4c/0xa0 [ 708.302739][T15555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.333927][T15555] ------------[ cut here ]------------ [ 708.339405][T15555] kernel BUG at mm/filemap.c:166! [ 708.344490][T15555] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 708.350608][T15555] CPU: 0 PID: 15555 Comm: syz.5.2817 Not tainted syzkaller #0 [ 708.358101][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.368475][T15555] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 708.374952][T15555] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 01 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 01 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 708.376992][ T4297] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.394823][T15555] RSP: 0018:ffffc9000484f688 EFLAGS: 00010046 [ 708.394852][T15555] RAX: c2c5c99d2c425e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 708.394865][T15555] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000909ec4 [ 708.394879][T15555] RBP: 1ffffd4000229559 R08: ffff8880b902795b R09: fffff52000909e80 [ 708.394894][T15555] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea000114aac0 [ 708.394909][T15555] R13: dffffc0000000000 R14: ffffea000114aac0 R15: ffffea000114aac8 [ 708.394926][T15555] FS: 0000555593d02500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 708.460417][T15555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.467216][T15555] CR2: 0000000000000000 CR3: 000000005c294000 CR4: 00000000003526f0 [ 708.475268][T15555] Call Trace: [ 708.478593][T15555] [ 708.481874][T15555] __delete_from_page_cache+0xbe/0x6d0 [ 708.487405][T15555] ? _raw_spin_lock_irq+0x86/0xf0 [ 708.492501][T15555] ? lockdep_hardirqs_off+0x70/0x100 [ 708.493152][ T4297] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 708.497850][T15555] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 708.497891][T15555] ? _raw_spin_lock_irq+0xb7/0xf0 [ 708.523448][T15555] ? _raw_spin_lock_irqsave+0x100/0x100 [ 708.529251][T15555] ? page_mapping+0x30e/0x440 [ 708.534020][T15555] delete_from_page_cache+0x121/0x190 [ 708.539481][T15555] truncate_inode_page+0x8d/0xb0 [ 708.544462][T15555] shmem_undo_range+0x53c/0x1930 [ 708.549450][T15555] ? __lock_acquire+0x13bc/0x7d10 [ 708.554517][T15555] ? shmem_truncate_range+0xa0/0xa0 [ 708.558199][ T4297] usb 5-1: config 0 interface 0 has no altsetting 0 [ 708.559767][T15555] ? do_raw_spin_lock+0x128/0x2f0 [ 708.571590][T15555] ? __rwlock_init+0x140/0x140 [ 708.576396][T15555] shmem_evict_inode+0x220/0xa40 [ 708.579649][ T4297] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 708.581545][T15555] ? inode_wait_for_writeback+0x1df/0x220 [ 708.581576][T15555] ? shmem_free_in_core_inode+0xb0/0xb0 [ 708.581599][T15555] ? do_raw_spin_lock+0x128/0x2f0 [ 708.581621][T15555] ? bit_waitqueue+0x30/0x30 [ 708.581645][T15555] ? do_raw_spin_unlock+0x11d/0x230 [ 708.581667][T15555] ? shmem_free_in_core_inode+0xb0/0xb0 [ 708.581690][T15555] evict+0x4c9/0x8d0 [ 708.581718][T15555] ? proc_nr_inodes+0x320/0x320 [ 708.609898][ T4297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.611890][T15555] ? do_raw_spin_unlock+0x11d/0x230 [ 708.611919][T15555] ? _raw_spin_unlock+0x24/0x40 [ 708.640423][ T4297] usb 5-1: config 0 descriptor?? [ 708.644776][T15555] __dentry_kill+0x431/0x650 [ 708.659516][T15555] dentry_kill+0xb8/0x290 [ 708.663893][T15555] dput+0xd8/0x1a0 [ 708.667650][T15555] __fput+0x5ee/0x930 [ 708.671682][T15555] task_work_run+0x125/0x1a0 [ 708.676334][T15555] exit_to_user_mode_loop+0x10f/0x130 [ 708.681830][T15555] exit_to_user_mode_prepare+0xee/0x180 [ 708.687422][T15555] syscall_exit_to_user_mode+0x16/0x40 [ 708.693014][T15555] do_syscall_64+0x58/0xa0 [ 708.697569][T15555] ? clear_bhb_loop+0x30/0x80 [ 708.702290][T15555] ? clear_bhb_loop+0x30/0x80 [ 708.707007][T15555] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 708.712979][T15555] RIP: 0033:0x7f035b586819 [ 708.717654][T15555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.737476][T15555] RSP: 002b:00007ffd03e45b28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 708.745942][T15555] RAX: 0000000000000000 RBX: 00007ffd03e45c10 RCX: 00007f035b586819 [ 708.754138][T15555] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 708.762240][T15555] RBP: 00000000000acd94 R08: 0000000000000001 R09: 0000000000000000 [ 708.770419][T15555] R10: 0000001b2d720000 R11: 0000000000000246 R12: 00007ffd03e45c50 [ 708.778538][T15555] R13: 00007f035b7fffac R14: 00000000000ace11 R15: 00007f035b7fffa0 [ 708.786661][T15555] [ 708.789803][T15555] Modules linked in: [ 708.793743][T15555] ---[ end trace 15ad4f034e3ebfe8 ]--- [ 708.799315][T15555] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 708.805787][T15555] Code: e8 29 11 db ff 4c 89 f7 48 c7 c6 00 01 33 8a e8 aa fb 0d 00 0f 0b e8 13 11 db ff 4c 89 f7 48 c7 c6 40 01 33 8a e8 94 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 10 db ff eb 5d e8 f1 10 db ff 4c 89 f7 [ 708.825622][T15555] RSP: 0018:ffffc9000484f688 EFLAGS: 00010046 [ 708.831739][T15555] RAX: c2c5c99d2c425e00 RBX: 0000000000000000 RCX: 0000000000000000 [ 708.839846][T15555] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000909ec4 [ 708.847855][T15555] RBP: 1ffffd4000229559 R08: ffff8880b902795b R09: fffff52000909e80 [ 708.855870][T15555] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea000114aac0 [ 708.863880][T15555] R13: dffffc0000000000 R14: ffffea000114aac0 R15: ffffea000114aac8 [ 708.872014][T15555] FS: 0000555593d02500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 708.881115][T15555] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 708.887754][T15555] CR2: 0000000000000000 CR3: 000000005c294000 CR4: 00000000003526f0 [ 708.895867][T15555] Kernel panic - not syncing: Fatal exception [ 708.902366][T15555] Kernel Offset: disabled [ 708.906860][T15555] Rebooting in 86400 seconds..