last executing test programs: 21m0.011189025s ago: executing program 3 (id=9): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d3101010000383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f7274653d6d6978746e616d653d6c6f7765722c646f733178666c6f707079696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee8a465e6e1be6eeb5d588035a24458d346fc1f9a234cdc4ba352a4185614ce67df4870bff796357ee95fffb99cde9000000"], 0xfe, 0x2b1, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYBLOB="3cf27dec20b2fb057fd8c00bad4867799357d178c5b61664e431da0db71d44935622db4199f18ee695e2386c301106e1b6433ea837ae21e7999c3044611c35eaf8c8457f04376f37efbbdf9d51"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tkill(0x0, 0x4000011) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000140)='\x90\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x184) pwritev2(r7, &(0x7f00000005c0), 0x0, 0x3, 0xfffffffc, 0x0) 20m54.595343792s ago: executing program 3 (id=15): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffd, 0x721100) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x3) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00030001"], 0xc041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RREADDIR(r4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r6) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, 0x0) 20m52.259286538s ago: executing program 3 (id=18): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xfe, 0x2b1, &(0x7f0000000640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000024c0)=ANY=[@ANYBLOB, @ANYBLOB="3cf27dec20b2fb057fd8c00bad4867799357d178c5b61664e431da0db71d44935622db4199f18ee695e2386c301106e1b6433ea837ae21e7999c3044611c35eaf8c8457f04376f37efbbdf9d5165a39f2f4b7b1be995296eb5bffb4a49953c7cbb2d7b3c29599b72f640ba26006cf1ccd02a28e2294eee2dbf76e4be8b7b120df93dee0607ccaee99ad1ef4bf37e585f0d"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) tkill(0x0, 0x4000011) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r5, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000140)='\x90\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x184) pwritev2(r6, &(0x7f00000005c0), 0x0, 0x3, 0xfffffffc, 0x0) 20m47.11155717s ago: executing program 3 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000140)='\x90\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x184) pwritev2(r7, &(0x7f00000005c0), 0x0, 0x3, 0xfffffffc, 0x0) 20m45.461808666s ago: executing program 3 (id=25): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getgid() r4 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000240)=0x3, 0x4) syz_io_uring_setup(0x186, 0x0, &(0x7f0000000140), &(0x7f0000000200)) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req={0x9, 0x3, 0xf, 0x594f}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000000480)) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x18, 0x25, 0x109, 0x870bd22, 0xfffffff9, {0x2}, [@nested={0x4, 0x12b}]}, 0x18}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) socket$inet6(0xa, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 20m42.272273992s ago: executing program 3 (id=28): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffd, 0x721100) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x3) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe000300"], 0xc041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RREADDIR(r4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r6) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x1e7bd784, 0x10001, 0x0}) 20m27.152697997s ago: executing program 32 (id=28): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffffffffffd, 0x721100) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) ioctl$USBDEVFS_BULK(r1, 0x5523, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x5522, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0x3) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe000300"], 0xc041) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) write$P9_RREADDIR(r4, 0x0, 0x0) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, &(0x7f0000000000)) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net\x00') fchdir(r6) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000000080)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x1e7bd784, 0x10001, 0x0}) 20m11.611622666s ago: executing program 4 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019008111e0020f060d8107040a60090000020000000455a1bc00090008000699e3ffffff140005000800000006000567b8b7b94002000009080016060000000000000074d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e006dcdf634c1f215ce3bb9ad809d5", 0xb7}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5080001190780000"], 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_OPEN(r6, &(0x7f0000000080)={0x20, 0x8000000000000009, 0x0, {0x0, 0x8}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x204800, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000680)={0x1f, 0x1, @none}, 0xe) 19m53.380632132s ago: executing program 4 (id=66): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140), 0x0, 0x8080c61) creat(0x0, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000009240)={{{@in6=@private1, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0xa0, 0x80, 0x29}, {0x0, 0x3, 0x7, 0x6, 0x10000, 0x60000000, 0xe04d, 0x2}, {0x6, 0x1, 0x9}, 0x3ff, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0xd, @in=@local, 0x3505, 0x0, 0x1, 0xff, 0x1, 0x8, 0x10001}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r6 = socket(0x10, 0x800000000080002, 0x9) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x800, 0x33}, 0xa, @in=@multicast1, 0x3506, 0x4, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r10 = dup3(r8, r9, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCX_MFETCH(r10, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 19m53.376897802s ago: executing program 4 (id=71): pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8080c61) creat(0x0, 0x28) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000009240)={{{@in6=@private1, @in6=@remote, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0xa0, 0x80, 0x29}, {0x0, 0x3, 0x7, 0x6, 0x10000, 0x60000000, 0xe04d, 0x2}, {0x6, 0x1, 0x9}, 0x3ff, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d5, 0x33}, 0xd, @in=@local, 0x3505, 0x0, 0x1, 0xff, 0x1, 0x8, 0x10001}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r5 = socket(0x10, 0x800000000080002, 0x9) setsockopt$sock_attach_bpf(r5, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) r6 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x800, 0x33}, 0xa, @in=@multicast1, 0x3506, 0x4, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) 19m53.371163472s ago: executing program 4 (id=78): r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) creat(0x0, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000180)=0x3) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48) r6 = socket(0x10, 0x800000000080002, 0x9) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f00000000c0)=r5, 0x4) r7 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e20, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x20}, {0x9, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x800, 0x33}, 0xa, @in=@multicast1, 0x3506, 0x4, 0x0, 0x4, 0xfffffffc, 0x4, 0x401}}, 0xe8) r8 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r10 = dup3(r8, r9, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MON_IOCX_MFETCH(r10, 0xc0109207, &(0x7f0000000080)={0x0, 0x0, 0x6}) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 19m46.464735686s ago: executing program 4 (id=81): mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) 19m44.104268334s ago: executing program 4 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000140)='\x90\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x184) pwritev2(r7, &(0x7f00000005c0), 0x0, 0x3, 0xfffffffc, 0x0) 19m25.251953637s ago: executing program 33 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') r4 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x4eb) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000240)=0x5) connect$vsock_stream(r6, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000140)='\x90\x00', 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x184) pwritev2(r7, &(0x7f00000005c0), 0x0, 0x3, 0xfffffffc, 0x0) 3m37.53576147s ago: executing program 0 (id=3088): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000e, 0x5d032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000e7d000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xe481b1619a4d0269, 0x0, 0x8, 0x1, 0x1, 0x0, 0x0, 0x20}, {0x0, 0x2000, 0xc, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0xfc}, {0x3000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x4}, {0xd000, 0xdddd1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7}, {0x5000, 0xffff1000, 0xf, 0x2, 0xfe, 0x10, 0x6, 0x0, 0x58, 0x8, 0x4}, {0x4000, 0x8000000, 0xb, 0x0, 0x0, 0xff, 0xfc, 0x0, 0x0, 0x5}, {0xdddd1000, 0x100000, 0x0, 0x8, 0x3, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x80}, {0x0, 0x50000, 0xf, 0x2, 0x0, 0x54, 0x7, 0xfd, 0x0, 0x0, 0x7a, 0x5}, {0xc000, 0x9}, {0xdddd0000}, 0xddf8ffdb, 0x0, 0x0, 0x200008, 0x8, 0x8000, 0x100000, [0xdd41, 0x0, 0x2]}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x54}) 3m35.382051357s ago: executing program 0 (id=3093): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2200, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x835c, 0xf000, 0x20000a, 0x20002f3}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000380)={0x78, 0x0, r4, {0x4, 0x7, 0x0, {0x2, 0x5, 0x54f, 0x2, 0x3, 0x0, 0x7fffffff, 0xd, 0x4, 0x4000, 0x8, r5, 0x0, 0x2, 0x2}}}, 0x78) 3m34.663951309s ago: executing program 0 (id=3095): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x44}}, 0x2) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) 3m33.237741592s ago: executing program 0 (id=3098): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000080000000000000000000080850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) socket$inet(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file3\x00', 0x4002, &(0x7f0000000200)={[{@errors_remount}, {@bh}, {@grpquota}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x1, 0xbd2, &(0x7f0000000540)="$eJzs3N1rXGUaAPDnnEymaZvtpMuybPdmsyxLC8tOky4p27KwrVS88ULQW6EhnZSQ6QdJpCbNxUT/AVGvBW8EtShe2OveKHrrjba3ihdCkdgoiGjkzEeSNjNJ2s70hPb3g3fO+553Zp7nmcPMOS/MTABPrOHsJo04FBFnk4hSc38aEcV6byCi1rjfyvLixE/LixNJrK4+/30SSUTcWV6caD1X0tzubw4GIuKLp5L446ub487OL0yPV6uVmeb46NyFy0dn5xf+PXVh/HzlfOXi6PH/jh0bOz5yYqxrtf789anrP/79mW9rv7z367Uf3ngniVMx2JzbWEe3DMfw2muyUSEixrsdLCd9zXo21pkUtnlQ2uOkAADoKN1wDffnKEVfrF+8leKTL3NNDgAAAOiK1b6IVQAAAOAxl1j/AwAAwGOu9T2AO8uLE62W7zcSHq3bpyNiqFH/SrM1ZgpRq28Hoj8i9t1JYuPPWpPGwx7acER8c+vEh1mLHv0OeSu1pYj4S7vjn9TrH6r/intz/WlEjHQh/vA9423q7+tCyLs8TP2nuhD/PusHgK64cbpxItt8/kvXrn+izfmv0Obc9SDanP+6fo7fSuv6b2XT9d96/X0drv+e22GMq+++daXTXFb//64//UGrZfGz7bZPuu2frOzM7aWIvxba1Z+s1Z90qP/sDmOUfrtS6TT3wPV3yerbEYejff0tydb/T3R0cqpaGWncto2x9PnY+53i511/dvz3dai/9f9PnY7/5R3GePHMmY827by13t26/vS7YvJCvVds7nl5fG5uZjSimDy7ef+xrXNp3af1HFn9R/6x9fu/Xf3ZZ0Kt+Tpka4Gl5jYbv3JPzP9fu/pxp3xa6788j/+5Dsd/Y/2fFTYf/9d2GOOfn75+pNPcxvVv1rL4rbUwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALSkETEYSVpe66dpuRyxPyL+FPvS6qXZuX9NXnrp4rlsLmIo+tPJqWplJCJKjXGSjUfr/fXxsXvG/4mIgxHxZmlvfVyeuFQ9l3fxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArNkfEYORpOWISCNipZSm5XLeWQEAAABddyDvBAAAAICeG8o7AQAAAKDnrP8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosYN/u3EziYjayb31lik25/pzzQzotTTvBIDc9OWdAJCbQt4JALm5zzW+ywV4DCXbzA90nNnT9VwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2L0OH7pxM4mI2sm99ZYpNuf6c80M6LU07wSA3PR1mhiIiMKjzQV4tLzF4clljQ8k28wPrN+ndvfMnp7lBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDuM1hvSVqOiGJzX7kc8YeIGIr+ZHKqWhmJiAMR8VWpf082Hs05ZwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALpvdn5herxarcxknTSanbU9OuudpPGK1XZLPjoP2SnGrkhjl3by/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPs/ML0+PVamVmNu9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLzNzi9Mj1erlZkedvKuEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/PweAAD//1pFCiI=") syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e26, @broadcast}, {0x2, 0x4e21, @local}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4a, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="140000"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3m31.892851731s ago: executing program 0 (id=3102): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x2, 0x3, 0x411}}}, 0x7) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000100)=""/99) io_setup(0x3, &(0x7f0000000180)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x20a02, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x5453, 0x0) syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x218008da, &(0x7f0000000a80)=ANY=[], 0x1, 0x1507, &(0x7f0000001d00)="$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") syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bd, &(0x7f0000001600)="$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") creat(0x0, 0x14) 3m30.798124185s ago: executing program 0 (id=3103): capset(&(0x7f0000000040)={0x20080522}, 0x0) epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xf7ffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, r1, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000980)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\x93\x02z@\xed\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 3m15.532257458s ago: executing program 34 (id=3103): capset(&(0x7f0000000040)={0x20080522}, 0x0) epoll_create1(0x0) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xf7ffffff, 0x0, 0x0, 0x0, 'syz1\x00', 0x1}, 0x3, 0x20000000, 0xffff, r1, 0x0, 0x1ff, 'syz0\x00', 0x0}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) tkill(r1, 0xb) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, 0x0, 0x8060010) memfd_create(&(0x7f0000000980)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5 \xc8\x10>\xc9\\\x85\x17L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\x93\x02z@\xed\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) 10.106961959s ago: executing program 2 (id=3642): syz_extract_tcp_res$synack(&(0x7f0000000080), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32], 0x50) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x800, 0x4, 0x9, 0x20000000000009a}, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40044160, 0x0) socket$netlink(0x10, 0x3, 0x0) gettid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0), 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, 0x0, &(0x7f0000000100)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) 8.795804906s ago: executing program 2 (id=3645): io_submit(0x0, 0x0, &(0x7f0000001680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) memfd_create(&(0x7f0000000540)=']*\x00', 0x2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000300)=@arm64={0x9b, 0x5, 0xb, '\x00', 0x200000400ffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.227825169s ago: executing program 1 (id=3646): mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10068, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$bind(0x0, &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0) r2 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000060000,user_id', @ANYBLOB]) 7.86201199s ago: executing program 6 (id=3647): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e5709"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 7.733061498s ago: executing program 6 (id=3648): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x7}, 0x94) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.641713304s ago: executing program 5 (id=3649): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0xfe00, 0x8000c62) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 7.482295873s ago: executing program 2 (id=3650): r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7.18693857s ago: executing program 2 (id=3651): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) tee(r5, r4, 0x9, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="50400079df9d171a2bf80fbd0c41f7b2a5c550998136a86805e56b677583bb86338ed0117eb79deeed3ff1fcc1b676dadb28f532dd91dce8a75b121292ce3d984d2dc431a0590ade8fa6a088129d06742d0656d9703959c8067bcccdf5c3d336e6676e966b0a77b72e68a8da1432ef1feef55c76886a88e44fc792b12af9d82b9055dd5b24d1928ded7029ac980e706083c1aebef0ccf0ebfdb8aa85df52bd5a8bea770042ea04000000f81dd6fc10ae8f5ecc43c24079a907de"], 0x4) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x3, 0x60000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x922, 0x12) bind$alg(r6, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56", 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)={0x4f4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf, 0x0, "40f677d84a270de3f128fe"}, @NL80211_BAND_6GHZ={0x35, 0x3, "1e95da2b40d214d450d80bd1f72f7a114b2ab44d5a362fe138df2f1e0df942b800c9f826298cb79f849fddad64cdbabe9d"}, @NL80211_BAND_5GHZ={0x19, 0x1, "246fc18703aa0341d1b86209d908fc7598ddd58110"}, @NL80211_BAND_2GHZ={0x46f, 0x0, "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"}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0x40, 0x98, 0x8, 0xc2e, 0x720, 0x9bf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x83, 0x4b, 0x3c, 0x0, [], [{}]}}]}}]}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 7.143818273s ago: executing program 7 (id=3652): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0xf, 0x9, 0x1, 0x0, 0x10000, 0x3, 0x4002004c2, 0x6ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 6.922193685s ago: executing program 6 (id=3653): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000001f40)={'fscrypt:', @desc4}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1391a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0xfffffffffffffffd, 0x1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_emit_vhci(0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r2, 0x7, 0x4) 6.390299587s ago: executing program 7 (id=3654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r3, &(0x7f0000000380)=[{0x0}], 0x1, 0xa3, 0x0) io_submit(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000140)) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001400add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03adcac4b74ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) setregid(0xee00, 0x0) 5.600915653s ago: executing program 5 (id=3655): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000600)=ANY=[], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) shutdown(r3, 0x1) 5.599977493s ago: executing program 6 (id=3656): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) request_key(&(0x7f0000000c40)='encrypted\x00', 0x0, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a600000001d0a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 4.79654897s ago: executing program 7 (id=3657): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x748, 0x0, &(0x7f0000000a00)="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", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x50) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r4, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) 4.6261104s ago: executing program 5 (id=3658): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e5709"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 4.544438935s ago: executing program 5 (id=3659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000004f80)={0x3, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffeb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe89}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404}, 0x800) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket(0x29, 0x2, 0x0) write(r7, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)={0x2, 0x13, 0x9, 0x2, 0x21d, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x8, {0x6, 0x3c, 0x4, 0xae, 0x0, 0xff, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bc0, 0x3, {0x6, 0x6c, 0xd7, 0x9, 0x0, 0x4, 0x0, @in6=@remote, @in=@local}}, @sadb_lifetime={0x4, 0x3, 0x9, 0x401, 0xa8, 0x40f9}, @sadb_x_sec_ctx={0x200, 0x18, 0x7, 0x4, 0xff8, "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"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x36, 0x2}]}, 0x10e8}}, 0x40d0) 4.44707395s ago: executing program 6 (id=3660): io_submit(0x0, 0x0, &(0x7f0000001680)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) memfd_create(&(0x7f0000000540)=']*\x00', 0x2) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000300)=@arm64={0x9b, 0x5, 0xb, '\x00', 0x200000400ffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.482045447s ago: executing program 2 (id=3661): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x4, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioprio_set$pid(0x2, 0x0, 0x4000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000c40)='encrypted\x00', 0x0, &(0x7f0000000cc0)='[,\v]@+\x00', 0x0) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a600000001d0a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) 3.165942765s ago: executing program 6 (id=3662): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x748, 0x0, &(0x7f0000000a00)="41721a68245f9c9c5dd6b6db870f00dc9cb40601e282785e8ee27b0234716ff3877be6ec9ad4e0d24c3dd0dc4197b1bcc056c5fdd42096f29e4a655344a884cb3f7da142ce7e1c638d29315df42eca53f98d128ed1a116a98cb4831b2d4992cd98ce6ab3b7e6de3fad06667955615baca8288a5fe5605b5862763c004fbb258ed093067e407b4ba8a8017eff1c043b7b4781fc47c86e914ab3968f7796e0b78334fa9b7c691464484ef328b180d97af6d07e65af7dd93983be3b6ce12abac019364a2efb47b2f388fa37bbe2f889142a79c41bf5f3378c5dc759485c2a47beca51786ae52ea891547ad9fdb076b81c3d3045a9bba017ea96a558bb029e34162136e79776459bcc97e4af43b9055cbd2a98d2001a8e8747ff1dedf3191a31a82be77b909cb716023fd375de9dcc8a231d21587ae651b0f8b7e076cc3c08b5c5b80208e9f5269b0b3675ae079e447d262a4309222d91d3ddc7498bc1e0b2bf02f3ab7241c41a259595faca10c7e6d10704b2fd99ed4364932ff676545f2d798c6d5f4b785f96dc3259119d2bb51d8cf418075621afc91b3dd491b4c0efc1da0f8746fd1e409e9b41a1dedd1bff75b89c80b5c36341bc296a92e78be692c08a42a8c225dee4b82f2e8fefcf1b14969539a7ad8bc95870c315a82cdd76b62f88cd047a26794ea1f36dadfb892cd7703b9c5aea99050e8803011acb2c9536a6c9d7cb774b3f0cc61d034036079c155173f44d4f9c32b5b67c883255f371b405d0386a2c9522ce804a630453d5b3f8b0dbcd1b5a6e119f75ee449c4d0f80ae1c9147ed92ad34eff2c5cef358e22033501f59cad1565e1f2538c8319941956f717b02689d5e72468d2d703a9e006649f0b39c9ea7b27323479284237776cd453856c48f8099ea33c12336df6cc65296f6df364dc425484d802ccfd1a477f16f5ea2573496a998f02ee67fcbfdc212b51e8b2e0814588cf0e2b544ce5662f949480785354e1f761b289b6917994e043cf31c36ead14c84c445138891052bd06bd0bc24093ab30909d3bc6cbda9abdc92bb6a031486776e41bc333d20448b01c2b727bed05486166e23ec4c500df4dd150f21c0a74adcfabce5ffa1c17ca3e9c6d0118d2a987e987968a905836a11d56a3e1afab22e488a15060da82a5e9b31dd406fa51f94c45340480642bf754abff76739ce77333b69d506dd5b744c13e4bf6866418fb168cca4baf1cfade0ddfb9bcc2fa69a3a9d7901ced42c8e279119817a99df841a384e2a3a49d25898551399d05c73e5e7fb7f3be3badb175539035a4bbc973855ad1a6fe98b63447fab1535ed85cd9b3db8d629c40badc856bfa3c475217fda7b561da615774b3f986629e01a500c3832e70dba7fbbca608deead32b5808a96354aac1ba0776d9a2e30e1edf7c4d52c605b62d3251190fd71699a9d6dcaf24a12a5b70ddcfdd51cfe608a777a54a87393b8c7d3988d7e33dbf4879ea051c982cc28c1b2ec148e919098b8805c09b83ab561d6083d7d513160e0c705f30b1f75d8a7962c0873bba3b48a72a218dcc990b899d3dc4349200eeb0a8066c03e0446c372472ff30a1e927ce82935325cb4912ce31e8321422425a05291006b0599d3305c6cf94c31d98063db8aca5d48b539f22cd7c3187fe61f671904302a174905931ceb7100b1ae33f9766d537aa586698fb4cd40a7b1bcfd86151a87b1efed6af9b0fe645735454bc8bd09937711c0278cee7964399a9bc2b565ab6236dee08dd11c1acfdeb59b3727e084a311eccd4ebb7e972c486f48111220a03f904ff86bd5f84b90b9a4dc8ec0831eb9299cd307a29e9599c221cb2b7ef8a9d37f0089f6930ad3f06e02a51781e0307abad73b9bcf51ec06c674a594bc6103883c8013f2edbf6baac4a93bfbdc3d738270f71fa5ec47e952604694002eb54d2acad7ac1e16ce08f6c88f992e03c920908781e64e22bd2e2d2f94cb9a3565aff946bf874c0fc45d862c26c58e3776bccf1b66b7c81bba727307f45b371b95b8ca3a026749fe466c1fca5b3e5b6a27106b6af98f7d41fcf1f24f5c26fa46dd35d5babc3537d25c588732775f9dda81b0e7b7578a270873b1cc3883c36ddde23f842c5796da5fda18b4ae0bf23418c9fe7cbeaac4c7895158fe89b9cdf1712a3ad060a92422fcd6ee80b8acb4c8bc27568dc55dea3624ac22109c676d334d634894daa8764e5dc045ab110e616491a7d8c3238c38bcdea0c552ab396233052e12e6fa446d71e57b6d8d7e330fd4c59e4ffb4c12ad734e509290bc55a6ac6577dbe14d6341314aa454c64f35629260b82cc87e724a40d7dea2a08347c275228a67c0e15003b377e46f1b41bd255c33ede60c03fff93daee6cd9a047e57266ffe7cafdb3adb9070b1e67ae6c39710c28e38d0a6039320e2d122b069ea6a2a66eb8dd1aa6e3f52ef892be4fc6defa2e3701267326f4d611bf1df7aca569dffef6c821cec512bba84746dfdfe1103274868ac9ccce1908807369e3134942b5a4e1cfa299308b057e475c359b038ecc667de7eb575e712b4d7c916953275a93aded7af077cb2c7e4e622107945e2b336f057f7c0a59ad0023cd6247f46acd016c93d090fa104190ad9f96fa30847718a", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x50) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r5, 0x227b, &(0x7f00000001c0)=0x2001) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) readv(r6, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x3f}], 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) close(r4) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'dac02\x00', [0x4e24, 0x4, 0x24, 0x40300000, 0x7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0xdb, 0x9, 0x6, 0x6, 0xfffe, 0x10088, 0x3, 0x0, 0x4, 0x80000001, 0xf23, 0x2000007, 0xb, 0x2, 0x8003c, 0x0, 0xe90, 0x0, 0xfffffff8]}) 2.899892811s ago: executing program 1 (id=3663): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], 0x0, 0x7}, 0x94) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.791990057s ago: executing program 5 (id=3664): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000004c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xe3\xd1\xb5\xae*@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\b_\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03Ti\x1cSk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00\x00\x00\x00\x00\x81\xb8%yA)\x9bW\x12\f\xd0\x02\xdd\xa4\b\x9f6\xdd\x90Q\xddj@XKp\xd9F\x92\xb6kF\x9b$\x86\xcf\x060i}Z\v1\xa36\xe5\x182\xe8j8\xdf\x14\xd5', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) socket$inet6_sctp(0xa, 0x1, 0x84) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x9100, 0x5f) recvfrom$unix(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.182779653s ago: executing program 1 (id=3665): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xf, 0x9, 0x1, 0x0, 0x10000, 0x3, 0x4002004c2, 0x6ff, 0x9, 0x6, 0x400, 0x80, 0x89, 0x0, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.181580313s ago: executing program 7 (id=3666): syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x1, 0xfe00, 0x8000c62) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x2a8, 0x210, 0x2a8, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'veth0_to_batadv\x00', 'wlan0\x00', {}, {0xff}, 0x84, 0x2, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e20], [0x4e21, 0x4e24], [0x4, 0x8, 0x7f, 0x7, 0x1, 0x7, 0x1ff, 0x9, 0xab2, 0x2, 0x300000, 0x5, 0x9, 0x1, 0x9, 0xcd4, 0x7, 0xc5a, 0x4, 0x7, 0xffffffff, 0xb87d, 0x5b000000, 0x6, 0x1, 0x6c7f, 0x9, 0x0, 0x9, 0x9, 0x8, 0x0, 0x80000001, 0x9, 0x200, 0x71e5e785, 0xfffffbff, 0x19, 0xf6b, 0xab19, 0x81, 0x9, 0xf4, 0x9, 0x2, 0x2, 0x3, 0x1, 0x7, 0x5, 0xcd, 0x6, 0x8f, 0x9, 0x5, 0x4b7d, 0x9, 0x1, 0x7, 0x6, 0x4, 0x6, 0x2, 0xfaa0], 0x6, [{0x5, 0x2, 0xf8}, {0x9, 0x7f, 0x1}, {0x4, 0x9, 0x10}, {0xf, 0x5, 0x1}], 0x0, 0x1, 0x1}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2e, 0x0, 0x4}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x9, 0x2}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xff000000, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x0, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0xd, 0x8, [0x8, 0x27, 0x3d, 0x16, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x3f, 0x20, 0x28, 0x18, 0x22, 0x12], 0x0, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xb, 0x9}, {}, {0x9, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x1c, 0x2, [@TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_TO={0x8, 0x2, 0x9c}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xfff1, 0xf}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x4004) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.094739838s ago: executing program 1 (id=3667): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x300, 0x0, 0x0, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0xff]}}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x10}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00'], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xc4}, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, &(0x7f0000004f80)={0x3, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffeb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xfffffffffffffe89}}]}, 0x64}, 0x1, 0x0, 0x0, 0x404}, 0x800) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r7 = socket(0x29, 0x2, 0x0) write(r7, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)={0x2, 0x13, 0x9, 0x2, 0x21d, 0x0, 0x70bd2c, 0x25dfdbfd, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x0, 0x8, {0x6, 0x3c, 0x4, 0xae, 0x0, 0xff, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x34}, @in6=@mcast1}}, @sadb_x_nat_t_type={0x1, 0x14, 0x9}, @sadb_x_policy={0x8, 0x12, 0x2, 0x4, 0x0, 0x6e6bc0, 0x3, {0x6, 0x6c, 0xd7, 0x9, 0x0, 0x4, 0x0, @in6=@remote, @in=@local}}, @sadb_lifetime={0x4, 0x3, 0x9, 0x401, 0xa8, 0x40f9}, @sadb_x_sec_ctx={0x200, 0x18, 0x7, 0x4, 0xff8, "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"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d2}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0x0, 0x36, 0x2}]}, 0x10e8}}, 0x40d0) 2.094173608s ago: executing program 5 (id=3668): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x748, 0x0, &(0x7f0000000a00)="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", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc}, 0x50) r5 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$sndseq(r5, &(0x7f00000002c0)=[{0xff, 0x0, 0x0, 0x6, @time={0x9, 0x7}, {}, {}, @time=@time={0x5, 0x3}}, {0x0, 0x0, 0x80, 0x3, @time={0x7, 0x2}, {0x0, 0x32}, {}, @connect={{0x1, 0x2}, {0x9b, 0x9}}}], 0x38) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, 0x0) close(r4) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 965.048564ms ago: executing program 7 (id=3669): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) socket(0x10, 0x803, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r2, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x200440c0}, 0x4004801) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x15, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r3, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @any, 0x1}, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000600)=ANY=[], &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, 0x0, &(0x7f0000000040)) shutdown(r3, 0x1) 722.777348ms ago: executing program 1 (id=3670): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e5709"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 518.0342ms ago: executing program 7 (id=3671): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf10002000000a0c2000100000000002000"}) r1 = dup3(r0, 0xffffffffffffffff, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x19040) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff}, 0x0) tee(r5, r4, 0x9, 0x8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x40000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x59280, 0x3a0}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x0) write$nci(r1, &(0x7f0000000680)=ANY=[@ANYBLOB="50400079df9d171a2bf80fbd0c41f7b2a5c550998136a86805e56b677583bb86338ed0117eb79deeed3ff1fcc1b676dadb28f532dd91dce8a75b121292ce3d984d2dc431a0590ade8fa6a088129d06742d0656d9703959c8067bcccdf5c3d336e6676e966b0a77b72e68a8da1432ef1feef55c76886a88e44fc792b12af9d82b9055dd5b24d1928ded7029ac980e706083c1aebef0ccf0ebfdb8aa85df52bd5a8bea770042ea04000000f81dd6fc10ae8f5ecc43c24079a907de"], 0x4) ioctl$TIOCSETD(r1, 0x5423, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10003, 0x3, 0x60000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x922, 0x12) bind$alg(r6, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc04f01f56", 0x8) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000015c0)={0x4f4, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0x4d8, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf, 0x0, "40f677d84a270de3f128fe"}, @NL80211_BAND_6GHZ={0x35, 0x3, "1e95da2b40d214d450d80bd1f72f7a114b2ab44d5a362fe138df2f1e0df942b800c9f826298cb79f849fddad64cdbabe9d"}, @NL80211_BAND_5GHZ={0x19, 0x1, "246fc18703aa0341d1b86209d908fc7598ddd58110"}, @NL80211_BAND_2GHZ={0x46f, 0x0, "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"}]}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe4, 0x40, 0x98, 0x8, 0xc2e, 0x720, 0x9bf7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x83, 0x4b, 0x3c, 0x0, [], [{}]}}]}}]}}, 0x0) syz_open_dev$vbi(0x0, 0x1, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 148.865512ms ago: executing program 2 (id=3672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) close(r3) 0s ago: executing program 1 (id=3673): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f00000000c0)=0x5000) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000140)=0xdddd1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): r the cluster is laggy [ 954.458682][T12424] libceph: connect (1)[c::]:6789 error -101 [ 954.468646][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 954.614769][T14297] tipc: Enabled bearer , priority 10 [ 954.653040][T14297] device syzkaller0 entered promiscuous mode [ 954.684055][T14297] tipc: Resetting bearer [ 954.702125][T14296] tipc: Resetting bearer [ 954.772079][T14296] tipc: Disabling bearer [ 954.810435][T14302] loop2: detected capacity change from 0 to 4096 [ 955.012959][ T4271] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 955.023672][ T4271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 955.063034][ T26] audit: type=1326 audit(1769709547.306:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2674" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb30999aeb9 code=0x0 [ 955.166136][T14305] device syzkaller0 entered promiscuous mode [ 956.463787][T14314] tipc: Resetting bearer [ 957.411904][T14320] fuse: Unknown parameter 'group_id00000000000000000000' [ 958.670775][T14335] tipc: Enabled bearer , priority 10 [ 958.692655][T14331] loop2: detected capacity change from 0 to 4096 [ 958.826916][T14342] device syzkaller0 entered promiscuous mode [ 958.841580][T14331] EXT4-fs: Ignoring removed bh option [ 958.863945][T14335] tipc: Resetting bearer [ 958.935221][T14334] tipc: Resetting bearer [ 958.950993][T14331] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 959.730735][T14341] loop0: detected capacity change from 0 to 4096 [ 959.744015][T14334] tipc: Disabling bearer [ 959.842573][ T951] tipc: Node number set to 418018335 [ 960.344921][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 960.650224][ T4268] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 960.663899][ T4268] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 960.809258][T14357] tipc: Resetting bearer [ 963.329913][T14385] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 963.526939][T14387] loop6: detected capacity change from 0 to 4096 [ 963.567650][T14387] EXT4-fs: Ignoring removed bh option [ 963.638816][T14387] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 964.436062][ T4945] EXT4-fs (loop6): unmounting filesystem. [ 965.990920][T12424] libceph: connect (1)[c::]:6789 error -101 [ 966.124587][T14406] ceph: No mds server is up or the cluster is laggy [ 966.138667][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 966.504803][T12424] libceph: connect (1)[c::]:6789 error -101 [ 966.522257][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 967.187393][T14418] loop2: detected capacity change from 0 to 4096 [ 967.904166][T14422] loop1: detected capacity change from 0 to 4096 [ 967.911379][T14422] EXT4-fs: Ignoring removed bh option [ 967.986243][T14422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 969.090648][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 971.300322][T12424] libceph: connect (1)[c::]:6789 error -101 [ 971.321010][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 971.703996][T12424] libceph: connect (1)[c::]:6789 error -101 [ 971.712742][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 971.773106][T14454] ceph: No mds server is up or the cluster is laggy [ 972.337525][ T4271] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 972.531854][ T4271] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 973.086220][T14467] device syzkaller0 entered promiscuous mode [ 973.232099][T14467] netlink: 1028 bytes leftover after parsing attributes in process `syz.6.2718'. [ 973.287715][T14473] loop1: detected capacity change from 0 to 256 [ 973.396709][T14473] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 973.509391][T14475] loop2: detected capacity change from 0 to 4096 [ 973.551169][T14475] EXT4-fs: Ignoring removed bh option [ 973.625009][T14475] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 973.691940][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 974.322536][T14485] device syzkaller0 entered promiscuous mode [ 975.334403][T14487] tipc: Resetting bearer [ 976.467733][T14510] loop0: detected capacity change from 0 to 256 [ 977.178499][T14510] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 977.314536][T14514] loop5: detected capacity change from 0 to 4096 [ 977.353027][T14514] EXT4-fs: Ignoring removed bh option [ 977.459161][T14514] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 978.020433][ T4585] EXT4-fs (loop5): unmounting filesystem. [ 978.202455][ T3599] libceph: connect (1)[c::]:6789 error -101 [ 978.209782][ T3599] libceph: mon0 (1)[c::]:6789 connect error [ 978.216218][ T951] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 978.731015][ T3599] libceph: connect (1)[c::]:6789 error -101 [ 978.738357][ T951] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 978.753815][ T3599] libceph: mon0 (1)[c::]:6789 connect error [ 978.769756][ T951] usb 1-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 978.792103][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.814183][ T951] usb 1-1: config 0 descriptor?? [ 978.832743][ T951] metro_usb 1-1:0.0: required endpoints missing [ 979.025819][T14524] ceph: No mds server is up or the cluster is laggy [ 979.038687][ T951] usb 1-1: USB disconnect, device number 29 [ 979.582877][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2744'. [ 979.598127][T14539] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2744'. [ 980.259398][T14542] device syzkaller0 entered promiscuous mode [ 983.546840][T14560] loop2: detected capacity change from 0 to 4096 [ 983.584874][T14560] EXT4-fs: Ignoring removed bh option [ 983.678252][T14560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 984.549087][ T4271] EXT4-fs (loop2): unmounting filesystem. [ 985.203073][T14583] netlink: 'syz.5.2758': attribute type 13 has an invalid length. [ 985.211141][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2758'. [ 985.381702][ T951] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 985.430383][T14587] device syzkaller0 entered promiscuous mode [ 985.439026][T14587] tipc: Resetting bearer [ 985.584250][ T951] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 985.608717][ T951] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 985.631226][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.744781][ T951] usb 7-1: config 0 descriptor?? [ 985.780388][ T951] metro_usb 7-1:0.0: required endpoints missing [ 985.996554][ T4324] usb 7-1: USB disconnect, device number 28 [ 986.286805][ T951] libceph: connect (1)[c::]:6789 error -101 [ 986.310664][ T951] libceph: mon0 (1)[c::]:6789 connect error [ 986.794548][T14603] loop0: detected capacity change from 0 to 4096 [ 987.438978][ T951] libceph: connect (1)[c::]:6789 error -101 [ 987.445219][ T951] libceph: mon0 (1)[c::]:6789 connect error [ 987.465098][T14602] ceph: No mds server is up or the cluster is laggy [ 987.502249][T14603] EXT4-fs: Ignoring removed bh option [ 987.598104][T14603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 987.684285][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 987.770726][T14625] netlink: 'syz.0.2769': attribute type 1 has an invalid length. [ 987.800745][ T26] audit: type=1326 audit(1769709580.038:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14627 comm="syz.6.2770" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2458f9aeb9 code=0x0 [ 987.805629][T14625] 8021q: adding VLAN 0 to HW filter on device bond2 [ 988.220087][T14634] device syzkaller0 entered promiscuous mode [ 988.260202][T14619] loop1: detected capacity change from 0 to 4096 [ 989.333347][T14630] bond2: (slave gretap1): making interface the new active one [ 989.394401][T14630] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 989.435155][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 989.929011][T14650] loop0: detected capacity change from 0 to 256 [ 989.952390][T14650] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 991.781103][T14673] loop6: detected capacity change from 0 to 4096 [ 991.854785][T14673] EXT4-fs: Ignoring removed bh option [ 991.990869][T14673] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 992.338596][ T4945] EXT4-fs (loop6): unmounting filesystem. [ 992.541582][ T4324] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 993.837235][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.849922][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.898011][ T4324] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 993.921321][ T4324] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 993.931072][ T4324] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.955293][ T4324] usb 6-1: config 0 descriptor?? [ 993.976567][ T4324] metro_usb 6-1:0.0: required endpoints missing [ 994.222226][ T4333] usb 6-1: USB disconnect, device number 35 [ 994.253771][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 994.261224][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 994.637592][T14703] netlink: 'syz.6.2792': attribute type 13 has an invalid length. [ 994.859515][T14698] loop2: detected capacity change from 0 to 256 [ 994.887072][T14698] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 995.871753][ T4324] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 996.067354][ T4324] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 996.091230][ T4324] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 996.151207][ T4324] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.190672][ T4324] usb 7-1: config 0 descriptor?? [ 996.214402][ T4324] metro_usb 7-1:0.0: required endpoints missing [ 997.464113][ T951] usb 7-1: USB disconnect, device number 29 [ 997.770250][T14718] loop1: detected capacity change from 0 to 4096 [ 997.783548][T14718] EXT4-fs: Ignoring removed bh option [ 997.852547][T14718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 998.070423][ T4267] EXT4-fs (loop1): unmounting filesystem. [ 998.339857][T14741] loop5: detected capacity change from 0 to 4096 [ 998.506933][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2804'. [ 999.463599][T14762] device syzkaller0 entered promiscuous mode [ 1001.801122][T14773] tipc: Enabled bearer , priority 10 [ 1001.889038][T14773] device syzkaller0 entered promiscuous mode [ 1002.680918][T14771] tipc: Resetting bearer [ 1002.864668][T14771] tipc: Disabling bearer [ 1004.871293][ T4585] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1004.877749][ T4585] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1005.028820][T14797] loop0: detected capacity change from 0 to 4096 [ 1005.066441][T14797] EXT4-fs: Ignoring removed bh option [ 1005.132559][T14797] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1005.648207][T14815] netlink: 'syz.1.2823': attribute type 13 has an invalid length. [ 1005.658771][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1006.650389][T14828] tipc: Enabled bearer , priority 10 [ 1006.667767][T14828] device syzkaller0 entered promiscuous mode [ 1006.756781][T14836] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1006.767616][T14836] qnx6: wrong signature (magic) in superblock #1. [ 1006.774250][T14836] qnx6: unable to read the first superblock [ 1007.030822][T14835] tipc: Resetting bearer [ 1007.115910][T14824] tipc: Resetting bearer [ 1007.239362][T14824] tipc: Disabling bearer [ 1007.404151][T14844] netlink: 'syz.2.2830': attribute type 13 has an invalid length. [ 1007.572069][T14844] tipc: Resetting bearer [ 1009.271285][T14851] loop6: detected capacity change from 0 to 4096 [ 1009.326146][T14851] EXT4-fs: Ignoring removed bh option [ 1009.478743][T14851] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 1009.577937][T14857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.629764][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.639910][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.647837][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.656765][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1009.664265][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.683457][ T4284] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1009.694300][ T4284] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1009.701881][ T4284] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1009.711501][ T4284] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1009.719545][ T4284] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1009.727680][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1009.761226][ T4945] EXT4-fs (loop6): unmounting filesystem. [ 1010.038562][T14868] netlink: 'syz.6.2835': attribute type 13 has an invalid length. [ 1010.640281][ T4333] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1011.535533][ T4333] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1011.549662][ T4333] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1011.590665][ T4333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.664698][ T4333] usb 6-1: config 0 descriptor?? [ 1011.710391][ T4333] metro_usb 6-1:0.0: required endpoints missing [ 1011.739201][T14882] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2841'. [ 1011.753935][ T4284] Bluetooth: hci0: command 0x0409 tx timeout [ 1011.927597][T12424] usb 6-1: USB disconnect, device number 36 [ 1012.410393][T14889] netlink: 'syz.6.2843': attribute type 13 has an invalid length. [ 1012.445631][T14856] chnl_net:caif_netlink_parms(): no params data found [ 1013.270469][ T4587] tipc: Left network mode [ 1013.574447][T14901] loop5: detected capacity change from 0 to 4096 [ 1013.591294][T14901] EXT4-fs: Ignoring removed bh option [ 1013.824079][T14901] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1013.862151][ T4284] Bluetooth: hci0: command 0x041b tx timeout [ 1013.901088][T14901] Bluetooth: MGMT ver 1.22 [ 1013.951801][T14856] bridge0: port 1(bridge_slave_0) entered blocking state [ 1013.959095][T14856] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.021591][T14856] device bridge_slave_0 entered promiscuous mode [ 1014.075719][T14856] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.092936][ T4585] EXT4-fs (loop5): unmounting filesystem. [ 1014.148988][T14856] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.157644][T14856] device bridge_slave_1 entered promiscuous mode [ 1014.382680][T14916] netlink: 'syz.5.2848': attribute type 13 has an invalid length. [ 1014.447068][T14856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1014.456319][ T26] audit: type=1326 audit(1769709606.689:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14918 comm="syz.2.2849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3bb699aeb9 code=0x0 [ 1014.576600][T14856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1014.653269][T14923] tipc: Resetting bearer [ 1014.680187][T14929] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2851'. [ 1014.685708][T14856] team0: Port device team_slave_0 added [ 1014.745467][T14856] team0: Port device team_slave_1 added [ 1014.922357][T14856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.949758][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.142771][T14856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.155346][T14856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.162367][T14856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.877425][T14856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1015.910136][ T4284] Bluetooth: hci0: command 0x040f tx timeout [ 1016.632126][T14856] device hsr_slave_0 entered promiscuous mode [ 1016.740915][T14856] device hsr_slave_1 entered promiscuous mode [ 1017.188261][T14856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.217563][T14856] Cannot create hsr debugfs directory [ 1017.572368][T14947] netlink: 'syz.5.2856': attribute type 13 has an invalid length. [ 1017.989973][ T4284] Bluetooth: hci0: command 0x0419 tx timeout [ 1018.087637][T14969] netlink: 'syz.5.2861': attribute type 13 has an invalid length. [ 1018.244198][T14970] netlink: 1028 bytes leftover after parsing attributes in process `syz.0.2860'. [ 1018.329889][T12424] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 1018.360209][T14974] device syzkaller0 entered promiscuous mode [ 1018.661834][T12424] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1018.673728][T12424] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1018.683000][T12424] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.693426][T12424] usb 7-1: config 0 descriptor?? [ 1018.755668][T14992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2863'. [ 1018.768803][T14992] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2863'. [ 1019.440398][T12424] metro_usb 7-1:0.0: required endpoints missing [ 1019.608044][ T3599] usb 7-1: USB disconnect, device number 30 [ 1019.859321][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2864'. [ 1020.487621][T15006] bond1: (slave vlan0): Releasing active interface [ 1020.510850][T15006] bond2: (slave gretap1): Releasing active interface [ 1020.631270][ T26] audit: type=1326 audit(1769709612.880:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15008 comm="syz.5.2867" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257799aeb9 code=0x0 [ 1020.821872][T12424] libceph: connect (1)[c::]:6789 error -101 [ 1020.829327][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 1020.968822][T15014] ceph: No mds server is up or the cluster is laggy [ 1021.329834][T12417] libceph: connect (1)[c::]:6789 error -101 [ 1021.337095][T12417] libceph: mon0 (1)[c::]:6789 connect error [ 1021.359928][ T4587] device hsr_slave_0 left promiscuous mode [ 1021.371164][ T4587] device hsr_slave_1 left promiscuous mode [ 1022.775556][ T4587] bond0 (unregistering): Released all slaves [ 1022.872303][T15021] netlink: 'syz.6.2870': attribute type 13 has an invalid length. [ 1022.889066][T15033] netlink: 'syz.2.2871': attribute type 13 has an invalid length. [ 1022.901361][T15033] tipc: Resetting bearer [ 1023.458103][T15043] device syzkaller0 left promiscuous mode [ 1023.691531][T15045] netlink: 1028 bytes leftover after parsing attributes in process `syz.5.2876'. [ 1023.774016][T15054] device syzkaller0 entered promiscuous mode [ 1023.950082][ T3599] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1023.996928][T15049] device syzkaller0 entered promiscuous mode [ 1024.151590][ T3599] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1024.192711][ T3599] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1024.262525][ T3599] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.326931][ T3599] usb 3-1: config 0 descriptor?? [ 1024.386026][ T3599] metro_usb 3-1:0.0: required endpoints missing [ 1024.456158][T14856] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1024.518225][T14856] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1024.708492][T14856] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1025.402982][ T951] usb 3-1: USB disconnect, device number 27 [ 1025.466644][T14856] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1025.492167][T15081] netlink: 'syz.6.2882': attribute type 13 has an invalid length. [ 1026.055835][T14856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.654342][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1026.720410][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1026.731975][T14856] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.895420][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1026.914329][ T26] audit: type=1326 audit(1769709619.150:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15110 comm="syz.6.2885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2458f9aeb9 code=0x0 [ 1027.035187][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1027.087845][ T4444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1027.095135][ T4444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1027.103404][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1027.129131][T15116] device syzkaller0 entered promiscuous mode [ 1027.202775][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1027.230030][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1027.277712][ T4521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.285018][ T4521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.395420][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1027.404760][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1027.424555][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1028.165786][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1028.244721][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1028.363782][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1028.410209][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1028.426613][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1028.459948][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1028.498242][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1028.567869][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1028.750731][T14856] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1029.573796][T15151] tipc: Enabled bearer , priority 10 [ 1029.608517][T15151] device syzkaller0 entered promiscuous mode [ 1029.699151][T15151] tipc: Resetting bearer [ 1029.716817][T15144] tipc: Resetting bearer [ 1029.744845][T15144] tipc: Disabling bearer [ 1029.896171][T15162] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1030.056316][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1030.073955][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1030.136099][T14856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.867294][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1030.898150][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1030.935695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1030.960543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1031.465938][T14856] device veth0_vlan entered promiscuous mode [ 1032.684017][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.803150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.859656][T14856] device veth1_vlan entered promiscuous mode [ 1033.266405][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1033.441700][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1033.550917][T14856] device veth0_macvtap entered promiscuous mode [ 1033.645775][T14856] device veth1_macvtap entered promiscuous mode [ 1033.768572][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1033.865307][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1034.008672][T14856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1034.027069][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1034.073423][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1034.103029][T14856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1034.121999][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1034.155729][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1034.182072][T14856] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.201827][T14856] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.242933][T14856] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.273727][T14856] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1034.491099][ T4385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.516463][ T4385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.579415][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1034.615680][ T4637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.615875][T15209] netlink: 'syz.2.2910': attribute type 13 has an invalid length. [ 1034.669033][ T4637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.730579][ T4587] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1035.308693][T15225] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2831'. [ 1037.395881][T15244] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2915'. [ 1038.564757][T15250] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1038.576334][T15250] qnx6: wrong signature (magic) in superblock #1. [ 1038.583067][T15250] qnx6: unable to read the first superblock [ 1039.100066][T15258] netlink: 'syz.1.2921': attribute type 13 has an invalid length. [ 1041.800211][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1041.811249][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1041.820725][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1041.857775][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1041.867165][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1041.875846][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1043.001903][T15258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.003388][T15291] loop0: detected capacity change from 0 to 512 [ 1043.009387][T15258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.294725][T15291] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1043.404783][T15291] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1043.605632][T15291] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1043.732991][T15291] EXT4-fs (loop0): 1 truncate cleaned up [ 1043.783078][T15291] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1043.918779][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1044.825836][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1045.356748][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1045.403523][T15258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1045.959807][T15258] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.968825][T15258] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.977788][T15258] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.987059][T15258] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.988651][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1048.254363][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 1048.594380][T15321] fuse: Unknown parameter 'use00000000000000000000' [ 1049.106300][T15276] chnl_net:caif_netlink_parms(): no params data found [ 1049.341765][T15328] overlayfs: failed to create directory ./file0/work (errno: 22); mounting read-only [ 1049.574735][T15276] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.653164][T15276] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.703215][T15276] device bridge_slave_0 entered promiscuous mode [ 1049.712190][T15276] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.719447][T15276] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.727608][T15276] device bridge_slave_1 entered promiscuous mode [ 1049.756271][T15276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.914307][ T4444] tipc: Disabling bearer [ 1049.961291][ T4444] tipc: Left network mode [ 1050.060039][T15276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.318501][ T4284] Bluetooth: hci2: command 0x0419 tx timeout [ 1050.927550][T15276] team0: Port device team_slave_0 added [ 1051.792066][ T4324] libceph: connect (1)[c::]:6789 error -101 [ 1051.938606][T15368] ceph: No mds server is up or the cluster is laggy [ 1052.216960][T15276] team0: Port device team_slave_1 added [ 1052.222892][ T4324] libceph: mon0 (1)[c::]:6789 connect error [ 1052.333610][T15374] fuse: Bad value for 'group_id' [ 1052.999741][T15276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.006726][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.224632][T15387] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2949'. [ 1054.256300][T15276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.327312][T15276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.336085][T15276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.390785][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.397141][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.480300][T15276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.667255][T15276] device hsr_slave_0 entered promiscuous mode [ 1054.735801][T15276] device hsr_slave_1 entered promiscuous mode [ 1059.127924][T15444] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2962'. [ 1060.079104][ T26] audit: type=1326 audit(1769709652.332:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15457 comm="syz.6.2966" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2458f9aeb9 code=0x0 [ 1060.785480][T15462] fuse: Bad value for 'group_id' [ 1060.793382][T15460] device syzkaller0 entered promiscuous mode [ 1062.550344][ T4444] device hsr_slave_0 left promiscuous mode [ 1062.581964][ T4444] device hsr_slave_1 left promiscuous mode [ 1062.619296][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.645356][ T4444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1063.482300][ T4444] device bridge_slave_1 left promiscuous mode [ 1063.500456][ T4444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.550283][ T4444] device bridge_slave_0 left promiscuous mode [ 1063.572568][ T4444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.354283][ T4444] device team_slave_1 left promiscuous mode [ 1065.401715][ T4444] team0 (unregistering): Port device team_slave_1 removed [ 1065.550977][ T4444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1065.578411][ T4444] device bond_slave_1 left promiscuous mode [ 1065.631975][ T4444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.660198][ T4444] device bond_slave_0 left promiscuous mode [ 1066.387701][ T4444] bond0 (unregistering): Released all slaves [ 1067.376547][ T26] audit: type=1326 audit(1769709659.622:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15525 comm="syz.6.2980" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2458f9aeb9 code=0x0 [ 1068.736137][T15540] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2981'. [ 1069.176559][T15552] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2984'. [ 1070.120245][T15276] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1071.425388][T15276] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1071.890289][T15276] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1071.963548][T15276] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1074.023377][T15276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.200635][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1074.225677][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1074.303380][T15276] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.385928][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1074.408382][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1074.453405][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 1074.460555][ T4634] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1074.742315][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1075.755539][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1075.822966][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1075.889669][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 1075.896901][ T4634] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1075.966399][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1075.992752][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1076.224394][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1076.362906][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1076.428449][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1076.484428][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1076.503870][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1076.576137][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1076.715006][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1077.460100][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1077.682718][T15628] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2999'. [ 1078.304995][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1078.368990][T15276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1079.959020][T15644] loop0: detected capacity change from 0 to 4096 [ 1080.001993][T15644] EXT4-fs: Ignoring removed bh option [ 1080.099298][T15644] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1080.304039][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1080.327903][ T4324] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 1081.843923][ T4324] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1081.868029][ T26] audit: type=1326 audit(1769709674.123:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15673 comm="syz.5.3011" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f257799aeb9 code=0x0 [ 1081.889994][ T4324] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1081.907146][ T4324] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.935232][ T4324] usb 2-1: config 0 descriptor?? [ 1081.957801][ T4324] metro_usb 2-1:0.0: required endpoints missing [ 1081.963083][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1081.976450][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1082.005910][T15276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1082.052327][T15678] device syzkaller0 entered promiscuous mode [ 1082.102503][ T3599] usb 2-1: USB disconnect, device number 30 [ 1082.163422][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1082.204153][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1082.847246][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1082.858127][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1082.907864][T15276] device veth0_vlan entered promiscuous mode [ 1082.925024][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1082.948026][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1082.971816][T15276] device veth1_vlan entered promiscuous mode [ 1082.987854][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1083.306020][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1083.318973][T15696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3015'. [ 1083.762542][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1083.784310][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1083.838391][T15276] device veth0_macvtap entered promiscuous mode [ 1083.934837][T15276] device veth1_macvtap entered promiscuous mode [ 1084.048714][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1084.099307][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1084.135830][T15703] netlink: 'syz.6.3017': attribute type 13 has an invalid length. [ 1084.173201][T15276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.203740][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1084.223171][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1084.254328][T15276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.283124][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1084.314397][ T4637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1084.331418][T15276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.343125][T15276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.354529][T15276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.372186][T15276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.625872][ T4444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.660787][ T4444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.727038][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1084.746492][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1084.773998][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1084.826560][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1084.943385][T15724] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3021'. [ 1089.161238][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1089.181117][ T4280] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1089.193628][ T4280] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1089.206522][ T4280] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1089.217816][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1089.226975][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1089.247816][T15757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1089.260835][T15757] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3028'. [ 1090.641845][T15752] chnl_net:caif_netlink_parms(): no params data found [ 1090.668973][T15786] device syzkaller0 entered promiscuous mode [ 1090.682559][ T56] tipc: Left network mode [ 1091.377266][ T4284] Bluetooth: hci4: command 0x0409 tx timeout [ 1091.884507][ T26] audit: type=1326 audit(2000000009.000:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15802 comm="syz.0.3036" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb30999aeb9 code=0x0 [ 1092.734097][T15752] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.755962][T15752] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.764102][T15752] device bridge_slave_0 entered promiscuous mode [ 1092.955649][T15813] device syzkaller0 entered promiscuous mode [ 1093.281473][T15752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.307100][T15820] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3038'. [ 1093.350064][T15752] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.444533][T15752] device bridge_slave_1 entered promiscuous mode [ 1093.466048][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 1094.020214][T15752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.591079][T15752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.505647][ T4284] Bluetooth: hci4: command 0x040f tx timeout [ 1095.688558][T15752] team0: Port device team_slave_0 added [ 1095.707867][T15752] team0: Port device team_slave_1 added [ 1096.381741][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1096.470326][T15752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.478992][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.508899][T15752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.676289][T15752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.683281][T15752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1096.711688][T15752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.792622][T15752] device hsr_slave_0 entered promiscuous mode [ 1096.799725][T15752] device hsr_slave_1 entered promiscuous mode [ 1096.806453][T15752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.824303][T15752] Cannot create hsr debugfs directory [ 1097.050732][ T26] audit: type=1326 audit(2000000014.220:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15864 comm="syz.2.3050" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x0 [ 1097.595128][ T4284] Bluetooth: hci4: command 0x0419 tx timeout [ 1097.903121][T15882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1097.905932][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1097.925481][T15882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3052'. [ 1097.980571][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1099.730021][ T56] device hsr_slave_0 left promiscuous mode [ 1099.756675][ T56] device hsr_slave_1 left promiscuous mode [ 1102.862298][T15921] loop2: detected capacity change from 0 to 256 [ 1102.958407][T15921] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1102.998174][ T26] audit: type=1326 audit(2000000020.171:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15936 comm="syz.6.3063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2458f9aeb9 code=0x0 [ 1104.306738][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1110.065277][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.544888][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1111.987722][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1112.395501][T16046] device syzkaller0 entered promiscuous mode [ 1112.762896][T15752] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1112.797208][T15752] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1112.897434][T15752] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1112.936177][T16057] loop0: detected capacity change from 0 to 4096 [ 1112.943445][T16057] EXT4-fs: Ignoring removed bh option [ 1112.962599][T15752] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1113.004000][T16057] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1113.595770][T16068] fuse: Unknown parameter 'group_i00000000000000000000' [ 1114.613186][T15752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.659206][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1114.719721][T15752] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.757947][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1114.769013][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1115.007706][T16083] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1115.019174][T16083] qnx6: wrong signature (magic) in superblock #1. [ 1115.025721][T16083] qnx6: unable to read the first superblock [ 1115.354397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1115.413375][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1115.584696][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 1115.592650][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1115.829011][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.836709][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1115.850594][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.972397][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1116.157130][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1116.321162][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.328368][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1116.435276][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1116.444325][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1116.454712][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1116.467198][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1116.476209][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1116.484213][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1116.484490][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1116.524666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1116.657587][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1116.787873][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1116.811630][T16104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1116.822605][T16104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3091'. [ 1116.990013][ T4434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1117.004467][ T26] audit: type=1326 audit(2000000034.161:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16101 comm="syz.2.3092" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x0 [ 1117.296478][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1117.376443][T15752] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1117.388034][T15752] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1117.447438][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1117.469517][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1119.828856][T16133] loop0: detected capacity change from 0 to 4096 [ 1119.865100][T16133] EXT4-fs: Ignoring removed bh option [ 1119.962981][T16133] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1120.196987][ T4268] EXT4-fs (loop0): unmounting filesystem. [ 1120.323963][T16150] loop2: detected capacity change from 0 to 4096 [ 1120.352368][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1120.406088][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1120.512149][T15752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1120.658970][T16152] loop0: detected capacity change from 0 to 256 [ 1120.676166][T16152] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1121.581213][T12417] libceph: connect (1)[c::]:6789 error -101 [ 1121.591992][T12417] libceph: mon0 (1)[c::]:6789 connect error [ 1121.709337][T16173] ceph: No mds server is up or the cluster is laggy [ 1121.929346][T12424] libceph: connect (1)[c::]:6789 error -101 [ 1121.940383][T12424] libceph: mon0 (1)[c::]:6789 connect error [ 1122.129041][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1122.178451][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1122.257981][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1122.295189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1122.331842][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1122.460472][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1122.978786][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.019107][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1123.115729][T15752] device veth0_vlan entered promiscuous mode [ 1123.147649][T15752] device veth1_vlan entered promiscuous mode [ 1123.259105][T15752] device veth0_macvtap entered promiscuous mode [ 1123.278614][T15752] device veth1_macvtap entered promiscuous mode [ 1123.288704][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1124.437439][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1124.538210][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1124.577890][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1124.651897][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1124.703870][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1124.750620][T15752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1124.804508][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1124.824307][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1124.853938][T15752] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1124.889653][T15752] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1125.035205][T15752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1125.045825][T15752] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.054624][T15752] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.063301][T15752] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.072119][T15752] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1125.161641][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1125.200832][T15276] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 1125.209366][T15276] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 1125.223396][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1126.920064][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1126.946369][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1126.999483][T11009] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1127.007671][ T4636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1127.026917][ T4636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1127.257020][ T4521] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1128.624031][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.766183][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1129.232504][T16241] device syzkaller0 entered promiscuous mode [ 1133.663435][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 1133.904834][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.383744][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.854565][T16370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1138.012012][T16378] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3136'. [ 1139.541095][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1139.638986][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1139.649755][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1139.771846][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1139.782289][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1139.787796][T16397] device syzkaller0 entered promiscuous mode [ 1139.790311][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1139.803868][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1140.143987][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1141.554287][T16391] chnl_net:caif_netlink_parms(): no params data found [ 1141.762360][T16431] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3149'. [ 1141.823177][ T4280] Bluetooth: hci5: command 0x0409 tx timeout [ 1141.829598][T16391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.839954][T16391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.866627][T16391] device bridge_slave_0 entered promiscuous mode [ 1141.915131][T16391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1142.012544][T16391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1142.063655][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1142.094805][T16391] device bridge_slave_1 entered promiscuous mode [ 1143.052140][T16391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1143.304375][T16391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1143.412545][T16391] team0: Port device team_slave_0 added [ 1143.441930][T16391] team0: Port device team_slave_1 added [ 1143.478888][T16391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.489649][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1143.532719][T16391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1144.052846][ T4280] Bluetooth: hci5: command 0x041b tx timeout [ 1144.316876][T16391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1144.339077][T16391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1144.774694][T16391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1145.188314][T16391] device hsr_slave_0 entered promiscuous mode [ 1145.222506][T16391] device hsr_slave_1 entered promiscuous mode [ 1145.238156][T16391] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1145.276182][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1145.281138][T16391] Cannot create hsr debugfs directory [ 1145.757928][T16482] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1145.903237][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1146.063111][ T4284] Bluetooth: hci5: command 0x040f tx timeout [ 1146.390823][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1146.404406][T16500] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3165'. [ 1148.142712][ T4284] Bluetooth: hci5: command 0x0419 tx timeout [ 1149.527870][T16391] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1149.578752][T16391] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1149.711647][T16391] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1150.634055][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1150.643054][T16391] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1150.943737][T16534] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3172'. [ 1151.494653][ T26] audit: type=1326 audit(2000000018.031:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43ed9aeb9 code=0x7ffc0000 [ 1151.557761][ T26] audit: type=1326 audit(2000000018.051:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43ed9aeb9 code=0x7ffc0000 [ 1151.664900][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1151.988459][T16391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.779306][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1152.834188][ T26] audit: type=1326 audit(2000000018.061:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fe43ed9aeb9 code=0x7ffc0000 [ 1152.865609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1152.939864][T16391] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.995952][ T26] audit: type=1326 audit(2000000018.491:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43ed9aeb9 code=0x7ffc0000 [ 1153.226677][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1153.286727][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1153.421606][ T26] audit: type=1326 audit(2000000018.491:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16555 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe43ed9aeb9 code=0x7ffc0000 [ 1153.449306][ T4402] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.456497][ T4402] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.582957][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1153.631873][ T26] audit: type=1326 audit(2000000018.511:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe43ed5b78e code=0x7ffc0000 [ 1153.668662][ T26] audit: type=1326 audit(2000000019.401:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16559 comm="syz.1.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7fe43ed9aeb9 code=0x7ffc0000 [ 1153.680729][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1153.695963][ T26] audit: type=1326 audit(2000000020.171:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16569 comm="syz.6.3182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2458f9aeb9 code=0x0 [ 1153.763580][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1153.776994][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1153.789023][ T4402] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.796185][ T4402] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.813074][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1153.828345][ T4402] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1153.838682][T16572] fuse: Bad value for 'user_id' [ 1153.857408][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1154.297032][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1154.388125][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1154.406703][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1154.443845][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1154.467167][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1154.491727][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1154.546191][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1154.595626][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1154.692871][T16574] device syzkaller0 entered promiscuous mode [ 1155.365072][T16391] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1155.849328][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1155.957931][T16618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3187'. [ 1155.971012][T16618] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3187'. [ 1157.662808][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1158.961453][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1159.109126][T16638] loop6: detected capacity change from 0 to 256 [ 1159.504394][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1159.840316][T16391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1159.976334][T16638] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1161.092437][T16656] device syzkaller0 entered promiscuous mode [ 1161.265715][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1163.187326][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1164.222137][ T4284] Bluetooth: hci2: command 0x0406 tx timeout [ 1164.834829][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1164.863052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1164.908065][T16391] device veth0_vlan entered promiscuous mode [ 1164.944204][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1164.976097][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1165.768095][T16391] device veth1_vlan entered promiscuous mode [ 1165.813976][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1165.876338][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1165.935004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1166.123794][T16391] device veth0_macvtap entered promiscuous mode [ 1166.141725][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1166.982555][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1166.992334][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1167.004444][T16391] device veth1_macvtap entered promiscuous mode [ 1167.035577][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1167.087414][T16713] device syzkaller0 entered promiscuous mode [ 1167.625692][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3211'. [ 1167.635939][T16718] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3211'. [ 1167.861562][T16710] loop2: detected capacity change from 0 to 256 [ 1167.921000][T16710] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1168.150263][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.199708][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.226514][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1168.257656][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.302527][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1168.327326][T16391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.378517][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1168.446805][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1168.478445][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.522451][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.561512][T16391] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1168.608154][T16391] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1168.664499][T16391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.720140][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3204'. [ 1168.751019][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1168.770485][T15933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1168.815696][T16391] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.840652][T16391] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.880737][T16391] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.941721][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1168.956427][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1169.047991][T16391] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.748826][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1170.012233][T16738] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1170.077211][ T4434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.668025][ T4434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.836191][T16687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1171.995242][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.008095][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.057423][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1172.786107][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.064891][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1174.881939][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1175.351450][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1177.184751][T16794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3227'. [ 1177.266510][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.273192][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.543541][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1180.461873][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1180.473084][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1182.507487][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1182.595978][ T4280] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1182.608035][ T4280] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1182.616523][ T4280] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1182.624415][ T4280] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1182.632006][ T4280] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1182.640345][ T4280] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1183.079497][T16835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3240'. [ 1184.355195][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.618590][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.700741][ T4280] Bluetooth: hci1: command 0x0409 tx timeout [ 1184.764388][T16842] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3242'. [ 1185.035840][T16826] chnl_net:caif_netlink_parms(): no params data found [ 1185.700967][T14694] tipc: Left network mode [ 1185.872926][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1186.221450][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1186.439256][T16826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.540906][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.581208][ T26] audit: type=1326 audit(2000000053.122:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1186.624572][T16826] device bridge_slave_0 entered promiscuous mode [ 1186.786517][ T26] audit: type=1326 audit(2000000053.122:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1186.792000][ T4280] Bluetooth: hci1: command 0x041b tx timeout [ 1187.202747][ T26] audit: type=1326 audit(2000000053.122:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f90847573ac code=0x7ffc0000 [ 1187.254825][T16826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.262069][T16211] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 1187.280002][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.298793][T16826] device bridge_slave_1 entered promiscuous mode [ 1187.356624][ T26] audit: type=1326 audit(2000000053.122:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f908475740e code=0x7ffc0000 [ 1187.457118][ T26] audit: type=1326 audit(2000000053.122:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f908479ab4b code=0x7ffc0000 [ 1187.484030][T16211] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1187.510379][T16211] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1187.532065][T16826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.550080][ T26] audit: type=1326 audit(2000000053.122:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1187.620360][T16211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.660372][ T26] audit: type=1326 audit(2000000053.122:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1187.685033][T16826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.740987][T16211] usb 2-1: config 0 descriptor?? [ 1187.771125][T16211] metro_usb 2-1:0.0: required endpoints missing [ 1187.776152][ T26] audit: type=1326 audit(2000000053.122:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1187.863992][ T26] audit: type=1326 audit(2000000053.192:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1187.953625][T16211] usb 2-1: USB disconnect, device number 31 [ 1187.994883][ T26] audit: type=1326 audit(2000000053.192:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16872 comm="syz.2.3248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f908479aeb9 code=0x7ffc0000 [ 1188.043602][T16826] team0: Port device team_slave_0 added [ 1188.126187][T16826] team0: Port device team_slave_1 added [ 1188.232325][T16893] loop7: detected capacity change from 0 to 4096 [ 1188.269025][T16826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.307992][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1188.415033][T16826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.860374][ T4280] Bluetooth: hci1: command 0x040f tx timeout [ 1188.949135][T16391] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 1188.966543][T16391] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1188.991555][T16826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1189.018917][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1189.130372][T16826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1189.433357][T16920] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3256'. [ 1189.592577][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1190.614795][T16826] device hsr_slave_0 entered promiscuous mode [ 1190.631114][T16826] device hsr_slave_1 entered promiscuous mode [ 1190.835016][T16211] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1190.940273][ T4284] Bluetooth: hci1: command 0x0419 tx timeout [ 1191.251183][T16826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1191.259791][T16826] Cannot create hsr debugfs directory [ 1191.385256][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1191.400602][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1191.485143][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3263'. [ 1191.498550][T16948] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3263'. [ 1193.902300][ T3599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1194.087288][T16964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3267'. [ 1194.269476][T14694] device hsr_slave_0 left promiscuous mode [ 1194.282538][T14694] device hsr_slave_1 left promiscuous mode [ 1194.700158][T12424] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 1194.881914][T12424] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1194.905065][T12424] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1194.934420][T12424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1194.974809][T12424] usb 3-1: config 0 descriptor?? [ 1195.000930][T12424] metro_usb 3-1:0.0: required endpoints missing [ 1195.189393][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.969585][T14694] bond0 (unregistering): Released all slaves [ 1196.088991][T16956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1196.099099][T16956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1196.110766][T16956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1196.176030][ T4324] usb 3-1: USB disconnect, device number 28 [ 1196.209670][T16987] device syzkaller0 entered promiscuous mode [ 1196.483452][T17006] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1196.484797][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1196.494166][T17006] qnx6: wrong signature (magic) in superblock #1. [ 1196.511479][T17006] qnx6: unable to read the first superblock [ 1196.519560][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1197.851105][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1198.512925][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1198.524106][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1198.616790][ T3599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1199.938072][T17045] kvm: pic: non byte write [ 1200.304709][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1200.941334][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1201.368844][T16826] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1201.619309][T16826] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1202.457187][T16826] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1202.689506][T16826] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1202.867016][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1202.889895][ T3599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1202.913006][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1203.000400][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1203.027425][T17085] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1203.319814][ T4332] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 1203.408760][T17117] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1203.419474][T17117] qnx6: wrong signature (magic) in superblock #1. [ 1203.425950][T17117] qnx6: unable to read the first superblock [ 1203.694822][ T4332] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1203.722584][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 1203.722597][ T26] audit: type=1326 audit(2000000000.790:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1203.730117][ T4332] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1203.787150][T16826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1203.839464][ T26] audit: type=1326 audit(2000000000.820:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1203.840421][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1203.890781][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.908287][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1203.916841][ T4332] usb 3-1: config 0 descriptor?? [ 1203.933597][ T4332] metro_usb 3-1:0.0: required endpoints missing [ 1203.942382][ T26] audit: type=1326 audit(2000000000.820:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1203.950136][T16826] 8021q: adding VLAN 0 to HW filter on device team0 [ 1203.998501][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1204.037166][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1204.072498][ T4636] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.079784][ T4636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.185512][ T4444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1204.197952][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1204.215366][ T33] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1204.245874][ T4332] usb 3-1: USB disconnect, device number 29 [ 1204.274915][T17130] loop1: detected capacity change from 0 to 4096 [ 1204.309890][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1204.333406][T17130] EXT4-fs: Ignoring removed bh option [ 1204.343753][ T26] audit: type=1326 audit(2000000000.820:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1204.348477][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1204.383149][ T26] audit: type=1326 audit(2000000000.820:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1204.440775][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1204.458340][ T4444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.465529][ T4444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1204.486987][ T26] audit: type=1326 audit(2000000000.820:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1204.499559][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1204.519159][ T26] audit: type=1326 audit(2000000000.820:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1204.524854][T17130] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1204.543172][ T26] audit: type=1326 audit(2000000000.820:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1204.574600][ T26] audit: type=1326 audit(2000000000.820:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1204.632107][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1204.677944][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1204.783132][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1205.188762][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1205.493957][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1205.552062][ T26] audit: type=1326 audit(2000000000.820:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17123 comm="syz.7.3295" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa15ff9aeb9 code=0x7ffc0000 [ 1205.576678][T14856] EXT4-fs (loop1): unmounting filesystem. [ 1205.591467][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1205.608295][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1205.690821][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1205.720201][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3299'. [ 1205.765187][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1206.256622][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1206.295642][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1206.707445][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1206.772411][T17172] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1206.783154][T17172] qnx6: wrong signature (magic) in superblock #1. [ 1206.789663][T17172] qnx6: unable to read the first superblock [ 1207.548331][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1207.571774][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1207.587060][T16826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.635569][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1210.640115][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1210.652742][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1210.665576][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1211.866414][ T4444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1212.027564][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1212.050613][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1212.150727][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1212.168783][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1212.283468][T16826] device veth0_vlan entered promiscuous mode [ 1212.359144][T16826] device veth1_vlan entered promiscuous mode [ 1212.401613][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1212.420623][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1212.462215][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1212.528542][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1212.853816][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1212.902475][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1213.024028][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1213.069342][T16826] device veth0_macvtap entered promiscuous mode [ 1213.279568][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1213.465811][T16826] device veth1_macvtap entered promiscuous mode [ 1214.183519][T16949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1214.271614][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1214.403594][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1215.181830][ T4284] Bluetooth: hci4: command 0x0406 tx timeout [ 1217.119158][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.130670][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.146827][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1217.189519][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.329682][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.348824][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.378679][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.407887][T16826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.459666][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1217.468190][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1217.599956][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.138188][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.149167][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.164798][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.201807][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.221079][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1218.848808][T16826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.884576][T16826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.924777][T16826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.975263][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1219.002428][T15448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1219.145812][T16826] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.174431][T16826] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.187579][T16826] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.224289][T16826] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.139202][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1220.234515][T16687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.402273][T16687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.214171][T16687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1221.267389][T17316] overlayfs: missing 'lowerdir' [ 1221.340563][T16687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.403150][T16687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.411952][T17320] device syzkaller0 entered promiscuous mode [ 1221.639764][T17323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3335'. [ 1221.651066][T17323] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3335'. [ 1222.308442][T16687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1222.669600][T17327] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3337'. [ 1222.702554][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1222.713689][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1222.727549][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1223.339672][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1224.073734][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1224.968543][T17369] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3346'. [ 1224.979420][T17369] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3346'. [ 1225.900697][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1226.024835][T17389] device syzkaller0 entered promiscuous mode [ 1226.111210][T17391] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3350'. [ 1226.234582][T17393] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1226.263633][T17393] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1227.181653][ T951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1228.092597][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1228.459169][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1228.472217][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.107848][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1229.119434][T17453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3360'. [ 1229.143151][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.718117][T17093] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.738577][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.754437][T17455] device syzkaller0 entered promiscuous mode [ 1230.658127][ T951] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 1230.997269][ T951] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1231.028043][ T951] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1231.063879][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.107604][ T951] usb 7-1: config 0 descriptor?? [ 1231.135023][ T951] metro_usb 7-1:0.0: required endpoints missing [ 1231.366786][T12417] usb 7-1: USB disconnect, device number 31 [ 1231.671555][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1233.834866][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1234.231976][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1234.245631][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1234.407949][T15061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1234.859395][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.626011][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1237.567857][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1238.700572][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.706920][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.337739][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1239.577981][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1239.990889][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1240.633485][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1241.492587][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1241.773138][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1241.784191][T17583] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3399'. [ 1241.945402][T17573] loop6: detected capacity change from 0 to 256 [ 1242.324950][T17591] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1242.335866][T17591] qnx6: wrong signature (magic) in superblock #1. [ 1242.342396][T17591] qnx6: unable to read the first superblock [ 1242.366692][T17573] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1242.538970][ T4444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1243.819258][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1244.291930][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3409'. [ 1244.811312][T17620] netlink: 1028 bytes leftover after parsing attributes in process `syz.7.3413'. [ 1245.097749][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1245.098380][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1245.109121][ T4402] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1245.343187][T17632] loop5: detected capacity change from 0 to 4096 [ 1246.267579][T15752] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 1246.274052][T15752] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 1246.518824][T17647] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3421'. [ 1247.019117][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.584014][T17649] loop5: detected capacity change from 0 to 256 [ 1248.350680][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1248.728795][T17649] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1249.083170][ T4333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1249.577547][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1249.801575][T17700] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3433'. [ 1250.163844][T17702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3435'. [ 1250.217474][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1250.870415][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1250.870708][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.137238][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.887652][T17753] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3447'. [ 1253.709558][T17770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3450'. [ 1254.061079][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1255.681046][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1255.832307][T17799] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3459'. [ 1255.976828][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1256.289820][T17806] loop7: detected capacity change from 0 to 4096 [ 1256.621195][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1256.635634][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1257.186776][T16391] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 1257.193263][T16391] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 1257.618675][T17821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1257.629536][T17821] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1257.907170][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1259.819793][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.063332][ T3599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.110175][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.121272][T15061] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.262994][T15933] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1261.736826][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1262.390597][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.901801][ T4444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.299531][ T4333] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1265.576592][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.177014][T17934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1266.209872][T17934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1266.219189][T17934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1266.390627][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 1266.400972][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.785968][T12417] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 1266.867160][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.878635][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1267.057794][T12417] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1267.076603][T12417] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1267.120221][T12417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.160463][T12417] usb 6-1: config 0 descriptor?? [ 1267.179603][T12417] metro_usb 6-1:0.0: required endpoints missing [ 1267.536032][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1267.556426][T12417] usb 6-1: USB disconnect, device number 37 [ 1268.136392][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1268.316888][T17966] fuse: Unknown parameter '0x0000000000000004' [ 1269.620348][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1272.005537][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1272.005598][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1272.016746][T17291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1272.314087][T18001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3514'. [ 1272.516458][T18009] fuse: Unknown parameter '0x0000000000000004' [ 1272.618808][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1273.329427][T17291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1273.897609][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.083020][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1277.185628][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1277.520027][T18039] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3528'. [ 1277.742048][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1277.742831][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1278.785444][T18050] fuse: Unknown parameter '0x0000000000000004' [ 1278.979818][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1279.001548][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1279.019604][T18055] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1279.657315][T17291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1279.657442][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1279.674690][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1279.679574][ T3599] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 1279.947217][ T3599] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1280.206658][ T3599] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1280.215958][ T3599] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.229521][ T3599] usb 6-1: config 0 descriptor?? [ 1280.241981][ T3599] metro_usb 6-1:0.0: required endpoints missing [ 1280.295768][ T3599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1280.295943][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1280.311408][ T3599] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1280.467220][ T3599] usb 6-1: USB disconnect, device number 38 [ 1282.786967][T18090] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3540'. [ 1282.929804][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1283.635103][T18096] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1283.666845][T18096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1283.676329][T18096] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1283.765205][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1283.773411][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1284.694960][ T3599] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 1285.135046][ T951] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1285.163847][T18107] fuse: Unknown parameter '0x0000000000000004' [ 1285.270987][ T3599] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1285.291233][ T3599] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1285.329344][ T3599] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.359632][ T3599] usb 7-1: config 0 descriptor?? [ 1285.415648][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1285.433070][ T3599] metro_usb 7-1:0.0: required endpoints missing [ 1285.608957][T12417] usb 7-1: USB disconnect, device number 32 [ 1286.062659][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1286.081277][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1286.205458][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1287.154805][ T4273] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 1288.486122][ T4273] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1288.532449][ T4273] usb 2-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1288.604014][ T4273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.630456][ T4273] usb 2-1: config 0 descriptor?? [ 1288.695451][T18125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3552'. [ 1288.977709][ T4273] usb 2-1: can't set config #0, error -71 [ 1289.005779][ T4273] usb 2-1: USB disconnect, device number 32 [ 1289.152990][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3551'. [ 1289.163766][T18128] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3551'. [ 1289.250158][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.275021][ T4434] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.285203][T17291] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.905806][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1289.945016][T18146] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1289.954401][T18146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1289.962069][T18146] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1290.321188][T12417] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 1290.410406][T18151] fuse: Unknown parameter 'fd0x0000000000000004' [ 1290.512606][T12417] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1290.543228][T12417] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1290.578833][T12417] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.695846][T12417] usb 7-1: config 0 descriptor?? [ 1290.940659][T12417] metro_usb 7-1:0.0: required endpoints missing [ 1291.086059][ T7] usb 7-1: USB disconnect, device number 33 [ 1291.141562][T18160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1291.164756][T18160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1291.186738][T18160] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1291.250210][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1292.757941][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1292.765657][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1292.772434][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1292.854889][T18168] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1292.864691][T18168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1292.872235][T18168] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1293.114738][T12417] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 1293.373849][T18177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1293.384546][T18177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3564'. [ 1293.457893][T12417] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1293.468646][T12417] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1293.477920][T12417] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.492705][T12417] usb 3-1: config 0 descriptor?? [ 1293.500357][T12417] metro_usb 3-1:0.0: required endpoints missing [ 1293.701302][ T7] usb 3-1: USB disconnect, device number 30 [ 1293.758613][T18180] loop1: detected capacity change from 0 to 256 [ 1293.780123][T18180] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1294.030035][T18186] device syzkaller0 entered promiscuous mode [ 1294.543604][T18195] fuse: Unknown parameter 'fd0x0000000000000004' [ 1295.111113][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1295.230453][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1295.241959][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1295.291913][ T7] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.337981][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.568061][T18212] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1297.858636][T18212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1297.867852][T18212] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1298.462041][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1298.463391][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1298.483814][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1298.498174][T16687] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1298.884131][T12417] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 1299.053161][T18233] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3579'. [ 1299.086020][T12417] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1299.108795][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3580'. [ 1299.139310][T12417] usb 6-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1299.215725][T12417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1299.297113][T12417] usb 6-1: config 0 descriptor?? [ 1299.376468][T12417] metro_usb 6-1:0.0: required endpoints missing [ 1299.577849][T18116] usb 6-1: USB disconnect, device number 39 [ 1300.145809][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.152143][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.558694][T18244] loop1: detected capacity change from 0 to 256 [ 1300.573737][T18244] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1300.775771][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1300.786861][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1300.798545][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1302.090195][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.529880][T18268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1303.541092][T18268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3591'. [ 1303.975675][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.990124][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1303.991379][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1304.013526][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1304.067474][T18275] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1304.087046][T18275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1304.107136][T18275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1304.853984][ T7] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1305.436500][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1305.499116][ T7] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1305.552835][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.703469][ T7] usb 3-1: config 0 descriptor?? [ 1305.754280][ T7] metro_usb 3-1:0.0: required endpoints missing [ 1305.974435][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1306.010733][ T4273] usb 3-1: USB disconnect, device number 31 [ 1306.064230][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1306.534319][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.333682][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 1307.736461][T18314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3598'. [ 1307.817651][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.733895][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.733940][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.755782][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1309.755939][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1310.265633][T18348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1310.274233][T18348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1310.281687][T18348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1311.095616][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1311.109567][T18357] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3608'. [ 1312.170050][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1312.181254][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1312.208102][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3611'. [ 1312.462623][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1313.578187][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1315.413617][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1315.499645][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1315.511339][T17267] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1315.990580][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3624'. [ 1316.133836][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1317.870869][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1317.870869][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1318.053348][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.336671][T14694] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.829502][T18433] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1319.837897][T18433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1319.845466][T18433] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1320.193122][ T4273] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 1320.234913][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3634'. [ 1320.249318][T18437] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3634'. [ 1320.385284][ T4273] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1320.455310][ T4273] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1320.539570][ T4273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1320.907828][ T4273] usb 3-1: config 0 descriptor?? [ 1321.205481][ T4273] metro_usb 3-1:0.0: required endpoints missing [ 1321.263913][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1321.275073][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1321.286166][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1321.407424][ T4273] usb 3-1: USB disconnect, device number 32 [ 1321.929977][ T56] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1322.385346][T18454] device syzkaller0 entered promiscuous mode [ 1323.196262][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.815277][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.826472][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1324.284527][T18477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1324.483729][T18481] device syzkaller0 entered promiscuous mode [ 1325.096550][ T4636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1325.469999][T18496] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1325.510674][T18496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1325.639401][T18496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1325.742703][ T4324] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 1326.617990][ T4324] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1326.827521][T11009] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.014223][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.031271][ T4634] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.113519][ T4324] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=9b.f7 [ 1327.140394][ T4324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.162963][ T4324] usb 3-1: config 0 descriptor?? [ 1327.268316][ T4324] metro_usb 3-1:0.0: required endpoints missing [ 1327.479764][T18515] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3658'. [ 1327.517269][ T4324] usb 3-1: USB disconnect, device number 33 [ 1327.545176][T18518] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3657'. [ 1327.702063][ T4521] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1328.654238][T18524] kvm: pic: non byte write [ 1328.933060][ T4587] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1329.015997][ T4385] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1329.321841][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3662'. [ 1329.335990][T18534] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3662'. [ 1329.348364][T18532] device syzkaller0 entered promiscuous mode [ 1329.574454][T15448] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1330.859633][ T4637] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1331.603625][T18563] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3670'. [ 1331.939933][T18566] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1332.030024][T18566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1332.094760][T18566] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1332.257845][T18572] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 1332.290118][T18572] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 1332.336115][T18572] ------------[ cut here ]------------ [ 1332.341690][T18572] WARNING: CPU: 0 PID: 18572 at arch/x86/kvm/x86.c:11250 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.352442][T18572] Modules linked in: [ 1332.356585][T18572] CPU: 0 PID: 18572 Comm: syz.1.3673 Not tainted syzkaller #0 [ 1332.364406][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1332.374909][T18572] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.381389][T18572] Code: e8 37 52 c3 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 fc 51 c3 00 e9 ce e5 ff ff e8 32 67 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 1332.401099][T18572] RSP: 0018:ffffc90005fd7c48 EFLAGS: 00010283 [ 1332.407248][T18572] RAX: ffffffff81100b3e RBX: ffff8880773a8000 RCX: 0000000000080000 [ 1332.415297][T18572] RDX: ffffc9001433e000 RSI: 00000000000004f3 RDI: 00000000000004f4 [ 1332.423335][T18572] RBP: ffff888055cc3000 R08: dffffc0000000000 R09: 1ffffffff215e66e [ 1332.431340][T18572] R10: dffffc0000000000 R11: fffffbfff215e66f R12: ffff8880773a82f4 [ 1332.439388][T18572] R13: ffff8880773a80d8 R14: dffffc0000000000 R15: 0000000000000000 [ 1332.447423][T18572] FS: 00007fe43cff66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1332.456523][T18572] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1332.463170][T18572] CR2: 0000200000fe9008 CR3: 0000000079c04000 CR4: 00000000003526f0 [ 1332.471171][T18572] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000400 [ 1332.479300][T18572] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1332.487341][T18572] Call Trace: [ 1332.490743][T18572] [ 1332.493746][T18572] ? mutex_lock_nested+0x10/0x10 [ 1332.498799][T18572] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 1332.504610][T18572] kvm_vcpu_ioctl+0x8f7/0xc10 [ 1332.509389][T18572] ? xa_release+0x50/0x50 [ 1332.513813][T18572] ? __fget_files+0x28/0x4b0 [ 1332.518515][T18572] ? __fget_files+0x28/0x4b0 [ 1332.523209][T18572] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1332.528362][T18572] ? security_file_ioctl+0x7c/0xa0 [ 1332.533612][T18572] ? xa_release+0x50/0x50 [ 1332.537978][T18572] __se_sys_ioctl+0xfa/0x170 [ 1332.542654][T18572] do_syscall_64+0x4c/0xa0 [ 1332.547139][T18572] ? clear_bhb_loop+0x60/0xb0 [ 1332.551907][T18572] ? clear_bhb_loop+0x60/0xb0 [ 1332.556669][T18572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.562629][T18572] RIP: 0033:0x7fe43ed9aeb9 [ 1332.567084][T18572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.586776][T18572] RSP: 002b:00007fe43cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.595264][T18572] RAX: ffffffffffffffda RBX: 00007fe43f015fa0 RCX: 00007fe43ed9aeb9 [ 1332.603354][T18572] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1332.611348][T18572] RBP: 00007fe43ee08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1332.619404][T18572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.627438][T18572] R13: 00007fe43f016038 R14: 00007fe43f015fa0 R15: 00007ffcdc8951e8 [ 1332.635513][T18572] [ 1332.638552][T18572] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1332.646278][T18572] CPU: 0 PID: 18572 Comm: syz.1.3673 Not tainted syzkaller #0 [ 1332.653751][T18572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1332.663830][T18572] Call Trace: [ 1332.667130][T18572] [ 1332.670076][T18572] dump_stack_lvl+0x188/0x24e [ 1332.674781][T18572] ? memcpy+0x3c/0x60 [ 1332.678855][T18572] ? show_regs_print_info+0x12/0x12 [ 1332.684080][T18572] ? load_image+0x400/0x400 [ 1332.688645][T18572] panic+0x2e5/0x730 [ 1332.692595][T18572] ? bpf_jit_dump+0xd0/0xd0 [ 1332.697156][T18572] __warn+0x2f8/0x4f0 [ 1332.701187][T18572] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.707034][T18572] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.712869][T18572] report_bug+0x2ba/0x4f0 [ 1332.717252][T18572] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.723089][T18572] handle_bug+0x3a/0x70 [ 1332.727277][T18572] exc_invalid_op+0x16/0x40 [ 1332.731905][T18572] asm_exc_invalid_op+0x16/0x20 [ 1332.736969][T18572] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.743414][T18572] Code: e8 37 52 c3 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 fc 51 c3 00 e9 ce e5 ff ff e8 32 67 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 1332.763132][T18572] RSP: 0018:ffffc90005fd7c48 EFLAGS: 00010283 [ 1332.769279][T18572] RAX: ffffffff81100b3e RBX: ffff8880773a8000 RCX: 0000000000080000 [ 1332.777266][T18572] RDX: ffffc9001433e000 RSI: 00000000000004f3 RDI: 00000000000004f4 [ 1332.785337][T18572] RBP: ffff888055cc3000 R08: dffffc0000000000 R09: 1ffffffff215e66e [ 1332.793505][T18572] R10: dffffc0000000000 R11: fffffbfff215e66f R12: ffff8880773a82f4 [ 1332.801766][T18572] R13: ffff8880773a80d8 R14: dffffc0000000000 R15: 0000000000000000 [ 1332.810512][T18572] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.816380][T18572] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1332.822230][T18572] ? mutex_lock_nested+0x10/0x10 [ 1332.827333][T18572] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 1332.833097][T18572] kvm_vcpu_ioctl+0x8f7/0xc10 [ 1332.837805][T18572] ? xa_release+0x50/0x50 [ 1332.842160][T18572] ? __fget_files+0x28/0x4b0 [ 1332.846776][T18572] ? __fget_files+0x28/0x4b0 [ 1332.851402][T18572] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1332.856362][T18572] ? security_file_ioctl+0x7c/0xa0 [ 1332.861496][T18572] ? xa_release+0x50/0x50 [ 1332.865852][T18572] __se_sys_ioctl+0xfa/0x170 [ 1332.870475][T18572] do_syscall_64+0x4c/0xa0 [ 1332.874926][T18572] ? clear_bhb_loop+0x60/0xb0 [ 1332.879623][T18572] ? clear_bhb_loop+0x60/0xb0 [ 1332.884329][T18572] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1332.890249][T18572] RIP: 0033:0x7fe43ed9aeb9 [ 1332.894715][T18572] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1332.914340][T18572] RSP: 002b:00007fe43cff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1332.922776][T18572] RAX: ffffffffffffffda RBX: 00007fe43f015fa0 RCX: 00007fe43ed9aeb9 [ 1332.930741][T18572] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1332.938707][T18572] RBP: 00007fe43ee08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1332.946684][T18572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1332.954750][T18572] R13: 00007fe43f016038 R14: 00007fe43f015fa0 R15: 00007ffcdc8951e8 [ 1332.962726][T18572] [ 1332.966131][T18572] Kernel Offset: disabled [ 1332.970528][T18572] Rebooting in 86400 seconds..