last executing test programs: 14m29.323777697s ago: executing program 32 (id=4): syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000540)='./file0\x00', 0x8c071a, &(0x7f0000000200)={[{@norecovery}, {@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@nouid32}, {@noinit_itable}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x48d, &(0x7f0000000a00)="$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") r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) dup(r0) socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8071, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r4, 0x402c542c, &(0x7f00000000c0)={0x8, 0x22, 0x205, 0x831a, 0x1, "03000000cb0b0e000800feffffbcd6ff0100", 0x808, 0x7fff}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x1) pipe2$watch_queue(&(0x7f00000001c0), 0x80) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x8, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000003440)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 12m35.343597655s ago: executing program 33 (id=323): openat$comedi(0xffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r2, 0x601}, 0x14}, 0x1, 0x0, 0x0, 0x2400c005}, 0x0) 12m32.27343747s ago: executing program 34 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f00000002c0)={0x1, 0x0, [{0x80000001, 0x9, 0x3, 0xdf9, 0x7fffffff, 0xe, 0x286bcd36}]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) socket(0xf, 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) close_range(r1, 0xffffffffffffffff, 0x0) 12m4.696596617s ago: executing program 5 (id=419): syz_usb_connect$uac1(0x5, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 12m0.171237202s ago: executing program 5 (id=426): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25d7dbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20a00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa"], 0xc) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r2, 0xffffffffffffffff, 0x2000000000000) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x98f900}) 11m59.481752432s ago: executing program 5 (id=428): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf2502000000080001"], 0x1c}}, 0x840) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b"], 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) 11m55.265141969s ago: executing program 5 (id=436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25d7dbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20a00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa"], 0xc) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r2, 0xffffffffffffffff, 0x2000000000000) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x98f900}) 11m54.356844559s ago: executing program 5 (id=437): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x9, 0x102001d, 0xfffffffb, 0xffffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x543ddcb2c1ce9a4c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x4c, 0x0}, 0xe07e872420dfefca) socket$packet(0x11, 0x2, 0x300) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, 0x0, 0x0, 0x61, 0x0, 0x0) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000140)={0x18, 0x2, {0xffff, @dev={0xac, 0x14, 0x14, 0x1c}}}, 0x1e) r3 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r3, 0x110, 0x2, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000180)) connect$pptp(r2, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, 0x0, 0x202, 0x0) ioctl$PPPIOCSMRRU(r4, 0x4004743b, &(0x7f0000000300)=0xc7) write(r4, &(0x7f00000003c0)="0000f289c3848dfe23eb3eca82d185b6ac515d6fd43b7d44c66176d761a646d62ef34e39ed0fe777918c9f05d7fcaa922ffdeabfe81001911c95c213f6a8543cea2d7e5acbf69022931a1ad0153f9944b2f07696f3da8c436c128bea55b4f21bbdbe71ad56821155ed518c677d48766be5eab0a72d567433febcfa86ffbf0f8b776b", 0x82) poll(0x0, 0x0, 0x101) 11m53.116458519s ago: executing program 5 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) syz_io_uring_setup(0x3af6, 0x0, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, r4, 0x701, 0x2, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48018}, 0x2404a004) 11m51.754865171s ago: executing program 2 (id=443): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000a06"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x40, 0xf, 0x2, "01c3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000800)={0x1c, &(0x7f00000005c0)={0x0, 0x9ac00cec8b09197e, 0x2, "d358"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 11m48.101397416s ago: executing program 2 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1437c0b97b9646a5, 0x70bd27, 0x25d7dbfe, {0x0, 0x0, 0x0, 0x0, 0xc15}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x28001}, 0x8004) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x20a00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c508df7c4972e3aaa30cbdaa"], 0xc) r4 = epoll_create(0xb398) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000140)) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r2, 0xffffffffffffffff, 0x2000000000000) syz_open_dev$tty1(0xc, 0x4, 0x4) r5 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6}]}}}]}, 0x50}}, 0x0) ioctl$VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x98f900}) 11m47.304302864s ago: executing program 2 (id=446): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f00000000c0)=0x3) r0 = openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8d], 0x100000, 0x4880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m46.279868218s ago: executing program 2 (id=448): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x24004850) 11m45.584901267s ago: executing program 2 (id=449): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x6, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x2, 0x7, 0x7fff, 0xd313, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10004, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfae, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x9, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x0, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) syz_open_dev$vim2m(0x0, 0x47b, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 11m44.907461947s ago: executing program 2 (id=450): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000200)={[0x9]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 11m37.602144883s ago: executing program 35 (id=440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) syz_io_uring_setup(0x3af6, 0x0, &(0x7f0000000280), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, r4, 0x701, 0x2, 0x0, {0x2e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48018}, 0x2404a004) 11m29.434563398s ago: executing program 36 (id=450): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ppoll(0x0, 0x0, 0x0, &(0x7f0000000200)={[0x9]}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) 10m11.72453374s ago: executing program 7 (id=596): creat(0x0, 0x1) syz_mount_image$hfs(&(0x7f00000007c0), &(0x7f0000000280)='./file0\x00', 0x3000cc0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x11, 0x308, &(0x7f0000000400)="$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") 10m11.09752166s ago: executing program 7 (id=598): socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket(0x1, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 10m10.345240834s ago: executing program 7 (id=601): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, 0x0) r0 = openat$kvm(0xffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000780)={[0xd45, 0x1000009, 0xfffffffffffffffb, 0x10000000, 0x10000, 0x3, 0x4003004c2, 0xe, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x9, 0x8d], 0x100000, 0x4880}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10m9.677233773s ago: executing program 7 (id=602): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000000)=ANY=[], 0x0, 0x1e9, &(0x7f00000001c0)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000040)={[{@test_dummy_encryption}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@norecovery}]}, 0x3, 0x470, &(0x7f0000000dc0)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0xd01ce0, 0x0, 0x82, 0x0, &(0x7f0000000080)) chdir(&(0x7f0000000000)='./bus\x00') getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f00000001c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x400c080}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) symlink(&(0x7f0000000080)='.\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0xfffffed3) lchown(&(0x7f0000000040)='./file0\x00', 0xee00, 0x0) open(0x0, 0x60840, 0x0) r2 = syz_pidfd_open(0x0, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x10000, 0xc8) 10m6.894006976s ago: executing program 7 (id=609): socket(0xa, 0x3, 0x87) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) inotify_init1(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') socket$inet_tcp(0x2, 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0x3, 0x300) socket(0x1, 0x2, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 10m5.643789941s ago: executing program 7 (id=611): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@errors_continue}, {@norecovery}, {}, {@order_relaxed}, {}, {}, {@nobarrier}, {@errors_continue}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$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") 10m3.934053575s ago: executing program 37 (id=611): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x2, &(0x7f00000000c0)={[{@errors_continue}, {@norecovery}, {}, {@order_relaxed}, {}, {}, {@nobarrier}, {@errors_continue}], [], 0x2c}, 0x3, 0xf02, &(0x7f0000001e40)="$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") 4m26.333724443s ago: executing program 6 (id=2086): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6bb}], 0x1, 0x40000103, 0x0) 4m24.883795941s ago: executing program 6 (id=2091): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000500)=@in={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000780)='=', 0x1}], 0x1, 0x0, 0x0, 0x80}, 0xc051) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80000002, 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) 4m24.276682336s ago: executing program 6 (id=2095): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x1, 0x1}, 0x28) 4m23.637007155s ago: executing program 6 (id=2098): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8000, &(0x7f00000001c0), 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) getdents64(r0, &(0x7f0000000100)=""/134, 0x86) 4m23.160053095s ago: executing program 6 (id=2101): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xffffffffffffffac, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6bb}], 0x1, 0x40000103, 0x0) 4m21.590274387s ago: executing program 6 (id=2106): syz_usb_connect$uac3(0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 4m6.211379483s ago: executing program 38 (id=2106): syz_usb_connect$uac3(0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m3.349993006s ago: executing program 3 (id=2375): socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m2.42456603s ago: executing program 3 (id=2379): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) readv(r0, &(0x7f0000001340)=[{&(0x7f0000000080)=""/187, 0xbb}], 0x1) syz_emit_ethernet(0xec8, &(0x7f0000002440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xeba, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0xea6, 0x0, @opaque="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"}}}}}, 0x0) 3m1.605892407s ago: executing program 3 (id=2385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4800) 3m0.596569343s ago: executing program 3 (id=2388): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ppoll(&(0x7f0000000100)=[{r0, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 2m56.314306974s ago: executing program 3 (id=2401): connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x9, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) rename(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f080001401f"], 0xc0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet6(0xa, 0x2, 0x0) 2m47.980114859s ago: executing program 3 (id=2407): syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) openat$ptmx(0xffffff9c, 0x0, 0x10000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m32.728640335s ago: executing program 39 (id=2407): syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000f80)=[{{&(0x7f0000000240)={0xa, 0x4e24, 0x86, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000280)="8a", 0x1}], 0x1}}, {{&(0x7f0000000540)={0xa, 0x4e21, 0x8075, @dev={0xfe, 0x80, '\x00', 0x6}, 0x2}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000ac0)='^', 0x1}], 0x1}}], 0x2, 0x40000c0) openat$ptmx(0xffffff9c, 0x0, 0x10000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.273420999s ago: executing program 8 (id=2717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x4, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56559, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c"], 0x38}}, 0x0) 8.55471871s ago: executing program 0 (id=2721): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) getpid() timer_create(0x3, 0x0, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10000084) 7.97310439s ago: executing program 8 (id=2725): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) membarrier(0x10, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000440)) ppoll(&(0x7f0000000100)=[{r0, 0x412}], 0x1, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) 7.71773228s ago: executing program 4 (id=2727): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='-', 0x1) r1 = msgget$private(0x0, 0x480) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x9, "00000000020000f50800", '\x00', '\x00', '\x00', ["fdffffff84a438dfc4d5c010", "d78cb8b0211a83be12ff0bff"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) msgsnd(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xbb, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000300)=""/182) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt(0xffffffffffffffff, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa0100ff, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @local, @private=0xa010100}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r6, {0xe, 0x1}}}, 0x24}}, 0x4) 7.25981612s ago: executing program 0 (id=2729): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000940)={0x1, 0x1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000001c0)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002d00)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 6.93563604s ago: executing program 9 (id=2730): syz_clone(0x10040000, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)="b1cb173a37674cfd524a060068000071") r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x8000, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000f40)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda525e19bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0x40103e05, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.796250883s ago: executing program 1 (id=2731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "c37e4c233b523996", "12fe3d5434763ca587aff4a24634fa7c43e7ae2b017d28f53f2dc513e83dd138", "6ad94c3e", "ad3e4a31a0cc7036"}, 0x38) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000008c0)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "71d7cad9ce65227e", "fdc81b393808bf519d34fdc431d727bc3eaa90d1f574cb786da155253062c8a7", "d735033c", "cb2b7df64280cd4f"}, 0x38) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 6.387512903s ago: executing program 0 (id=2732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 6.265349916s ago: executing program 4 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f00000015c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001580)={&(0x7f00000009c0)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x1, 0x0, 0x8}, [{{0x254, 0x1, {{0x3, 0x100}, 0x83, 0x5, 0x7, 0xfffc, 0x20, 'syz1\x00', "598c9957489f438b0f27200bbb455344ea6ba6bd213013943e7ac1a804928fcd", "c7f6367c7e281b29a620d58e7d1699846ec67e1414b28ccb67188702017f8931", [{0x1, 0xffff}, {0x5, 0x5, {0x3, 0x80}}, {0xb, 0xff9, {0x2, 0x401}}, {0x0, 0xe14, {0x2, 0x80000000}}, {0xfffe, 0x6, {0x0, 0x2}}, {0x8001, 0x4, {0x2, 0x7}}, {0x5, 0x0, {0x3, 0x7}}, {0x5, 0x3, {0x2, 0x7}}, {0x5, 0x1, {0x0, 0x4}}, {0x0, 0x8, {0x0, 0xfffffffc}}, {0x973b, 0x1, {0x1, 0x4}}, {0x5, 0xc49, {0x0, 0xfffffbff}}, {0x5, 0x94f, {0x3, 0x8}}, {0x3, 0xffff, {0x2}}, {0x5, 0x1, {0x0, 0x4}}, {0x5, 0x1, {0x1, 0x2bd5}}, {0xd, 0x1, {0x3, 0x6}}, {0x8, 0x3ad5, {0x3, 0xa25}}, {0x7, 0xf, {0x0, 0x6}}, {0x7, 0x1ff}, {0x8, 0x101, {0x0, 0x7fff}}, {0xe49, 0x6, {0x2, 0x400}}, {0x8, 0x4, {0x0, 0x5}}, {0x5, 0x9, {0x3, 0x3}}, {0x1, 0xfff, {0x0, 0x10001}}, {0x800, 0x4, {0x1, 0x80000000}}, {0xfffe, 0x0, {0x1, 0xb40c}}, {0xfff7, 0x1, {0x0, 0xffffffc0}}, {0x81, 0x7fff, {0x3, 0x5}}, {0x9073, 0x6, {0x9bab4e7ce67e8be3, 0x3}}, {0x6fa, 0x6, {0x2, 0x7}}, {0x9, 0x7fb, {0x0, 0x5}}, {0xa2, 0x6, {0x0, 0x586}}, {0x1, 0x2, {0x0, 0xfffffff9}}, {0xbf, 0xff00, {0x0, 0x8000000}}, {0x55e9, 0x0, {0x0, 0x6}}, {0x3e, 0x2, {0x1, 0x9}}, {0xff, 0xd88, {0x1, 0x8}}, {0x9, 0xe9, {0x0, 0x6}}, {0x46, 0x8, {0x1, 0x80}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x60000880}, 0x80) 6.208298898s ago: executing program 9 (id=2734): open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x67) io_setup(0x80, &(0x7f0000000480)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000240)={[{@usrjquota}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x81}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x44d, &(0x7f0000000c80)="$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") io_submit(r1, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="71d094cea1b546a8fffe11d352746d257de3049b50016ad248ba8977d3d282b1c6fe19efc858246b1eef69de3aa601b0e93237ed300c3dcc057a5e03bfc36d168ea86b0a7200c0a37ca678c42d94cf1bb3d3d4cedfba9f795f88bd", 0x5b, 0x0, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x5, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 6.125429955s ago: executing program 1 (id=2735): connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x9, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) rename(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet6(0xa, 0x2, 0x0) 5.739900971s ago: executing program 0 (id=2736): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000004c0)="1ea8424629292b9c17", 0x9}], 0x1}, 0x20048010) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) 5.452601225s ago: executing program 4 (id=2737): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="040018"], 0x44}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) 5.097067584s ago: executing program 9 (id=2738): socket$kcm(0xa, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@newqdisc={0x170, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0xfffb, 0x3}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x0, 0xa02, 0x0, 0x2d0, 0x5, 0x9}}, {0x16, 0x2, [0x2, 0x1ff, 0x8000, 0x7, 0x5, 0xffff, 0x48b8, 0xfbff, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1, 0x8000, 0x1, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0xaa, 0x4, 0x9, 0x2, 0x0, 0x1, 0xffffffff, 0x5}}, {0xe, 0x2, [0x7, 0x245, 0x3, 0x0, 0x1000]}}, {{0x1c, 0x1, {0xa, 0x7, 0xe, 0x3, 0x0, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3c, 0xa8, 0xe, 0x4, 0x1, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0xa4, 0x4]}}, {{0x1c, 0x1, {0x2, 0xd, 0xa0, 0x7, 0x1, 0xfff, 0x3, 0x1}}, {0x6, 0x2, [0x7fff]}}, {{0x1c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x1ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0x3, 0x2, 0xb, 0x3d98, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x20040010) unshare(0x6020400) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r9, {0x6, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) r12 = gettid() syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/uts\x00') 4.911102437s ago: executing program 8 (id=2739): mknod$loop(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 4.794842038s ago: executing program 1 (id=2740): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x42, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0xc, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) 4.649253377s ago: executing program 4 (id=2741): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, &(0x7f0000000100)=0x40049, 0x4) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x77, 0x6, 0x400000000000002, 0x4002004c4, 0x1004, 0x8000000000000000, 0x9, 0x0, 0x1, 0xfffffffffffffffd, 0x2000000000010000, 0x4, 0x8d], 0xeeee8000, 0x2110d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.329246993s ago: executing program 8 (id=2742): set_mempolicy(0x1, &(0x7f00000001c0)=0xe7, 0xb) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000240)={0x2000, 0x1000000}) 4.317251779s ago: executing program 9 (id=2743): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$char_usb(r0, &(0x7f0000000000)='-', 0x1) r1 = msgget$private(0x0, 0x480) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000340)={'\x00\f\x00', 0x0, 0x5, 0x1, 0x200000, 0x9, "00000000020000f50800", '\x00', '\x00', '\x00', ["fdffffff84a438dfc4d5c010", "d78cb8b0211a83be12ff0bff"]}) ioctl$CEC_TRANSMIT(r2, 0xc0386105, 0x0) msgsnd(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="03"], 0xbb, 0x0) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f0000000300)=""/182) gettid() timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x2, 0x3, 0x100000001) setsockopt(r5, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x65, 0x0, 0x0, 0x1, 0x0, @private=0xa0100ff, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x6c, 0x0, @local, @private=0xa010100}}}}}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, 0x0, {0xe, 0x1}}}, 0x24}}, 0x4) 4.247579155s ago: executing program 1 (id=2744): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f00000059c0)={0x2020}, 0x2020) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @hyper}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0xf8, 0x2, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_FILTER={0x2c, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x1}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x40}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x20}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x21b}]}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_TCP={0x4}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x26cb}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_TUPLE_REPLY={0x20, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_MASTER={0x10, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_LABELS={0x28, 0x16, 0x1, 0x0, [0x4, 0x1, 0x5, 0x1ff, 0x8, 0x1, 0x9, 0x200, 0xd]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffff842b}]}, @CTA_TUPLE_MASTER={0x18, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}, @CTA_SYNPROXY={0x1c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffffffc}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x2c}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4000010}, 0x20000000) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x10, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) read$FUSE(r0, &(0x7f0000009a40)={0x2020}, 0x2020) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rpc\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r6, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000480)={@fallback=r5, r7, 0x2f, 0x24, 0x4, @void, @void, @void, @value, r8}, 0x20) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) 4.008384704s ago: executing program 4 (id=2745): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000a40)=@gcm_256={{0x303}, "c37e4c233b523996", "12fe3d5434763ca587aff4a24634fa7c43e7ae2b017d28f53f2dc513e83dd138", "6ad94c3e", "ad3e4a31a0cc7036"}, 0x38) writev(r0, &(0x7f00000005c0)=[{&(0x7f00000008c0)='X', 0x1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_256={{0x303}, "71d7cad9ce65227e", "fdc81b393808bf519d34fdc431d727bc3eaa90d1f574cb786da155253062c8a7", "d735033c", "cb2b7df64280cd4f"}, 0x38) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) 3.952449231s ago: executing program 0 (id=2746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) 3.625565105s ago: executing program 8 (id=2747): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000100)={'vlan0\x00', 0x81}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r3, 0xc028ae92, &(0x7f0000000640)={0xf0, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x189040, 0x136) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r5 = dup(r4) write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r7 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r7, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000000/0x1000)=nil, 0x4000}) 2.313013989s ago: executing program 9 (id=2748): open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x67) io_setup(0x80, &(0x7f0000000480)=0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000240)={[{@usrjquota}, {@mblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x81}}, {@min_batch_time={'min_batch_time', 0x3d, 0x1000}}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x44d, &(0x7f0000000c80)="$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") io_submit(r1, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000000c0)="71d094cea1b546a8fffe11d352746d257de3049b50016ad248ba8977d3d282b1c6fe19efc858246b1eef69de3aa601b0e93237ed300c3dcc057a5e03bfc36d168ea86b0a7200c0a37ca678c42d94cf1bb3d3d4cedfba9f795f88bddf96e5", 0x5e, 0x0, 0x0, 0x0, r0}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x5, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 2.113580742s ago: executing program 4 (id=2749): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x6361, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000003600)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611", 0x1f}, {&(0x7f0000000240)="acf7aad9756b30b5270e3f3cdf07e0a9dcad2900fbdd735362e4bc61914f291a898418ceeb9c7b62b2150c93a629d18e5a5032b098de85cda1f19e1479f35d4189736cde69a5da42390c0714f69d1cc78062b5e660f8cbb3e538110925c63649288d", 0x62}, {&(0x7f00000022c0)="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", 0x1f7}], 0x3}, 0x0) 1.87954889s ago: executing program 0 (id=2750): connect$qrtr(0xffffffffffffffff, &(0x7f0000000140)={0x2a, 0xffffffffffffffff, 0x1}, 0xc) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$9p_virtio(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x0, 0x9, 0x0) chdir(&(0x7f0000000040)='./file0\x00') mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) rename(0x0, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xc0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socket$inet6(0xa, 0x2, 0x0) 1.605614963s ago: executing program 9 (id=2751): r0 = socket$phonet(0x23, 0x2, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r3, @ANYBLOB="040018"], 0x44}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) 1.522394179s ago: executing program 1 (id=2752): mknod$loop(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) 522.482288ms ago: executing program 8 (id=2753): socket$kcm(0xa, 0x5, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge0\x00', {0x4}, 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) sendmsg$nl_route_sched(r4, &(0x7f0000000680)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)=@newqdisc={0x170, 0x24, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0xfffb, 0x3}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0xc9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3ff}, @TCA_STAB={0x13c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x9, 0x0, 0xa02, 0x0, 0x2d0, 0x5, 0x9}}, {0x16, 0x2, [0x2, 0x1ff, 0x8000, 0x7, 0x5, 0xffff, 0x48b8, 0xfbff, 0x5]}}, {{0x1c, 0x1, {0x7, 0x4, 0x1, 0x8000, 0x1, 0x2, 0x8, 0x2}}, {0x8, 0x2, [0x0, 0x6]}}, {{0x1c, 0x1, {0xaa, 0x4, 0x9, 0x2, 0x0, 0x1, 0xffffffff, 0x5}}, {0xe, 0x2, [0x7, 0x245, 0x3, 0x0, 0x1000]}}, {{0x1c, 0x1, {0xa, 0x7, 0xe, 0x3, 0x0, 0x1, 0x9, 0x1}}, {0x6, 0x2, [0x7]}}, {{0x1c, 0x1, {0x3c, 0xa8, 0xe, 0x4, 0x1, 0x3, 0x3, 0x2}}, {0x8, 0x2, [0xa4, 0x4]}}, {{0x1c, 0x1, {0x2, 0xd, 0xa0, 0x7, 0x1, 0xfff, 0x3, 0x1}}, {0x6, 0x2, [0x7fff]}}, {{0x1c, 0x1, {0x2, 0x4, 0x8, 0x2, 0x2, 0x2, 0x4, 0x2}}, {0x8, 0x2, [0x1ff, 0x2]}}, {{0x1c, 0x1, {0x8, 0x1, 0x2, 0x3, 0x2, 0xb, 0x3d98, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x20000054}, 0x20000000) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x70bd28, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x4000) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) unshare(0x6020400) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x24, 0x2c, 0xd27, 0x2070bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r9, {0x6, 0x10}, {}, {0x8, 0xffe0}}}, 0x24}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) r12 = gettid() syz_open_procfs$namespace(r12, &(0x7f0000000000)='ns/uts\x00') 0s ago: executing program 1 (id=2754): socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "081200", 0x14, 0x2b, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@srh={0x3a, 0x0, 0x2}], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x100, @void}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): amily 0 port 6081 - 0 [ 422.319620][ T6233] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.460737][ T8055] fuse: Bad value for 'fd' [ 423.372308][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.7.538'. [ 423.463398][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.538'. [ 423.611847][ T8070] loop6: detected capacity change from 0 to 2048 [ 423.695409][ T8070] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 423.799392][ T8070] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 423.931597][ T8070] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 424.514617][ T9] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 424.751751][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.786714][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 424.847833][ T9] usb 8-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 424.902218][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.017721][ T9] usb 8-1: config 0 descriptor?? [ 425.056250][ T6213] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.349118][ T6213] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.405621][ T5678] usb 8-1: USB disconnect, device number 5 [ 425.924271][ T6213] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.217471][ T6213] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.060913][ T6213] bridge_slave_1: left allmulticast mode [ 427.073239][ T6213] bridge_slave_1: left promiscuous mode [ 427.105829][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.162993][ T6213] bridge_slave_0: left allmulticast mode [ 427.195348][ T6213] bridge_slave_0: left promiscuous mode [ 427.220469][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.238203][ T8115] loop6: detected capacity change from 0 to 64 [ 428.758711][ T6213] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.791462][ T4871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 428.804618][ T4871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 428.820261][ T4871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 428.846364][ T4871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.864158][ T4871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.878059][ T6213] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.937915][ T6213] bond0 (unregistering): Released all slaves [ 428.988812][ T8126] fuse: Bad value for 'fd' [ 430.235796][ T6213] hsr_slave_0: left promiscuous mode [ 430.281413][ T6213] hsr_slave_1: left promiscuous mode [ 430.331275][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.385788][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.429958][ T6213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.461595][ T6213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.591976][ T6213] veth1_macvtap: left promiscuous mode [ 430.637808][ T6213] veth0_macvtap: left promiscuous mode [ 430.661256][ T6213] veth1_vlan: left promiscuous mode [ 430.688993][ T6213] veth0_vlan: left promiscuous mode [ 430.923870][ T48] Bluetooth: hci1: command tx timeout [ 432.240896][ T6213] team0 (unregistering): Port device team_slave_1 removed [ 432.297262][ T6213] team0 (unregistering): Port device team_slave_0 removed [ 432.610784][ T8138] loop7: detected capacity change from 0 to 32768 [ 432.679500][ T8138] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 433.005168][ T48] Bluetooth: hci1: command tx timeout [ 433.213200][ T8138] XFS (loop7): Ending clean mount [ 433.493421][ T6213] IPVS: stop unused estimator thread 0... [ 433.571331][ T7162] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 433.825217][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.862410][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.956241][ T13] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.162988][ T8184] fuse: Bad value for 'fd' [ 434.338654][ T13] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.544001][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.578999][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.688293][ T13] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.951725][ T13] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.084051][ T48] Bluetooth: hci1: command tx timeout [ 436.303868][ T8209] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 436.466125][ T13] bridge_slave_1: left allmulticast mode [ 436.493213][ T13] bridge_slave_1: left promiscuous mode [ 436.531039][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.596524][ T13] bridge_slave_0: left allmulticast mode [ 436.642844][ T13] bridge_slave_0: left promiscuous mode [ 436.677945][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.163990][ T48] Bluetooth: hci1: command tx timeout [ 437.373022][ T4871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 437.384498][ T4871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 437.403007][ T4871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 437.441007][ T4871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 437.456861][ T4871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.070558][ T8229] loop6: detected capacity change from 0 to 4096 [ 438.196461][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.273519][ T8237] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 438.357528][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.448344][ T13] bond0 (unregistering): Released all slaves [ 438.686142][ T5226] 8021q: adding VLAN 0 to HW filter on device eth15 [ 439.145752][ T13] hsr_slave_0: left promiscuous mode [ 439.187916][ T13] hsr_slave_1: left promiscuous mode [ 439.220997][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.262701][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.329602][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.369482][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.481446][ T13] veth1_macvtap: left promiscuous mode [ 439.502307][ T13] veth0_macvtap: left promiscuous mode [ 439.520328][ T13] veth1_vlan: left promiscuous mode [ 439.534784][ T13] veth0_vlan: left promiscuous mode [ 439.564179][ T4871] Bluetooth: hci3: command tx timeout [ 440.340355][ T13] team0 (unregistering): Port device team_slave_1 removed [ 440.383308][ T13] team0 (unregistering): Port device team_slave_0 removed [ 441.478159][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.605016][ T5250] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 441.643986][ T4871] Bluetooth: hci3: command tx timeout [ 441.660213][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.818207][ T5250] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.819135][ T8260] loop7: detected capacity change from 0 to 4096 [ 441.867192][ T5250] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 441.909913][ T5250] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 441.918281][ T8260] ntfs3(loop7): Different NTFS sector size (2048) and media sector size (512). [ 441.968548][ T5250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.058998][ T5250] usb 7-1: config 0 descriptor?? [ 442.216405][ T8260] ntfs3(loop7): Failed to initialize $Extend/$ObjId. [ 442.270964][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.346238][ T5250] usb 7-1: USB disconnect, device number 3 [ 442.556117][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.660165][ T8287] loop7: detected capacity change from 0 to 64 [ 443.711057][ T8287] hfs: unable to locate alternate MDB [ 443.724164][ T4871] Bluetooth: hci3: command tx timeout [ 443.739706][ T8287] hfs: continuing without an alternate MDB [ 444.179558][ T8123] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.216446][ T8123] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.227500][ T8123] bridge_slave_0: entered allmulticast mode [ 444.236764][ T8123] bridge_slave_0: entered promiscuous mode [ 444.269652][ T13] bridge_slave_1: left allmulticast mode [ 444.316833][ T8288] loop6: detected capacity change from 0 to 8192 [ 444.328848][ T13] bridge_slave_1: left promiscuous mode [ 444.381009][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.478368][ T13] bridge_slave_0: left allmulticast mode [ 444.519546][ T13] bridge_slave_0: left promiscuous mode [ 444.552735][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.230607][ T8303] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 445.252177][ T8303] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 445.799190][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.814184][ T4871] Bluetooth: hci3: command tx timeout [ 445.856223][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.872806][ T13] bond0 (unregistering): Released all slaves [ 445.899463][ T8123] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.904354][ T8308] loop7: detected capacity change from 0 to 1024 [ 445.934611][ T8123] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.962534][ T8123] bridge_slave_1: entered allmulticast mode [ 445.969294][ T8311] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 446.010813][ T8123] bridge_slave_1: entered promiscuous mode [ 446.075025][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.129270][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.221783][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.254263][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.418368][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.456984][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.524173][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.534593][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.582019][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.630608][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.633399][ T8123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.688011][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.698464][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.722798][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.767166][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.810963][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.843053][ T8315] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.856358][ T8123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.893556][ T8316] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.908294][ T8316] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.922979][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.932307][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.968750][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 446.978258][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 447.015046][ T8313] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 447.015586][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 447.030795][ T8308] hfsplus: request for non-existent node 33423360 in B*Tree [ 447.216065][ T8313] usb 7-1: Using ep0 maxpacket: 32 [ 447.247895][ T8313] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.287184][ T8313] usb 7-1: config 0 has no interfaces? [ 447.324447][ T8313] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 447.388067][ T8313] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 447.389350][ T13] hsr_slave_0: left promiscuous mode [ 447.409630][ T8313] usb 7-1: Product: syz [ 447.423414][ T8313] usb 7-1: Manufacturer: syz [ 447.440776][ T8313] usb 7-1: SerialNumber: syz [ 447.464023][ T13] hsr_slave_1: left promiscuous mode [ 447.493529][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.496008][ T8313] usb 7-1: config 0 descriptor?? [ 447.508767][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.556275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.604381][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.719793][ T13] veth1_macvtap: left promiscuous mode [ 447.755836][ T13] veth0_macvtap: left promiscuous mode [ 447.783749][ T13] veth1_vlan: left promiscuous mode [ 447.787364][ T8313] usb 7-1: USB disconnect, device number 4 [ 447.789767][ T13] veth0_vlan: left promiscuous mode [ 448.930570][ T8346] loop6: detected capacity change from 0 to 256 [ 448.958633][ T8346] exfat: Deprecated parameter 'utf8' [ 448.974383][ T8346] exfat: Deprecated parameter 'utf8' [ 449.070480][ T8346] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 449.515420][ T13] team0 (unregistering): Port device team_slave_1 removed [ 449.605721][ T13] team0 (unregistering): Port device team_slave_0 removed [ 449.656725][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 449.665799][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 450.459926][ T8123] team0: Port device team_slave_0 added [ 450.779563][ T8341] loop7: detected capacity change from 0 to 32768 [ 450.849784][ T8341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.588 (8341) [ 450.911343][ T8123] team0: Port device team_slave_1 added [ 451.234422][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.267237][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.361176][ T8123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.665991][ T8123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.700598][ T8123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.804027][ T8123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.353233][ T8123] hsr_slave_0: entered promiscuous mode [ 452.382840][ T8123] hsr_slave_1: entered promiscuous mode [ 452.436651][ T8368] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 453.151719][ T8372] loop6: detected capacity change from 0 to 4096 [ 453.152769][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.176963][ T8374] loop7: detected capacity change from 0 to 64 [ 453.202222][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.231698][ T8228] bridge_slave_0: entered allmulticast mode [ 453.251772][ T8374] hfs: unable to locate alternate MDB [ 453.279301][ T8228] bridge_slave_0: entered promiscuous mode [ 453.283009][ T8374] hfs: continuing without an alternate MDB [ 453.394546][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.440452][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.466979][ T8228] bridge_slave_1: entered allmulticast mode [ 453.498416][ T8228] bridge_slave_1: entered promiscuous mode [ 453.947496][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.287847][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.702189][ T8383] loop6: detected capacity change from 0 to 2048 [ 454.796452][ T8383] loop6: p1 p2 < > p3 < p5 > p4 [ 454.857452][ T8383] loop6: p4 start 8388608 is beyond EOD, truncated [ 454.907198][ T8228] team0: Port device team_slave_0 added [ 455.000062][ T8228] team0: Port device team_slave_1 added [ 455.400015][ T8391] loop7: detected capacity change from 0 to 16 [ 455.466368][ T8391] erofs (device loop7): invalid ishare xattr prefix id 0 [ 455.699864][ T8395] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 455.740789][ T8391] loop7: detected capacity change from 0 to 512 [ 455.747189][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.747265][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.747396][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.778479][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.868547][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.909923][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.945934][ T8391] EXT4-fs (loop7): Test dummy encryption mode enabled [ 455.984841][ T8391] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 456.073299][ T8391] EXT4-fs error (device loop7): ext4_orphan_get:1423: comm syz.7.602: bad orphan inode 131083 [ 456.154176][ T8391] loop7: lost filesystem error report for type 5 error -117 [ 456.177617][ T8391] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.449269][ T8406] loop6: detected capacity change from 0 to 128 [ 456.491534][ T8406] ext4: Unknown parameter 'fsmagic' [ 456.833558][ T8228] hsr_slave_0: entered promiscuous mode [ 456.875159][ T8228] hsr_slave_1: entered promiscuous mode [ 456.916055][ T8228] debugfs: 'hsr0' already exists in 'hsr' [ 456.953113][ T8228] Cannot create hsr debugfs directory [ 457.112517][ T8391] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 457.138429][ T8406] loop6: detected capacity change from 0 to 4096 [ 457.205732][ T8406] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.276653][ T8406] EXT4-fs (loop6): Test dummy encryption mode enabled [ 457.380514][ T8406] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.744255][ T7162] EXT4-fs error (device loop7): ext4_readdir:265: inode #2: block 13: comm syz-executor: path /48/bus: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 457.940034][ T7162] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.494118][ T8123] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 458.501943][ T8420] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 458.512045][ T8420] overlayfs: upper fs does not support tmpfile. [ 458.524319][ T8420] fscrypt (loop6): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 458.631259][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 458.913297][ T8123] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 459.012083][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 459.122155][ T6200] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.177124][ T5226] 8021q: adding VLAN 0 to HW filter on device eth16 [ 459.211720][ T8123] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 459.284544][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 459.402092][ T6200] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.436055][ T8123] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 459.499499][ T8123] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.747997][ T6200] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.987622][ T6200] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.718127][ T6200] bridge_slave_1: left allmulticast mode [ 460.730185][ T6200] bridge_slave_1: left promiscuous mode [ 460.754771][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.791301][ T6200] bridge_slave_0: left allmulticast mode [ 460.811982][ T6200] bridge_slave_0: left promiscuous mode [ 460.826649][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.565188][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 461.577891][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 461.589048][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 461.607761][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 461.624878][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.652488][ T6200] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.715904][ T6200] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.732555][ T6200] bond0 (unregistering): Released all slaves [ 462.531139][ T6200] hsr_slave_0: left promiscuous mode [ 462.556875][ T6200] hsr_slave_1: left promiscuous mode [ 462.576331][ T6200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.608045][ T6200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.689122][ T6200] veth1_macvtap: left promiscuous mode [ 462.739552][ T6200] veth0_macvtap: left promiscuous mode [ 462.937723][ T8458] fuse: Bad value for 'fd' [ 463.251621][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.472533][ T6200] team0 (unregistering): Port device team_slave_1 removed [ 463.532160][ T6200] team0 (unregistering): Port device team_slave_0 removed [ 463.734252][ T48] Bluetooth: hci4: command tx timeout [ 464.106132][ T8228] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 464.182995][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.218008][ T8228] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 464.299699][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.380717][ T8228] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 464.458927][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.485687][ T8228] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 464.530326][ T8228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.714796][ T8123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.912307][ T8123] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.017571][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.025121][ T6200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.174964][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.182460][ T6200] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.474564][ T8479] loop6: detected capacity change from 0 to 512 [ 465.498196][ T8479] EXT4-fs: Ignoring removed nobh option [ 465.533150][ T8479] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 465.582057][ T8479] EXT4-fs (loop6): 1 truncate cleaned up [ 465.608869][ T8479] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.803959][ T48] Bluetooth: hci4: command tx timeout [ 466.442715][ T8485] fuse: Bad value for 'fd' [ 466.732907][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.233436][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.369582][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.377271][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.533788][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.541735][ T5859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.954124][ T48] Bluetooth: hci4: command tx timeout [ 469.974015][ T48] Bluetooth: hci4: command tx timeout [ 470.224284][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.262011][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.295691][ T8442] bridge_slave_0: entered allmulticast mode [ 470.360937][ T8442] bridge_slave_0: entered promiscuous mode [ 470.421808][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.452796][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.478605][ T8442] bridge_slave_1: entered allmulticast mode [ 470.538808][ T8442] bridge_slave_1: entered promiscuous mode [ 470.866829][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.980170][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.168324][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.376896][ T8442] team0: Port device team_slave_0 added [ 471.478734][ T8442] team0: Port device team_slave_1 added [ 471.690442][ T8528] loop6: detected capacity change from 0 to 1024 [ 471.767213][ T8528] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.825913][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.835280][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.864062][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.884575][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.893142][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.957070][ T8442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.107270][ T8123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.209257][ T7139] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.589449][ T8442] hsr_slave_0: entered promiscuous mode [ 472.617625][ T8442] hsr_slave_1: entered promiscuous mode [ 472.660631][ T8442] debugfs: 'hsr0' already exists in 'hsr' [ 472.710030][ T8442] Cannot create hsr debugfs directory [ 472.865402][ T5226] 8021q: adding VLAN 0 to HW filter on device eth17 [ 473.358207][ T8552] loop6: detected capacity change from 0 to 16 [ 473.403239][ T8552] erofs (device loop6): invalid ishare xattr prefix id 0 [ 474.627648][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.203714][ T8442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 475.255250][ T8442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.292615][ T8442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 475.358192][ T8442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 475.382009][ T8123] veth0_vlan: entered promiscuous mode [ 475.406414][ T8442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 475.458059][ T8442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 475.486037][ T8442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 475.570842][ T8442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 475.672746][ T8123] veth1_vlan: entered promiscuous mode [ 476.187435][ T8123] veth0_macvtap: entered promiscuous mode [ 476.298634][ T8123] veth1_macvtap: entered promiscuous mode [ 476.576249][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.733419][ T8123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.932973][ T5226] 8021q: adding VLAN 0 to HW filter on device eth18 [ 476.972022][ T6222] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.003824][ T6222] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.034924][ T6222] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.109308][ T6222] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.141526][ T8228] veth0_vlan: entered promiscuous mode [ 477.206683][ T8600] fuse: Bad value for 'fd' [ 477.317207][ T8228] veth1_vlan: entered promiscuous mode [ 477.545964][ T8442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.852732][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.013634][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.021135][ T5859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.111144][ T8228] veth0_macvtap: entered promiscuous mode [ 478.224494][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.231964][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.317576][ T8228] veth1_macvtap: entered promiscuous mode [ 478.652677][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.773185][ T8228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.901896][ T6200] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.928999][ T6200] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.964090][ T6200] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.977979][ T6200] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.242351][ T8647] fuse: Bad value for 'fd' [ 482.339080][ T8667] capability: warning: `syz.6.653' uses deprecated v2 capabilities in a way that may be insecure [ 482.352505][ T8442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.593050][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.630759][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.881858][ T6213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 482.939040][ T6213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.149326][ T8442] veth0_vlan: entered promiscuous mode [ 483.271579][ T8442] veth1_vlan: entered promiscuous mode [ 483.686464][ T8442] veth0_macvtap: entered promiscuous mode [ 483.790371][ T8442] veth1_macvtap: entered promiscuous mode [ 484.088631][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.126686][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 484.269421][ T8442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.335400][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 484.387718][ T10] usb 9-1: config index 0 descriptor too short (expected 16456, got 72) [ 484.436079][ T10] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 484.488095][ T10] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 484.511894][ T6202] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.527148][ T10] usb 9-1: config 0 has an invalid interface number: 125 but max is 1 [ 484.562477][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 484.585194][ T6231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.614954][ T10] usb 9-1: config 0 has no interface number 0 [ 484.643429][ T10] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 484.658786][ T6231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.685249][ T10] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 484.719632][ T6231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.721227][ T10] usb 9-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 484.789867][ T10] usb 9-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 484.860366][ T10] usb 9-1: config 0 interface 125 has no altsetting 0 [ 484.895799][ T10] usb 9-1: config 0 interface 125 has no altsetting 2 [ 484.957905][ T10] usb 9-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 484.999772][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.051056][ T10] usb 9-1: Product: syz [ 485.073125][ T10] usb 9-1: Manufacturer: syz [ 485.089564][ T10] usb 9-1: SerialNumber: syz [ 485.137894][ T10] usb 9-1: config 0 descriptor?? [ 485.232172][ T10] usb 9-1: selecting invalid altsetting 2 [ 485.410441][ T8706] fuse: Bad value for 'fd' [ 485.476654][ T6200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.532322][ T6200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.882691][ T6222] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.929449][ T6222] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.367593][ T8312] usb 9-1: USB disconnect, device number 2 [ 488.151558][ T8739] loop8: detected capacity change from 0 to 4096 [ 488.183138][ T8747] loop9: detected capacity change from 0 to 512 [ 488.211727][ T8746] fuse: Bad value for 'fd' [ 488.237424][ T8747] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 488.322883][ T8747] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.668: bad orphan inode 131083 [ 488.397196][ T8747] loop9: lost filesystem error report for type 5 error -117 [ 488.413676][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 488.427905][ C0] EXT4-fs (loop9): initial error at time 1779807455: ext4_orphan_get:1423 [ 488.436792][ C0] EXT4-fs (loop9): last error at time 1779807455: ext4_orphan_get:1423 [ 488.484320][ T8747] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.671259][ T29] audit: type=1800 audit(1779807455.985:4): pid=8747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.668" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 488.731985][ T8747] EXT4-fs (loop9): shut down requested (1) [ 489.171222][ T8228] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.127299][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.674'. [ 490.190636][ T8765] loop9: detected capacity change from 0 to 2048 [ 490.190886][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.8.674'. [ 490.307177][ T8765] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 490.371384][ T8765] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 490.426574][ T8765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 491.052383][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz.6.678'. [ 491.424028][ T8312] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 491.529733][ T8788] netlink: 20 bytes leftover after parsing attributes in process `syz.9.680'. [ 491.626014][ T8312] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.656625][ T8312] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 491.677987][ T8312] usb 9-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 491.706759][ T8312] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.762509][ T8312] usb 9-1: config 0 descriptor?? [ 491.841852][ T8312] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 491.867208][ T8312] dvb-usb: bulk message failed: -22 (3/0) [ 491.929945][ T8312] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 491.987017][ T8312] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 492.024994][ T8312] usb 9-1: media controller created [ 492.058179][ T8312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 492.071860][ T8791] fuse: Bad value for 'fd' [ 492.178080][ T8312] dvb-usb: bulk message failed: -22 (6/0) [ 492.207187][ T8312] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 492.291559][ T8312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input10 [ 492.401108][ T8312] dvb-usb: schedule remote query interval to 150 msecs. [ 492.455099][ T8312] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 492.493170][ T6213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.557908][ T6213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.602499][ T8312] usb 9-1: USB disconnect, device number 3 [ 492.644320][ T8313] dvb-usb: bulk message failed: -22 (1/0) [ 492.681450][ T8313] dvb-usb: error while querying for an remote control event. [ 492.918319][ T8312] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 492.954281][ T6231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.010114][ T6231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.887864][ T8815] fuse: Unknown parameter 'grou00000000000000000000' [ 494.018705][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.9.688'. [ 494.140336][ T8817] netlink: 4 bytes leftover after parsing attributes in process `syz.9.688'. [ 494.331136][ T8817] team0 (unregistering): Port device team_slave_0 removed [ 495.252110][ T8817] team0 (unregistering): Port device team_slave_1 removed [ 496.267063][ T8850] fuse: Bad value for 'fd' [ 496.543202][ T8856] netlink: 24 bytes leftover after parsing attributes in process `syz.8.696'. [ 497.061065][ T8863] syzkaller0: entered promiscuous mode [ 497.145197][ T8863] syzkaller0: entered allmulticast mode [ 497.193093][ T8860] tipc: Started in network mode [ 497.241326][ T8860] tipc: Node identity ceb452385a09, cluster identity 4711 [ 497.285120][ T8860] tipc: Enabled bearer , priority 0 [ 497.367454][ T8859] tipc: Resetting bearer [ 497.510856][ T8859] tipc: Disabling bearer [ 497.825341][ T10] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 498.014523][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 498.074047][ T10] usb 9-1: config 5 has an invalid interface number: 234 but max is 0 [ 498.134062][ T10] usb 9-1: config 5 has no interface number 0 [ 498.169492][ T10] usb 9-1: config 5 interface 234 has no altsetting 0 [ 498.206797][ T10] usb 9-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 498.243891][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.282655][ T10] usb 9-1: Product: syz [ 498.303063][ T10] usb 9-1: Manufacturer: syz [ 498.331643][ T10] usb 9-1: SerialNumber: syz [ 499.231935][ T8879] loop9: detected capacity change from 0 to 4096 [ 499.248554][ T8887] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 499.430506][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.705'. [ 499.702981][ T10] ipw 9-1:5.234: IPWireless converter converter detected [ 499.863549][ T10] usb 9-1: USB disconnect, device number 4 [ 499.948153][ T10] ipw 9-1:5.234: device disconnected [ 501.312458][ T8908] fuse: Bad value for 'fd' [ 501.708889][ T8904] loop8: detected capacity change from 0 to 4096 [ 503.278423][ T8904] ntfs3(loop8): ino=5, "/" mi_enum_attr [ 503.842346][ T8937] syzkaller0: entered promiscuous mode [ 503.888047][ T8937] syzkaller0: entered allmulticast mode [ 504.628395][ T8940] loop9: detected capacity change from 0 to 4096 [ 504.661501][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 504.782340][ T8948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 505.163997][ T8952] loop8: detected capacity change from 0 to 16 [ 505.228454][ T8952] erofs (device loop8): invalid ishare xattr prefix id 0 [ 505.562511][ T8952] loop8: detected capacity change from 0 to 512 [ 505.657279][ T8952] EXT4-fs (loop8): Test dummy encryption mode enabled [ 505.707578][ T8952] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 505.851159][ T8952] EXT4-fs error (device loop8): ext4_orphan_get:1423: comm syz.8.724: bad orphan inode 131083 [ 505.983452][ T8952] loop8: lost filesystem error report for type 5 error -117 [ 506.005512][ T8952] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 506.588027][ T8968] loop9: detected capacity change from 0 to 1024 [ 506.620573][ T8949] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 507.309262][ T8312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 507.515953][ T8312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 507.563911][ T8312] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 507.621353][ T8312] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 507.668540][ T8312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.745651][ T8312] usb 4-1: config 0 descriptor?? [ 508.360651][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.737'. [ 508.527178][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz.6.737'. [ 508.841791][ T9000] loop9: detected capacity change from 0 to 4096 [ 508.898162][ T9000] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 509.272716][ T9000] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 510.506619][ T10] usb 4-1: USB disconnect, device number 2 [ 510.929414][ T9029] fuse: Bad value for 'fd' [ 511.097315][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 511.108934][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.535913][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.9.749'. [ 512.624601][ T9059] netlink: 4 bytes leftover after parsing attributes in process `syz.9.749'. [ 512.949753][ T9062] loop3: detected capacity change from 0 to 2048 [ 513.016165][ T9062] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 513.059675][ T9062] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 513.098653][ T9062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 513.707388][ T9070] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 514.084700][ T9075] loop3: detected capacity change from 0 to 16 [ 514.141305][ T9075] erofs (device loop3): invalid ishare xattr prefix id 0 [ 514.341836][ T9075] loop3: detected capacity change from 0 to 512 [ 514.400121][ T9075] EXT4-fs (loop3): Test dummy encryption mode enabled [ 514.440002][ T9075] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 514.520175][ T9075] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.757: bad orphan inode 131083 [ 514.559726][ T9075] loop3: lost filesystem error report for type 5 error -117 [ 514.563759][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 514.578263][ C1] EXT4-fs (loop3): initial error at time 1779807481: ext4_orphan_get:1423 [ 514.587220][ C1] EXT4-fs (loop3): last error at time 1779807481: ext4_orphan_get:1423 [ 514.627789][ T9075] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 514.897572][ T9083] loop9: detected capacity change from 0 to 2048 [ 515.053219][ T9090] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.092309][ T9083] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 515.431424][ T9095] netlink: 64 bytes leftover after parsing attributes in process `syz.6.763'. [ 515.469466][ T9095] netlink: 60 bytes leftover after parsing attributes in process `syz.6.763'. [ 515.528974][ T9095] unsupported nlmsg_type 40 [ 516.201283][ T9103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 516.357275][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 516.502169][ T9109] netlink: 4 bytes leftover after parsing attributes in process `syz.9.765'. [ 517.462776][ T8312] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 517.692925][ T8312] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 517.732395][ T8312] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 517.755246][ T8312] usb 10-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 517.778388][ T8312] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.839706][ T8312] usb 10-1: config 0 descriptor?? [ 518.034527][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.773'. [ 518.924699][ T9146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.777'. [ 518.970995][ T9146] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 519.007164][ T9146] netlink: 'syz.3.777': attribute type 1 has an invalid length. [ 519.619870][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 519.692073][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.780'. [ 519.731685][ T9157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.780'. [ 520.658375][ T10] usb 10-1: USB disconnect, device number 2 [ 521.262547][ T9177] loop9: detected capacity change from 0 to 512 [ 521.302578][ T9177] EXT4-fs: inline encryption not supported [ 521.382363][ T9177] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 521.460862][ T9177] EXT4-fs (loop9): orphan cleanup on readonly fs [ 521.572902][ T9177] EXT4-fs error (device loop9): mb_free_blocks:2049: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 521.590721][ T9177] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.786: corrupted inode contents [ 521.602829][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 521.602917][ C0] EXT4-fs (loop9): initial error at time 1779807488: mb_free_blocks:2049: inode 12: block 14 [ 521.603093][ C0] EXT4-fs (loop9): last error at time 1779807488: mb_free_blocks:2049: inode 12: block 14 [ 521.642252][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 521.643428][ T9177] EXT4-fs error (device loop9): ext4_dirty_inode:6587: inode #12: comm syz.9.786: mark_inode_dirty error [ 521.706539][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 521.712051][ T9177] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.786: corrupted inode contents [ 521.809774][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 521.827716][ T9177] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #12: comm syz.9.786: mark_inode_dirty error [ 521.855305][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 521.856683][ T9177] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.786: corrupted inode contents [ 522.003890][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 522.005019][ T9177] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 522.070044][ T9177] loop9: lost filesystem error report for type 5 error -117 [ 522.071251][ T9177] EXT4-fs error (device loop9): ext4_do_update_inode:5690: inode #12: comm syz.9.786: corrupted inode contents [ 522.154739][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 522.156050][ T9177] EXT4-fs error (device loop9): ext4_truncate:4690: inode #12: comm syz.9.786: mark_inode_dirty error [ 522.204131][ T9177] loop9: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 522.210753][ T9177] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 522.240609][ T9177] loop9: lost filesystem error report for type 5 error -117 [ 522.249074][ T9177] EXT4-fs (loop9): 1 truncate cleaned up [ 522.265855][ T6213] Quota error (device loop9): remove_tree: Cycle in quota tree detected: block 3 index 0 [ 522.327714][ T6213] EXT4-fs error (device loop9): ext4_release_dquot:7070: comm kworker/u8:18: Failed to release dquot type 1 [ 522.365026][ T6213] loop9: lost filesystem error report for type 5 error -5 [ 522.385444][ T9177] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 522.518282][ T9192] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 522.631162][ T9177] EXT4-fs (loop9): warning: mounting fs with errors, running e2fsck is recommended [ 522.709610][ T9177] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 523.073974][ T9195] gretap1: entered promiscuous mode [ 523.130019][ T8228] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.716591][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.794'. [ 523.777047][ T9214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.794'. [ 523.827345][ T9214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.794'. [ 525.681231][ T9233] loop9: detected capacity change from 0 to 4096 [ 525.740320][ T9233] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512). [ 525.978265][ T9249] netlink: 28 bytes leftover after parsing attributes in process `syz.8.808'. [ 526.052251][ T9233] ntfs3(loop9): Failed to initialize $Extend/$ObjId. [ 526.710302][ T9251] gretap1: entered promiscuous mode [ 527.055521][ T9261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.811'. [ 527.163071][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.6.811'. [ 527.269803][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz.6.811'. [ 528.515513][ T9278] loop9: detected capacity change from 0 to 512 [ 528.558994][ T9278] EXT4-fs: Ignoring removed nobh option [ 528.644721][ T9278] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 528.779167][ T9278] EXT4-fs (loop9): 1 truncate cleaned up [ 528.841117][ T9278] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.267769][ T8228] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.976442][ T9302] syzkaller0: entered promiscuous mode [ 530.010923][ T9302] syzkaller0: entered allmulticast mode [ 530.362337][ T9312] netlink: 28 bytes leftover after parsing attributes in process `syz.6.824'. [ 530.861604][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.9.826'. [ 530.932072][ T9315] gretap1: entered promiscuous mode [ 530.956518][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.826'. [ 531.001578][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.9.826'. [ 533.115761][ T9351] fuse: Bad value for 'fd' [ 533.637778][ T5226] 8021q: adding VLAN 0 to HW filter on device eth19 [ 533.871345][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.839'. [ 533.995239][ T9370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.839'. [ 534.082752][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.9.839'. [ 535.695608][ T9383] loop9: detected capacity change from 0 to 4096 [ 537.046374][ T9401] overlayfs: failed to resolve './file0': -2 [ 537.403977][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 537.601618][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 537.670252][ T24] usb 10-1: config 5 has an invalid interface number: 234 but max is 0 [ 537.719824][ T24] usb 10-1: config 5 has no interface number 0 [ 537.764629][ T24] usb 10-1: config 5 interface 234 has no altsetting 0 [ 537.790515][ T9419] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 537.840054][ T24] usb 10-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 537.888284][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.941594][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.0.855'. [ 537.962911][ T24] usb 10-1: Product: syz [ 538.016799][ T24] usb 10-1: Manufacturer: syz [ 538.016821][ T9422] netlink: 4 bytes leftover after parsing attributes in process `syz.0.855'. [ 538.102129][ T24] usb 10-1: SerialNumber: syz [ 539.576441][ T24] ipw 10-1:5.234: IPWireless converter converter detected [ 539.661464][ T24] usb 10-1: USB disconnect, device number 3 [ 539.708725][ T24] ipw 10-1:5.234: device disconnected [ 544.638026][ T9516] loop9: detected capacity change from 0 to 4096 [ 546.252622][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.3.887'. [ 546.333334][ T9548] loop9: detected capacity change from 0 to 128 [ 546.393859][ T9548] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 546.551693][ T9548] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 546.680093][ T9548] ext2 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.420878][ T8228] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 549.560495][ T5226] 8021q: adding VLAN 0 to HW filter on device eth20 [ 551.282280][ T9628] loop9: detected capacity change from 0 to 2048 [ 551.385651][ T9628] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 551.469149][ T9628] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 551.562257][ T9628] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 552.039904][ T9642] fuse: Bad value for 'fd' [ 554.124003][ T4871] Bluetooth: hci1: command 0x0406 tx timeout [ 555.121597][ T5226] 8021q: adding VLAN 0 to HW filter on device eth21 [ 555.660938][ T9708] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 555.714028][ T9706] fuse: Bad value for 'fd' [ 559.831440][ T9786] program syz.9.943 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 560.518646][ T5226] 8021q: adding VLAN 0 to HW filter on device eth22 [ 560.862871][ T9798] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.948'. [ 562.671115][ T9836] overlayfs: failed to resolve './file1': -2 [ 563.407412][ T9846] fuse: Unknown parameter 'grou00000000000000000000' [ 563.478027][ T9849] tipc: Enabling of bearer rejected, failed to enable media [ 564.148114][ T9861] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.963'. [ 564.400397][ T4871] Bluetooth: hci3: command 0x0406 tx timeout [ 565.026580][ T9867] loop9: detected capacity change from 0 to 2048 [ 565.153100][ T9867] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 565.214297][ T9867] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 565.306682][ T9867] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 565.558272][ T5226] 8021q: adding VLAN 0 to HW filter on device eth23 [ 567.515964][ T9897] netlink: 'syz.0.971': attribute type 3 has an invalid length. [ 567.556465][ T9897] netlink: 3 bytes leftover after parsing attributes in process `syz.0.971'. [ 567.665294][ T9902] loop9: detected capacity change from 0 to 16 [ 567.757196][ T9902] erofs (device loop9): invalid ishare xattr prefix id 0 [ 568.029923][ T9908] tipc: Enabling of bearer rejected, failed to enable media [ 568.043126][ T9902] loop9: detected capacity change from 0 to 512 [ 568.119463][ T9902] EXT4-fs (loop9): Test dummy encryption mode enabled [ 568.150306][ T9902] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 568.238413][ T9902] EXT4-fs error (device loop9): ext4_orphan_get:1423: comm syz.9.968: bad orphan inode 131083 [ 568.267605][ T9902] loop9: lost filesystem error report for type 5 error -117 [ 568.271085][ T9902] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.322948][ T9914] fuse: fd is not a fuse device [ 568.431119][ T9918] ip6_tunnel: non-ECT from fc00:f5ff:ffff:0000:0000:0000:0000:00fc with DS=0x1 [ 568.571865][ T9902] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.558690][ T9932] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.981'. [ 569.800377][ T5226] 8021q: adding VLAN 0 to HW filter on device eth24 [ 570.629759][ T9951] fuse: fd is not a fuse device [ 570.993245][ T9960] tipc: Enabling of bearer rejected, failed to enable media [ 571.332741][ T9969] fuse: Bad value for 'fd' [ 571.510046][ T9967] fuse: Bad value for 'fd' [ 571.716998][ T9971] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.995'. [ 572.535885][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.549086][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 573.097778][ T9995] fuse: fd is not a fuse device [ 573.919946][T10016] tipc: Enabling of bearer rejected, failed to enable media [ 573.988273][T10013] fuse: Bad value for 'fd' [ 574.034610][T10015] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1010'. [ 575.382275][T10039] fuse: fd is not a fuse device [ 576.323492][T10053] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1023'. [ 576.502156][T10061] tipc: Enabling of bearer rejected, failed to enable media [ 577.050518][T10069] syz.3.1028 uses obsolete (PF_INET,SOCK_PACKET) [ 577.745497][T10084] fuse: fd is not a fuse device [ 578.832518][T10102] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1038'. [ 579.623408][T10123] tipc: Enabling of bearer rejected, failed to enable media [ 580.821492][T10138] fuse: fd is not a fuse device [ 580.852560][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1049'. [ 581.596424][T10153] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1053'. [ 583.232316][T10184] fuse: fd is not a fuse device [ 583.604185][T10190] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.1065'. [ 584.230110][T10200] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1069'. [ 584.844069][ T4871] Bluetooth: hci4: command 0x0406 tx timeout [ 585.377826][T10220] fuse: fd is not a fuse device [ 585.798598][T10232] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1079'. [ 586.406938][T10242] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1083'. [ 587.617942][T10267] fuse: fd is not a fuse device [ 587.833164][T10274] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.1094'. [ 588.684825][T10286] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1099'. [ 589.460581][T10302] fuse: fd is not a fuse device [ 590.082823][T10313] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.1109'. [ 590.872681][T10327] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1115'. [ 591.362020][T10339] fuse: Bad value for 'fd' [ 594.059531][T10384] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1130'. [ 594.477842][T10394] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1133'. [ 597.202287][T10443] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1144'. [ 599.805131][T10491] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1159'. [ 602.194853][T10542] fuse: fd is not a fuse device [ 602.234428][T10541] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1172'. [ 604.582565][T10580] fuse: Bad value for 'fd' [ 605.139727][T10590] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1184'. [ 605.291299][T10599] fuse: fd is not a fuse device [ 607.836167][T10642] fuse: Bad value for 'fd' [ 608.073293][T10647] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1199'. [ 608.902707][T10664] fuse: fd is not a fuse device [ 610.437476][T10698] fuse: Bad value for 'fd' [ 610.865304][T10707] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1214'. [ 611.076415][T10709] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1215'. [ 611.607814][T10721] fuse: fd is not a fuse device [ 613.218531][T10748] fuse: fd is not a fuse device [ 614.127683][T10762] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1231'. [ 614.407617][T10766] fuse: fd is not a fuse device [ 616.209595][T10800] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1243'. [ 616.266965][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1243'. [ 616.377499][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1243'. [ 617.084339][T10812] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1247'. [ 617.361854][T10815] fuse: fd is not a fuse device [ 619.326456][T10851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 619.433422][T10854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1259'. [ 619.875326][T10860] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1262'. [ 620.277844][T10873] fuse: fd is not a fuse device [ 620.718801][T10881] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 620.769447][T10881] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 622.504664][T10911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1276'. [ 622.603406][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1276'. [ 622.633469][T10917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1276'. [ 622.752600][T10916] fuse: fd is not a fuse device [ 622.843289][T10919] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1277'. [ 623.713257][T10935] overlayfs: missing 'lowerdir' [ 625.090069][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 625.262283][T10967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1292'. [ 625.471323][T10972] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1293'. [ 626.681765][T10992] overlayfs: missing 'lowerdir' [ 627.706081][T11013] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1306'. [ 627.841804][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 627.950335][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 628.047997][T11024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1308'. [ 628.644730][T11031] netlink: 1624 bytes leftover after parsing attributes in process `syz.8.1311'. [ 629.455277][T11051] tipc: Enabling of bearer rejected, failed to enable media [ 630.440094][T11063] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1319'. [ 630.930018][T11075] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 631.023035][T11075] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1323'. [ 631.089719][T11080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'. [ 631.238142][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1325'. [ 631.658554][T11086] gretap1: entered promiscuous mode [ 632.830045][T11113] tipc: Enabling of bearer rejected, failed to enable media [ 633.551028][T11127] netlink: 1624 bytes leftover after parsing attributes in process `syz.9.1336'. [ 633.620298][T11126] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1335'. [ 633.937363][T11131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 633.974712][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 633.982856][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.082048][T11137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1337'. [ 634.101099][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 634.404049][T11141] overlayfs: missing 'workdir' [ 634.641255][T11145] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1342'. [ 635.385964][T11149] gretap1: entered promiscuous mode [ 635.687690][T11173] tipc: Enabling of bearer rejected, failed to enable media [ 636.829420][T11186] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1351'. [ 637.362301][T11201] overlayfs: missing 'workdir' [ 639.900226][T11246] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1366'. [ 640.709434][T11257] overlayfs: missing 'workdir' [ 643.774550][T11287] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1380'. [ 644.779632][T11308] overlayfs: failed to clone upperpath [ 647.380526][T11340] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1393'. [ 648.152147][T11352] overlayfs: failed to clone upperpath [ 650.570855][T11393] overlayfs: failed to clone upperpath [ 653.794408][T11439] overlayfs: failed to clone upperpath [ 657.087691][T11494] overlayfs: failed to clone upperpath [ 660.256640][T11548] overlayfs: failed to clone upperpath [ 663.261938][T11599] overlayfs: failed to clone upperpath [ 666.990427][T11664] overlayfs: failed to clone upperpath [ 671.169138][T11740] tipc: Enabling of bearer rejected, failed to enable media [ 675.432149][T11814] tipc: Enabling of bearer rejected, failed to enable media [ 678.112348][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1519'. [ 678.290418][T11853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1519'. [ 678.985333][T11879] tipc: Enabling of bearer rejected, failed to enable media [ 681.978596][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 682.220120][T11919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 682.382433][T11929] tipc: Enabling of bearer rejected, failed to enable media [ 683.149514][T11947] overlayfs: failed to clone upperpath [ 685.677764][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1552'. [ 686.200798][T11997] tipc: Enabling of bearer rejected, failed to enable media [ 687.068622][T12007] fuse: fd is not a fuse device [ 689.588436][T12059] tipc: Enabling of bearer rejected, failed to enable media [ 690.634870][T12067] fuse: fd is not a fuse device [ 694.545968][T12128] fuse: fd is not a fuse device [ 695.415445][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.427106][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.152326][T12170] fuse: fd is not a fuse device [ 699.376219][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1614'. [ 700.042638][T12214] fuse: fd is not a fuse device [ 702.665994][T12248] fuse: fd is not a fuse device [ 703.142759][T12262] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1634'. [ 705.267202][T12289] fuse: fd is not a fuse device [ 706.052970][T12305] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1652'. [ 706.394689][T12306] gretap1: entered promiscuous mode [ 707.483396][T12326] fuse: fd is not a fuse device [ 708.751456][T12351] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1671'. [ 709.676359][T12361] fuse: fd is not a fuse device [ 711.265079][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1687'. [ 711.598713][T12390] gretap1: entered promiscuous mode [ 711.712963][T12393] fuse: fd is not a fuse device [ 713.687030][T12430] fuse: fd is not a fuse device [ 714.431898][T12447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1708'. [ 715.976198][T12476] fuse: fd is not a fuse device [ 719.350214][T12561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1723'. [ 719.820488][T12562] gretap1: entered promiscuous mode [ 719.999520][T12569] fuse: fd is not a fuse device [ 731.395959][T12788] No control pipe specified [ 734.893407][T12854] fuse: Bad value for 'fd' [ 735.672910][T12871] fuse: fd is not a fuse device [ 737.067583][T12896] fuse: Bad value for 'fd' [ 738.396754][T12922] fuse: fd is not a fuse device [ 740.184684][T12955] fuse: Bad value for 'fd' [ 743.459080][T13018] fuse: Bad value for 'fd' [ 743.822607][T13026] fuse: fd is not a fuse device [ 746.145928][T13072] fuse: fd is not a fuse device [ 746.980209][T13086] fuse: fd is not a fuse device [ 748.901496][T13121] fuse: fd is not a fuse device [ 749.607603][T13142] fuse: fd is not a fuse device [ 750.909992][T13164] tipc: Enabling of bearer rejected, failed to enable media [ 752.037746][T13180] fuse: fd is not a fuse device [ 752.062993][T13182] fuse: fd is not a fuse device [ 752.722308][T13194] tipc: Enabling of bearer rejected, failed to enable media [ 755.355760][T13243] fuse: fd is not a fuse device [ 755.438075][T13241] fuse: fd is not a fuse device [ 755.470981][T13247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 756.852736][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 756.868087][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 757.722446][T13290] tipc: Enabling of bearer rejected, failed to enable media [ 758.498968][T13306] fuse: fd is not a fuse device [ 759.383089][T13316] fuse: fd is not a fuse device [ 761.779795][T13366] tipc: Enabling of bearer rejected, failed to enable media [ 761.908917][T13369] fuse: fd is not a fuse device [ 763.019383][T13385] fuse: fd is not a fuse device [ 765.570002][T13438] tipc: Enabling of bearer rejected, failed to enable media [ 766.011279][T13443] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1939'. [ 766.613134][T13451] fuse: fd is not a fuse device [ 766.671236][T13450] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1941'. [ 769.344493][T13506] tipc: Enabling of bearer rejected, failed to enable media [ 770.079116][T13510] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1954'. [ 770.287600][T13514] fuse: fd is not a fuse device [ 770.727657][T13517] netlink: 16178 bytes leftover after parsing attributes in process `syz.6.1957'. [ 772.616585][T13549] process 'syz.9.1965' launched './file0' with NULL argv: empty string added [ 773.268071][T13562] tipc: Enabling of bearer rejected, failed to enable media [ 773.349079][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1968'. [ 773.368833][T13567] fuse: fd is not a fuse device [ 774.027491][T13572] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.1971'. [ 775.638670][T13609] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1980'. [ 776.979896][T13628] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1986'. [ 777.608843][T13638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 777.783951][T13638] syz_tun: entered promiscuous mode [ 778.261938][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1994'. [ 779.276914][T13663] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.1999'. [ 780.843649][T13682] overlayfs: failed to resolve './file0': -2 [ 781.340878][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2007'. [ 782.179353][T13702] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2011'. [ 783.103073][T13718] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2013'. [ 784.213002][T13729] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2020'. [ 784.820729][T13738] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2025'. [ 787.237470][T13779] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2035'. [ 789.174475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 790.395301][T13831] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2050'. [ 790.860783][T13836] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2065'. [ 794.028293][T13883] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2066'. [ 794.418928][T13889] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2069'. [ 796.527873][T13920] rdma_rxe: rxe_newlink: failed to add syz_tun [ 798.432543][ T48] Bluetooth: hci0: unexpected event for opcode 0x041c [ 798.773781][T13919] infiniband syz1: set active [ 798.803365][T13919] infiniband syz1: added syz_tun [ 798.911474][T13919] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 799.009905][T13919] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 799.097843][T13919] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 799.536362][T13919] RDS/IB: syz1: added [ 799.571178][T13919] smc: adding ib device syz1 with port count 1 [ 799.621207][T13919] smc: ib device syz1 port 1 has no pnetid [ 802.443814][ T48] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 802.452523][ T48] Bluetooth: hci0: Injecting HCI hardware error event [ 802.460724][ T48] Bluetooth: hci0: hardware error 0x00 [ 804.523854][ T48] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 806.185897][T14053] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2116'. [ 810.091737][T14098] overlayfs: failed to clone upperpath [ 811.001946][T14107] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2128'. [ 814.277026][T14153] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2142'. [ 816.254669][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2148'. [ 816.830262][T14184] fuse: Unknown parameter '0x0000000000000003' [ 818.138345][T14195] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2154'. [ 818.294490][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.304791][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.652336][T14005] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 819.675773][T14005] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 819.695564][T14005] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 819.711316][T14005] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 819.727723][T14005] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 820.908164][T14230] fuse: Unknown parameter '0x0000000000000003' [ 821.050670][T14236] 9pnet_virtio: no channels available for device syz [ 821.582604][T14242] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2167'. [ 821.803950][T14005] Bluetooth: hci5: command tx timeout [ 823.889030][T14005] Bluetooth: hci5: command tx timeout [ 825.017743][T14287] fuse: Unknown parameter '0x0000000000000003' [ 825.719393][T14295] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2180'. [ 825.966018][T14005] Bluetooth: hci5: command tx timeout [ 827.384055][T14018] Set syz1 is full, maxelem 65536 reached [ 828.044036][T14005] Bluetooth: hci5: command tx timeout [ 828.072884][T14328] bridge0: port 3(syz_tun) entered blocking state [ 828.110526][T14328] bridge0: port 3(syz_tun) entered disabled state [ 828.157666][T14328] syz_tun: entered allmulticast mode [ 828.209734][T14326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2190'. [ 828.210880][T14328] syz_tun: entered promiscuous mode [ 828.301748][T14329] netlink: 'syz.3.2190': attribute type 10 has an invalid length. [ 828.357584][T14328] bridge0: port 3(syz_tun) entered blocking state [ 828.364671][T14328] bridge0: port 3(syz_tun) entered forwarding state [ 828.507538][T14326] bridge0: port 3(syz_tun) entered disabled state [ 828.514929][T14326] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.523274][T14326] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.778285][T14329] syz_tun: left allmulticast mode [ 828.823247][T14329] bridge0: port 3(syz_tun) entered disabled state [ 829.887622][T14214] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.912242][T14214] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.946496][T14214] bridge_slave_0: entered allmulticast mode [ 829.989204][T14214] bridge_slave_0: entered promiscuous mode [ 830.062871][T14214] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.089833][T14214] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.119614][T14214] bridge_slave_1: entered allmulticast mode [ 830.163370][T14214] bridge_slave_1: entered promiscuous mode [ 830.205832][T14335] fuse: Unknown parameter '0x0000000000000003' [ 830.667173][T14214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 830.754361][T14214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 830.911643][T14345] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2195'. [ 831.049964][T14214] team0: Port device team_slave_0 added [ 831.176593][T12518] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.286048][T14214] team0: Port device team_slave_1 added [ 831.426027][T12518] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.458437][T14005] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 831.694282][T12518] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.780181][T14214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.820992][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 831.925747][T14214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.014719][T14214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.052636][T14214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.172758][T14214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.304645][T12518] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.823162][T14214] hsr_slave_0: entered promiscuous mode [ 832.857487][T14214] hsr_slave_1: entered promiscuous mode [ 832.888195][T14214] debugfs: 'hsr0' already exists in 'hsr' [ 832.919836][T14214] Cannot create hsr debugfs directory [ 833.354150][T14378] fuse: Unknown parameter '0x0000000000000003' [ 833.782303][T12518] bridge_slave_1: left allmulticast mode [ 833.832547][T12518] bridge_slave_1: left promiscuous mode [ 833.864889][T12518] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.901323][T12518] bridge_slave_0: left allmulticast mode [ 833.922656][T12518] bridge_slave_0: left promiscuous mode [ 833.938775][T12518] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.217454][T14392] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2208'. [ 835.081237][T12518] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.134667][T12518] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.172065][T12518] bond0 (unregistering): Released all slaves [ 837.589264][T12518] hsr_slave_0: left promiscuous mode [ 837.622598][T12518] hsr_slave_1: left promiscuous mode [ 837.645988][T12518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.673630][T12518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 837.700695][T12518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.747386][T12518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 837.821560][T12518] veth1_macvtap: left promiscuous mode [ 837.842562][T12518] veth0_macvtap: left promiscuous mode [ 837.887745][T12518] veth1_vlan: left promiscuous mode [ 837.904255][T12518] veth0_vlan: left promiscuous mode [ 839.156819][T14429] fuse: Unknown parameter 'fd0x0000000000000003' [ 839.685188][T12518] team0 (unregistering): Port device team_slave_1 removed [ 839.801126][T12518] team0 (unregistering): Port device team_slave_0 removed [ 839.888924][T14436] Set syz1 is full, maxelem 1029 reached [ 840.220208][T14441] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2222'. [ 841.319111][T14214] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 841.418291][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.460668][T14214] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 841.538600][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 841.572102][T14214] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 841.668170][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 841.721810][T14214] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 841.789776][T14214] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.322103][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2227'. [ 843.127224][T14478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2231'. [ 843.720876][T14214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 844.000703][T14214] 8021q: adding VLAN 0 to HW filter on device team0 [ 844.084166][T12537] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.091810][T12537] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.209199][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.216861][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.498902][T14492] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2234'. [ 845.783884][ T5226] 8021q: adding VLAN 0 to HW filter on device eth1 [ 846.161412][T14517] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2240'. [ 846.272614][T14517] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2240'. [ 846.772431][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2243'. [ 847.877777][T14539] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2247'. [ 849.135389][T14214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 849.817049][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2255'. [ 850.689678][T14593] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2260'. [ 850.772105][ T5226] 8021q: adding VLAN 0 to HW filter on device eth2 [ 851.587223][T14214] veth0_vlan: entered promiscuous mode [ 851.745997][T14610] Set syz1 is full, maxelem 1029 reached [ 851.751822][T14214] veth1_vlan: entered promiscuous mode [ 852.246223][T14214] veth0_macvtap: entered promiscuous mode [ 852.389114][T14214] veth1_macvtap: entered promiscuous mode [ 852.606502][T14214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 853.356727][T14214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.628437][T12547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.678693][T12547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.757283][T12547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.808534][ T5859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.617466][T14652] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2272'. [ 855.743805][ T5226] 8021q: adding VLAN 0 to HW filter on device eth3 [ 857.725524][T14703] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2284'. [ 860.188571][ T5226] 8021q: adding VLAN 0 to HW filter on device eth4 [ 860.519691][T14759] netlink: 'syz.8.2296': attribute type 1 has an invalid length. [ 860.633104][T14763] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2296'. [ 861.019668][T14759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 861.083043][ T6235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.136349][ T6235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 861.334552][T14773] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2297'. [ 861.538340][T14759] vlan2: entered allmulticast mode [ 861.569333][T14759] bond0: entered allmulticast mode [ 861.581531][T14759] bond_slave_0: entered allmulticast mode [ 861.600601][T14759] bond_slave_1: entered allmulticast mode [ 861.915404][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 861.959966][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.038948][T14005] Bluetooth: hci4: unexpected event for opcode 0x2043 [ 864.439879][T14834] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2309'. [ 867.189075][T14882] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2322'. [ 868.218143][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2326'. [ 868.298662][T14909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.794948][T14909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.861467][T14946] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2336'. [ 873.280190][T14993] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2343'. [ 873.938854][T14984] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2343'. [ 873.992906][T14987] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.2343'. [ 874.239763][T15011] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2349'. [ 874.999590][T15022] syzkaller0: entered promiscuous mode [ 875.020811][T15022] syzkaller0: entered allmulticast mode [ 877.681571][T15067] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2362'. [ 879.735399][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.748362][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.037452][T15107] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 880.099387][T15107] xt_TPROXY: Can be used only with -p tcp or -p udp [ 882.002739][T15133] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2376'. [ 882.959136][T15155] 9pnet_virtio: no channels available for device syz [ 885.046600][T15188] netlink: 'syz.9.2389': attribute type 4 has an invalid length. [ 885.229971][T15191] syz_tun: entered allmulticast mode [ 885.308944][T15191] $Hÿ: renamed from bond0 (while UP) [ 885.410233][T15191] $Hÿ: entered promiscuous mode [ 885.439402][T15191] bond_slave_0: entered promiscuous mode [ 885.480543][T15191] bond_slave_1: entered promiscuous mode [ 885.597066][T15197] Set syz1 is full, maxelem 1029 reached [ 885.669140][T15193] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2392'. [ 889.490817][T15233] random: crng reseeded on system resumption [ 891.264510][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 892.083831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 892.493549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 896.653890][T15249] overlayfs: failed to clone upperpath [ 897.159013][T15254] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2406'. [ 902.554237][T15300] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2418'. [ 903.963712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 904.442533][T14005] Bluetooth: hci5: connection err: -111 [ 904.597917][T15310] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 904.604060][T15310] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 904.671081][T15310] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 904.680188][T15310] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 904.707274][T15310] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 904.713680][T15310] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 904.920666][T15310] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 904.926808][T15310] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 907.712992][T15326] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2422'. [ 910.122495][T15355] syzkaller0: entered promiscuous mode [ 910.173235][T15355] syzkaller0: entered allmulticast mode [ 910.582238][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2429'. [ 910.660827][T15362] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2429'. [ 911.293027][T15369] fuse: fd is not a fuse device [ 911.668708][T15376] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2432'. [ 912.551942][T15386] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2435'. [ 913.450053][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.468236][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 913.482024][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 913.513244][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 913.530405][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 913.731563][T14005] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.766099][T14005] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 913.767525][T15403] fuse: fd is not a fuse device [ 913.800359][T14005] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 913.877157][T14005] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 913.890627][T14005] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 914.942985][T15418] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2442'. [ 914.988697][T15418] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2442'. [ 915.963752][T14005] Bluetooth: hci2: command tx timeout [ 916.401407][T12547] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.646462][T12547] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.904893][T12547] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.147125][T12547] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.905183][T12547] bridge_slave_1: left allmulticast mode [ 917.939245][T12547] bridge_slave_1: left promiscuous mode [ 917.976338][T12547] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.042405][T12547] bridge_slave_0: left allmulticast mode [ 918.044285][T14005] Bluetooth: hci2: command tx timeout [ 918.076994][T12547] bridge_slave_0: left promiscuous mode [ 918.104623][T12547] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.431340][T12547] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 919.528599][T12547] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 919.599970][T12547] bond0 (unregistering): Released all slaves [ 919.881670][T15451] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2447'. [ 920.318827][T14005] Bluetooth: hci2: command tx timeout [ 921.768927][T15460] overlayfs: failed to clone upperpath [ 922.046932][T12547] hsr_slave_0: left promiscuous mode [ 922.063942][T12547] hsr_slave_1: left promiscuous mode [ 922.077471][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 922.093035][T12547] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.132109][T12547] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 922.166464][T12547] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 922.301552][T12547] veth1_macvtap: left promiscuous mode [ 922.340453][T12547] veth0_macvtap: left promiscuous mode [ 922.363989][T14005] Bluetooth: hci2: command tx timeout [ 922.380444][T12547] veth1_vlan: left promiscuous mode [ 922.425503][T12547] veth0_vlan: left promiscuous mode [ 923.021184][T15476] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2453'. [ 923.081303][T15478] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2453'. [ 923.823126][T15483] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 923.872395][T15483] block device autoloading is deprecated and will be removed. [ 924.577241][T12547] team0 (unregistering): Port device team_slave_1 removed [ 924.717128][T12547] team0 (unregistering): Port device team_slave_0 removed [ 924.839825][T15499] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2458'. [ 937.381860][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.419555][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.461708][T15398] bridge_slave_0: entered allmulticast mode [ 937.489977][T15398] bridge_slave_0: entered promiscuous mode [ 937.560329][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.600977][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.658573][T15398] bridge_slave_1: entered allmulticast mode [ 937.681421][T15549] usb usb8: usbfs: process 15549 (syz.4.2469) did not claim interface 0 before use [ 937.724699][T15398] bridge_slave_1: entered promiscuous mode [ 938.039161][T15551] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2470'. [ 938.098204][T15398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.219937][T15398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.586758][T15398] team0: Port device team_slave_0 added [ 938.655259][T15398] team0: Port device team_slave_1 added [ 939.056563][T15398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.079931][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.158825][T15398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.233123][T15398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.273879][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.367976][T15398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.865053][T15398] hsr_slave_0: entered promiscuous mode [ 939.911056][T15398] hsr_slave_1: entered promiscuous mode [ 939.945334][T15398] debugfs: 'hsr0' already exists in 'hsr' [ 939.971383][T15398] Cannot create hsr debugfs directory [ 941.178857][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 941.189871][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.804623][T15597] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2483'. [ 942.774876][T15398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 942.840495][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 942.889049][T15398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 943.007055][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 943.054008][T15398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 943.167142][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 943.224065][T15398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 943.350417][T15398] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 944.349015][T15617] fuse: fd is not a fuse device [ 944.846772][T15398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.090603][T15398] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.216592][T12533] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.224232][T12533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.377539][T12533] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.385122][T12533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 946.218527][T15635] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2494'. [ 946.832882][T15646] 9pnet_virtio: no channels available for device syz [ 948.801112][T15669] fuse: fd is not a fuse device [ 949.729766][T15687] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2507'. [ 950.082831][T15398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.906482][T15705] netlink: 'syz.4.2510': attribute type 4 has an invalid length. [ 952.220397][T15398] veth0_vlan: entered promiscuous mode [ 952.379130][T15398] veth1_vlan: entered promiscuous mode [ 952.852291][T15398] veth0_macvtap: entered promiscuous mode [ 952.912488][T15398] veth1_macvtap: entered promiscuous mode [ 953.027803][T15398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.142926][T15398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.318153][ T32] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.352002][ T32] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.396106][ T32] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.431718][ T32] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.061596][ T5226] 8021q: adding VLAN 0 to HW filter on device eth5 [ 954.443352][T15740] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2520'. [ 955.818883][T15770] fuse: fd is not a fuse device [ 956.414710][T15787] loop4: detected capacity change from 0 to 512 [ 956.459704][T15787] EXT4-fs: Ignoring removed mblk_io_submit option [ 956.865421][T15787] EXT4-fs: Ignoring removed mblk_io_submit option [ 956.910555][T15787] /dev/loop4: Can't open blockdev [ 960.473895][T15807] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2534'. [ 962.078692][T15821] fuse: fd is not a fuse device [ 962.102990][ T5226] 8021q: adding VLAN 0 to HW filter on device eth6 [ 962.692026][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.741561][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.998788][T12527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 963.056818][T12527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 963.607747][T15835] fuse: fd is not a fuse device [ 965.523312][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 965.532909][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 965.544867][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 965.558534][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 965.571794][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 965.861602][T15856] loop1: detected capacity change from 0 to 512 [ 965.942387][T15856] EXT4-fs: Ignoring removed mblk_io_submit option [ 965.996808][T15856] EXT4-fs: Ignoring removed mblk_io_submit option [ 966.052318][T15856] /dev/loop1: Can't open blockdev [ 967.032093][T15872] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2545'. [ 967.635224][T15882] input: syz1 as /devices/virtual/input/input11 [ 967.658937][ T48] Bluetooth: hci4: command tx timeout [ 968.732470][ T5226] 8021q: adding VLAN 0 to HW filter on device eth7 [ 969.733690][ T48] Bluetooth: hci4: command tx timeout [ 969.800887][T15900] xt_l2tp: missing protocol rule (udp|l2tpip) [ 970.254539][ T5579] syz_tun (unregistering): left promiscuous mode [ 970.727362][T15908] fuse: fd is not a fuse device [ 970.902938][ T5859] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.149129][ T5859] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.196767][T15915] loop4: detected capacity change from 0 to 512 [ 971.218558][T15915] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.234919][T14633] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 971.263091][T15915] EXT4-fs: Ignoring removed mblk_io_submit option [ 971.294011][T15915] /dev/loop4: Can't open blockdev [ 971.410886][ T5859] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.440279][T14633] usb 2-1: Using ep0 maxpacket: 8 [ 971.494963][T14633] usb 2-1: config 5 has an invalid interface number: 234 but max is 0 [ 971.526876][T14633] usb 2-1: config 5 has no interface number 0 [ 971.550248][T14633] usb 2-1: config 5 interface 234 has no altsetting 0 [ 971.614599][T14633] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 971.656416][T14633] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.685391][ T5859] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.721201][T14633] usb 2-1: Product: syz [ 971.745910][T14633] usb 2-1: Manufacturer: syz [ 971.777227][T14633] usb 2-1: SerialNumber: syz [ 971.803852][ T48] Bluetooth: hci4: command tx timeout [ 971.896647][T15921] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2557'. [ 972.946583][ T5859] bridge_slave_1: left allmulticast mode [ 972.985827][ T5859] bridge_slave_1: left promiscuous mode [ 973.026076][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.089575][ T5859] bridge_slave_0: left allmulticast mode [ 973.106917][T14633] ipw 2-1:5.234: IPWireless converter converter detected [ 973.139994][ T5859] bridge_slave_0: left promiscuous mode [ 973.173634][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.227610][T14633] usb 2-1: USB disconnect, device number 3 [ 973.276116][T14633] ipw 2-1:5.234: device disconnected [ 973.884781][ T48] Bluetooth: hci4: command tx timeout [ 974.499796][ T5859] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 975.082879][ T5859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.152447][ T5859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.204311][ T5859] bond0 (unregistering): Released all slaves [ 975.270852][ T5859] bond1 (unregistering): Released all slaves [ 975.573108][ T5226] 8021q: adding VLAN 0 to HW filter on device eth8 [ 980.592142][ T5859] hsr_slave_0: left promiscuous mode [ 980.652052][ T5859] hsr_slave_1: left promiscuous mode [ 980.851309][ T5859] veth1_macvtap: left promiscuous mode [ 980.891943][ T5859] veth0_macvtap: left promiscuous mode [ 980.952853][ T5859] veth1_vlan: left promiscuous mode [ 980.996670][ T5859] veth0_vlan: left promiscuous mode [ 981.267494][T15985] loop4: detected capacity change from 0 to 16 [ 981.323018][T15985] erofs (device loop4): invalid ishare xattr prefix id 0 [ 982.584271][T16000] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2568'. [ 983.530666][ T5859] team0 (unregistering): Port device team_slave_1 removed [ 983.578086][ T5859] team0 (unregistering): Port device team_slave_0 removed [ 985.065240][ T5859] IPVS: stop unused estimator thread 0... [ 985.520279][T15315] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 985.714206][T15315] usb 2-1: Using ep0 maxpacket: 16 [ 985.743134][T15315] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 985.777899][T15315] usb 2-1: config 0 interface 0 has no altsetting 0 [ 985.817700][T15315] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 985.838169][T15315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.888032][T15315] usb 2-1: Product: syz [ 985.914518][T15315] usb 2-1: Manufacturer: syz [ 985.946626][T15315] usb 2-1: SerialNumber: syz [ 985.993084][T15315] usb 2-1: config 0 descriptor?? [ 986.348990][ C1] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 986.399210][T15315] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 986.509365][T15315] imon:send_packet: packet tx failed (-71) [ 986.573836][T15315] imon 2-1:0.0: panel buttons/knobs setup failed [ 986.712167][T16043] fuse: fd is not a fuse device [ 987.064794][T15315] rc_core: IR keymap rc-imon-pad not found [ 987.082687][T15315] Registered IR keymap rc-empty [ 987.109905][T15315] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 987.157044][T15315] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 987.197559][T15315] imon:send_packet: packet tx failed (-71) [ 987.257584][T15315] imon 2-1:0.0: remote input dev register failed [ 987.295638][T15315] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 987.419362][T15315] imon 2-1:0.0: unable to initialize intf0, err 0 [ 987.447966][T15315] imon:imon_probe: failed to initialize context! [ 987.471600][T15315] imon 2-1:0.0: unable to register, err -19 [ 987.533564][T15854] bridge0: port 1(bridge_slave_0) entered blocking state [ 987.563925][T15854] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.569689][T15315] usb 2-1: USB disconnect, device number 4 [ 987.607824][T15854] bridge_slave_0: entered allmulticast mode [ 987.664341][T15854] bridge_slave_0: entered promiscuous mode [ 987.760577][T15854] bridge0: port 2(bridge_slave_1) entered blocking state [ 987.814417][T15854] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.858438][T15854] bridge_slave_1: entered allmulticast mode [ 987.918432][T15854] bridge_slave_1: entered promiscuous mode [ 987.975817][T15315] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 988.183692][T15315] usb 2-1: Using ep0 maxpacket: 16 [ 988.306516][T15854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 988.394112][T15854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 988.525339][T15315] usb 2-1: device descriptor read/all, error -71 [ 988.576174][ C0] vcan0: j1939_tp_rxtimer: 0xffff888017157800: rx timeout, send abort [ 988.869994][T15854] team0: Port device team_slave_0 added [ 988.930798][T15854] team0: Port device team_slave_1 added [ 989.077010][ C0] vcan0: j1939_tp_rxtimer: 0xffff888017fba400: rx timeout, send abort [ 989.086014][ C0] vcan0: j1939_tp_rxtimer: 0xffff888017157800: abort rx timeout. Force session deactivation [ 989.135091][T16058] loop1: detected capacity change from 0 to 512 [ 989.179042][T16058] EXT4-fs: Ignoring removed mblk_io_submit option [ 989.215942][T16058] EXT4-fs: Ignoring removed mblk_io_submit option [ 989.254432][T16058] /dev/loop1: Can't open blockdev [ 989.334972][T15854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 989.381855][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.509869][T15854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 989.585538][ C0] vcan0: j1939_tp_rxtimer: 0xffff888017fba400: abort rx timeout. Force session deactivation [ 989.633223][T15854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 989.677615][T15854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 989.821625][T15854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.421693][T16066] mmap: syz.9.2579 (16066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 990.610525][T15854] hsr_slave_0: entered promiscuous mode [ 990.642181][T15854] hsr_slave_1: entered promiscuous mode [ 990.666489][T15854] debugfs: 'hsr0' already exists in 'hsr' [ 990.682218][T15854] Cannot create hsr debugfs directory [ 991.650174][T16080] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2583'. [ 992.240563][T16091] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2585'. [ 992.293283][T16091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.426278][T16091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 993.501525][T15854] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 993.620831][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 993.674444][T15854] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 993.761547][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 993.818409][T15854] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 993.901549][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 993.939614][T15854] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 994.019226][T15854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 994.804669][T16131] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2596'. [ 994.869490][T16131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 994.882674][T16128] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2595'. [ 995.050309][T16131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.484081][T14637] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 995.559559][T15854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.663846][T14637] usb 2-1: Using ep0 maxpacket: 8 [ 995.714043][T14637] usb 2-1: config 5 has an invalid interface number: 234 but max is 0 [ 995.769579][T14637] usb 2-1: config 5 has no interface number 0 [ 995.809355][T14637] usb 2-1: config 5 interface 234 has no altsetting 0 [ 995.895547][T14637] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=79.2e [ 995.942381][T16142] fuse: fd is not a fuse device [ 995.953996][T14637] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.021315][T14637] usb 2-1: Product: syz [ 996.046358][T14637] usb 2-1: Manufacturer: syz [ 996.076187][T14637] usb 2-1: SerialNumber: syz [ 997.356579][T15854] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.440556][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.448157][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.636417][T16140] bridge_slave_0: left allmulticast mode [ 998.642251][T16140] bridge_slave_0: left promiscuous mode [ 998.649029][T16140] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.706387][T16140] bridge_slave_1: left allmulticast mode [ 998.712298][T16140] bridge_slave_1: left promiscuous mode [ 998.718939][T16140] bridge0: port 2(bridge_slave_1) entered disabled state [ 998.778089][T16140] bond0: (slave bond_slave_0): Releasing backup interface [ 998.803188][T16140] bond0: (slave bond_slave_1): Releasing backup interface [ 998.827452][T16140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 998.835108][T16140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 998.855255][T16140] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 999.016241][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.023819][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.472711][T14637] ipw 2-1:5.234: IPWireless converter converter detected [ 999.600156][T14637] usb 2-1: USB disconnect, device number 7 [ 999.665836][T14637] ipw 2-1:5.234: device disconnected [ 1000.968355][T16160] loop1: detected capacity change from 0 to 512 [ 1001.046102][T16160] EXT4-fs: Ignoring removed mblk_io_submit option [ 1001.106389][T16160] EXT4-fs: Ignoring removed mblk_io_submit option [ 1001.155946][T16160] /dev/loop1: Can't open blockdev [ 1002.616142][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1002.624397][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1004.510557][T16197] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2607'. [ 1004.680199][T15854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1005.183294][T15854] veth0_vlan: entered promiscuous mode [ 1005.317611][T15854] veth1_vlan: entered promiscuous mode [ 1005.326489][T16204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2608'. [ 1005.691183][T15854] veth0_macvtap: entered promiscuous mode [ 1005.816973][T16208] fuse: fd is not a fuse device [ 1006.014091][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 1006.080720][T16211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2610'. [ 1006.451063][T15854] veth1_macvtap: entered promiscuous mode [ 1007.075610][T15854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1007.478555][T15854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1007.689096][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.737076][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.781072][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1007.810874][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1008.807096][T16234] fuse: fd is not a fuse device [ 1009.852879][T16250] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2617'. [ 1010.454720][T16258] netlink: 40 bytes leftover after parsing attributes in process `syz.9.2619'. [ 1011.052561][T16266] fuse: fd is not a fuse device [ 1012.506900][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053cace00: rx timeout, send abort [ 1013.007920][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aff0200: rx timeout, send abort [ 1013.017026][ C0] vcan0: j1939_tp_rxtimer: 0xffff888053cace00: abort rx timeout. Force session deactivation [ 1013.516667][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804aff0200: abort rx timeout. Force session deactivation [ 1013.631479][ T5859] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.693568][ T5859] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.906777][T12533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.953566][T12533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.970820][T16305] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2628'. [ 1015.689257][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b7d4400: rx timeout, send abort [ 1016.190079][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b7d4200: rx timeout, send abort [ 1016.200076][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b7d4400: abort rx timeout. Force session deactivation [ 1016.242519][T16341] loop0: detected capacity change from 0 to 512 [ 1016.288234][T16341] EXT4-fs: Ignoring removed mblk_io_submit option [ 1016.347324][T16341] EXT4-fs: Ignoring removed mblk_io_submit option [ 1016.389784][T16341] /dev/loop0: Can't open blockdev [ 1016.698683][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802b7d4200: abort rx timeout. Force session deactivation [ 1017.306425][T16353] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2641'. [ 1018.284649][ T24] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 1018.485703][ T24] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 1018.517152][ T24] usb 2-1: config 5 has no interface number 0 [ 1018.548347][ T24] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 1018.592064][ T24] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1018.610611][ T24] usb 2-1: config 5 interface 123 has no altsetting 0 [ 1018.640134][ T24] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 1018.672241][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.705265][ T24] usb 2-1: Product: syz [ 1018.721098][ T24] usb 2-1: Manufacturer: syz [ 1018.739622][ T24] usb 2-1: SerialNumber: syz [ 1019.069854][T16389] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2648'. [ 1019.110386][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053cc7600: rx timeout, send abort [ 1019.506803][ T24] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 1019.611143][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053f8a800: rx timeout, send abort [ 1019.620213][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053cc7600: abort rx timeout. Force session deactivation [ 1019.814417][ T24] usb 2-1: USB disconnect, device number 8 [ 1020.120090][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053f8a800: abort rx timeout. Force session deactivation [ 1020.884162][T16401] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2654'. [ 1021.249512][T16410] binder: 16409:16410 unknown command 0 [ 1021.270723][T16410] binder: 16409:16410 ioctl c0306201 800001c0 returned -22 [ 1022.754585][ T29] audit: type=1326 audit(1779807990.075:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16428 comm="syz.9.2661" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f5601c code=0x0 [ 1022.788235][T16432] fuse: fd is not a fuse device [ 1024.007265][T16448] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2664'. [ 1024.864925][T16456] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.2667'. [ 1025.891411][T14637] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1026.255206][T14637] usb 1-1: Using ep0 maxpacket: 16 [ 1026.269633][T14637] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1027.233997][T14637] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1027.322170][T14637] usb 1-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 1027.350249][T14637] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.349998][T14637] usb 1-1: Product: syz [ 1028.387803][T14637] usb 1-1: Manufacturer: syz [ 1028.411424][T14637] usb 1-1: SerialNumber: syz [ 1030.358998][T14637] usb 1-1: config 0 descriptor?? [ 1034.061278][T14637] usb 1-1: can't set config #0, error -71 [ 1034.175726][T14637] usb 1-1: USB disconnect, device number 3 [ 1035.567899][T14637] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1035.797741][T14637] usb 2-1: Using ep0 maxpacket: 8 [ 1035.901785][T14637] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1035.946916][T14637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1035.996702][T14637] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1036.044720][T14637] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1036.083645][T14637] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1036.103572][T14637] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.306751][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2680'. [ 1036.342070][T16509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1036.373144][T14637] usb 2-1: GET_CAPABILITIES returned 2f [ 1036.395151][T14637] usbtmc 2-1:16.0: can't read capabilities [ 1036.605041][T16509] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1036.699700][T14637] IPVS: starting estimator thread 0... [ 1036.780503][T16521] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2682'. [ 1036.824263][T16523] IPVS: using max 240 ests per chain, 12000 per kthread [ 1036.905692][T16525] tipc: Enabling of bearer rejected, failed to enable media [ 1038.300741][T14637] usb 2-1: USB disconnect, device number 9 [ 1039.486539][T16561] ADFS-fs (loop1): error: unable to read block 3, try 0 [ 1040.543977][T14005] Bluetooth: hci2: command 0x0406 tx timeout [ 1047.148036][T16583] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1047.190036][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2695'. [ 1048.457101][T16595] tipc: Enabling of bearer rejected, failed to enable media [ 1050.358096][T16629] netlink: 16178 bytes leftover after parsing attributes in process `syz.8.2709'. [ 1050.463763][T16636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2710'. [ 1055.748095][T16667] tipc: Enabling of bearer rejected, failed to enable media [ 1056.805492][T16685] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2724'. [ 1057.392379][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 1059.784533][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805491d600: rx timeout, send abort [ 1059.961046][T16730] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.2738'. [ 1060.284562][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054807c00: rx timeout, send abort [ 1060.293521][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805491d600: abort rx timeout. Force session deactivation [ 1060.660274][T16746] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2743'. [ 1060.793240][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054807c00: abort rx timeout. Force session deactivation [ 1063.462080][T16777] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2751'. [ 1064.097477][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.274572][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 1064.338918][ T1310] ------------[ cut here ]------------ [ 1064.344653][ T1310] WARNING: ./include/linux/skbuff.h:3242 at lowpan_xmit+0xa0e/0x1d00, CPU#0: aoe_tx0/1310 [ 1064.355134][ T1310] Modules linked in: [ 1064.359325][ T1310] CPU: 0 UID: 0 PID: 1310 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 1064.368907][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.379276][ T1310] RIP: 0010:lowpan_xmit+0xa0e/0x1d00 [ 1064.384965][ T1310] Code: fb 8b 7d d4 e8 13 e5 24 f2 48 89 df e9 35 fd ff ff 44 89 f7 e8 03 e5 24 f2 66 41 83 fd ff 0f 85 7f fd ff ff e8 a3 b7 76 f1 90 <0f> 0b 90 80 7d c0 00 0f 84 3b 12 00 00 48 8b bd 00 ff ff ff 0f b7 [ 1064.404882][ T1310] RSP: 0000:ffff8881066a3960 EFLAGS: 00010293 [ 1064.411253][ T1310] RAX: ffffffff9089a74d RBX: 0000000000000000 RCX: ffff888108a12140 [ 1064.419614][ T1310] RDX: 0000000000000000 RSI: 000000000000ffff RDI: 000000000000ffff [ 1064.427869][ T1310] RBP: ffff8881066a3ac0 R08: ffffea000000000f R09: 0000000000000000 [ 1064.436138][ T1310] R10: ffff888105ea38d8 R11: ffff888118a40b90 R12: ffff888108a12d00 [ 1064.444448][ T1310] R13: 000000000000ffff R14: 0000000000000000 R15: ffff88810285fc00 [ 1064.452589][ T1310] FS: 0000000000000000(0000) GS:ffff8881aa60f000(0000) knlGS:0000000000000000 [ 1064.461803][ T1310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1064.468678][ T1310] CR2: 0000000080001000 CR3: 0000000012666000 CR4: 00000000003526f0 [ 1064.476952][ T1310] Call Trace: [ 1064.480355][ T1310] [ 1064.483591][ T1310] ? validate_xmit_xfrm+0x84/0x19e0 [ 1064.489129][ T1310] ? netif_skb_features+0x1bd3/0x1ea0 [ 1064.494974][ T1310] ? kmsan_report+0x2d0/0x320 [ 1064.499926][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1064.506605][ T1310] ? __pfx_lowpan_xmit+0x10/0x10 [ 1064.511762][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 1064.517361][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 1064.522618][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1064.529031][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 1064.534477][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1064.541042][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1064.547446][ T1310] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1064.552773][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 1064.558349][ T1310] tx+0xb6/0x440 [ 1064.562263][ T1310] ? __pfx_tx+0x10/0x10 [ 1064.566745][ T1310] kthread+0x17d/0x370 [ 1064.571030][ T1310] ? __pfx_default_wake_function+0x10/0x10 [ 1064.577258][ T1310] kthread+0x53a/0x5f0 [ 1064.581561][ T1310] ? __pfx_kthread+0x10/0x10 [ 1064.586563][ T1310] ? __pfx_kthread+0x10/0x10 [ 1064.591395][ T1310] ret_from_fork+0x20f/0x8d0 [ 1064.596370][ T1310] ? __switch_to+0x573/0x7a0 [ 1064.601176][ T1310] ? __pfx_kthread+0x10/0x10 [ 1064.606116][ T1310] ret_from_fork_asm+0x1a/0x30 [ 1064.611158][ T1310] [ 1064.614485][ T1310] ---[ end trace 0000000000000000 ]--- [ 1064.620064][ T1310] ===================================================== [ 1064.627281][ T1310] BUG: KMSAN: uninit-value in lowpan_xmit+0xa6b/0x1d00 [ 1064.634398][ T1310] lowpan_xmit+0xa6b/0x1d00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1064.639049][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 1064.644687][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 1064.649869][ T1310] tx+0xb6/0x440 [ 1064.653704][ T1310] kthread+0x17d/0x370 [ 1064.657924][ T1310] kthread+0x53a/0x5f0 [ 1064.662149][ T1310] ret_from_fork+0x20f/0x8d0 [ 1064.667180][ T1310] ret_from_fork_asm+0x1a/0x30 [ 1064.672116][ T1310] [ 1064.674608][ T1310] Uninit was stored to memory at: [ 1064.679852][ T1310] lowpan_xmit+0x68f/0x1d00 [ 1064.684843][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 1064.690170][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 1064.695476][ T1310] tx+0xb6/0x440 [ 1064.699173][ T1310] kthread+0x17d/0x370 [ 1064.703500][ T1310] kthread+0x53a/0x5f0 [ 1064.707758][ T1310] ret_from_fork+0x20f/0x8d0 [ 1064.712489][ T1310] ret_from_fork_asm+0x1a/0x30 [ 1064.717569][ T1310] [ 1064.719966][ T1310] Uninit was created at: [ 1064.724538][ T1310] kmem_cache_alloc_node_noprof+0x3cd/0x12c0 [ 1064.730692][ T1310] __alloc_skb+0x855/0x1190 [ 1064.735556][ T1310] new_skb+0x4a/0x550 [ 1064.739793][ T1310] aoecmd_cfg+0x2c2/0xb70 [ 1064.744482][ T1310] discover_timer+0x64/0x80 [ 1064.749165][ T1310] call_timer_fn+0x4c/0x510 [ 1064.753946][ T1310] __run_timer_base+0x80a/0xdb0 [ 1064.758932][ T1310] run_timer_softirq+0x3a/0x70 [ 1064.763959][ T1310] handle_softirqs+0x171/0x7b0 [ 1064.768918][ T1310] __irq_exit_rcu+0x9a/0x1e0 [ 1064.773858][ T1310] irq_exit_rcu+0x12/0x20 [ 1064.778351][ T1310] sysvec_apic_timer_interrupt+0x84/0x90 [ 1064.784398][ T1310] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 1064.790530][ T1310] [ 1064.792951][ T1310] CPU: 0 UID: 0 PID: 1310 Comm: aoe_tx0 Tainted: G W syzkaller #0 PREEMPT(full) [ 1064.803808][ T1310] Tainted: [W]=WARN [ 1064.807686][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.818106][ T1310] ===================================================== [ 1064.825301][ T1310] Disabling lock debugging due to kernel taint [ 1064.831550][ T1310] Kernel panic - not syncing: kmsan.panic set ... [ 1064.838071][ T1310] CPU: 0 UID: 0 PID: 1310 Comm: aoe_tx0 Tainted: G B W syzkaller #0 PREEMPT(full) [ 1064.848835][ T1310] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1064.853943][ T1310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.864105][ T1310] Call Trace: [ 1064.867471][ T1310] [ 1064.870490][ T1310] __dump_stack+0x26/0x30 [ 1064.874972][ T1310] dump_stack_lvl+0x50/0x1c0 [ 1064.879691][ T1310] ? dump_stack+0x12/0x25 [ 1064.884154][ T1310] dump_stack+0x1e/0x25 [ 1064.888429][ T1310] vpanic+0x7b4/0x1430 [ 1064.892658][ T1310] panic+0x15d/0x160 [ 1064.896813][ T1310] kmsan_report+0x31a/0x320 [ 1064.901471][ T1310] ? __msan_warning+0x1b/0x30 [ 1064.906277][ T1310] ? lowpan_xmit+0xa6b/0x1d00 [ 1064.911082][ T1310] ? dev_hard_start_xmit+0x22f/0xa80 [ 1064.916503][ T1310] ? __dev_queue_xmit+0x2990/0x5a00 [ 1064.921839][ T1310] ? tx+0xb6/0x440 [ 1064.925703][ T1310] ? kthread+0x17d/0x370 [ 1064.930075][ T1310] ? kthread+0x53a/0x5f0 [ 1064.934461][ T1310] ? ret_from_fork+0x20f/0x8d0 [ 1064.939359][ T1310] ? ret_from_fork_asm+0x1a/0x30 [ 1064.944456][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 1064.949722][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1064.956205][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1064.962429][ T1310] ? report_bug+0x196/0x1d0 [ 1064.967200][ T1310] ? lowpan_xmit+0xa10/0x1d00 [ 1064.972023][ T1310] ? lowpan_xmit+0xa0e/0x1d00 [ 1064.976828][ T1310] ? handle_bug+0xb2/0x230 [ 1064.981359][ T1310] ? exc_invalid_op+0x1f/0x50 [ 1064.986158][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 1064.991437][ T1310] __msan_warning+0x1b/0x30 [ 1064.996077][ T1310] lowpan_xmit+0xa6b/0x1d00 [ 1065.000727][ T1310] ? validate_xmit_xfrm+0x84/0x19e0 [ 1065.006062][ T1310] ? netif_skb_features+0x1bd3/0x1ea0 [ 1065.011597][ T1310] ? kmsan_report+0x2d0/0x320 [ 1065.016425][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1065.022920][ T1310] ? __pfx_lowpan_xmit+0x10/0x10 [ 1065.027991][ T1310] dev_hard_start_xmit+0x22f/0xa80 [ 1065.033285][ T1310] __dev_queue_xmit+0x2990/0x5a00 [ 1065.038481][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1065.044701][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 1065.049975][ T1310] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1065.056462][ T1310] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1065.062675][ T1310] ? __dev_queue_xmit+0x2d4/0x5a00 [ 1065.067936][ T1310] ? kmsan_get_metadata+0xf1/0x160 [ 1065.073229][ T1310] tx+0xb6/0x440 [ 1065.076948][ T1310] ? __pfx_tx+0x10/0x10 [ 1065.081249][ T1310] kthread+0x17d/0x370 [ 1065.085461][ T1310] ? __pfx_default_wake_function+0x10/0x10 [ 1065.091416][ T1310] kthread+0x53a/0x5f0 [ 1065.095642][ T1310] ? __pfx_kthread+0x10/0x10 [ 1065.100383][ T1310] ? __pfx_kthread+0x10/0x10 [ 1065.105120][ T1310] ret_from_fork+0x20f/0x8d0 [ 1065.109841][ T1310] ? __switch_to+0x573/0x7a0 [ 1065.114594][ T1310] ? __pfx_kthread+0x10/0x10 [ 1065.119338][ T1310] ret_from_fork_asm+0x1a/0x30 [ 1065.124270][ T1310] [ 1065.127612][ T1310] Kernel Offset: disabled [ 1065.131986][ T1310] Rebooting in 86400 seconds..