last executing test programs: 11m39.642384063s ago: executing program 4 (id=726): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1a}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)="a1", 0x1}], 0x1}}], 0x1, 0x200400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000ec7b6cfc635d0b0ad7017c9d184f843485ad6b0c66e46b4f2b2b3338ded465cc7a55d2a736fbe5caf56af30d84e957c1aff67f265538b2c9243391e98bd0d49249e784ec5865bec706d0ffcc9ee36f168460645fc9b9cbc6444f578ed1a652063ccaf386202986098ad022d4f06ff51960d8c526db848130817a8f2ad3580e6e80bada6adb489c66ee82b00b9777dbaab08233e404107ab405d1056190224cb200"/178, @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11m37.90635753s ago: executing program 0 (id=727): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r7, 0x4008700e, 0x863) syz_clone(0x180000, &(0x7f00000000c0)="c5729af40916827ee4abee556356da4dbc30aa85ec05292bc5d7f7ca7014e832fbd832547cd5e452d96dc60dd9a572827420bd459b373862f8c9e9", 0x3b, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_dev$MSR(0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) 11m37.642646608s ago: executing program 4 (id=728): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="f1d966c6"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 11m36.384307747s ago: executing program 4 (id=729): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="15000000000000000200", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000210000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, &(0x7f0000000500)=""/80, &(0x7f0000000580), &(0x7f0000000640)="10b76b557ee57beebb8cb2c952bd7e014e409e5349c7c213433bb88c94e13437bcc5a5b2100d64f04ad7b6451c5d12c8fb4cedee30870c00894d69a551d20be88969dd8bc30bd7236dde0d6b95e15145f4ccf911ea8b8fb53065292568127df1feb1f36c3af09386a177221fc902cfad7c8dbb4e91386a21e125c99196d817e88097173889d242ecba238d96c9d5e660bd60d268dec8cc73c2dae63cccc327", 0x9, r1}, 0x38) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r3, 0x0, 0x770e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) chown(0x0, 0x0, 0xee01) connect$inet(0xffffffffffffffff, 0x0, 0x0) 11m36.000501755s ago: executing program 0 (id=731): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000300)='./file2\x00', 0x0, &(0x7f00000000c0)={[{@dax}, {@cache_strategy_readahead}, {@noacl}, {@cache_strategy_readaround}, {@cache_strategy_readahead}, {@dax_always}, {@acl}]}, 0x1, 0x1a7, &(0x7f0000000340)="$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") 11m35.03760733s ago: executing program 4 (id=733): sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, 0x0, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0), 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="3400000000000000000000000700000094040020070f6e0a0101010a010102ac14141988040c08440c9eb00000000000000003000000000018000000000000"], 0x50}}], 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000600)={@val={0x6f01, 0x800}, @val={0x3, 0x3, 0x27, 0xc, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x8, 0x0, 0x0, 0x0, 0x18, {[@timestamp={0x5, 0xa, 0x7fffff8}, @generic={0x0, 0x2}]}}}}}}, 0x42) r6 = socket(0x11, 0x2, 0x0) setsockopt(r6, 0x107, 0x1, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close(0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x5b4}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2bf}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000004) pipe(&(0x7f0000000240)={0xffffffffffffffff}) tee(r8, r8, 0x200, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008880}, 0x0) 11m31.716150898s ago: executing program 0 (id=737): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="15000000000000000200", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000210000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, &(0x7f0000000500)=""/80, &(0x7f0000000580), &(0x7f0000000640)="10b76b557ee57beebb8cb2c952bd7e014e409e5349c7c213433bb88c94e13437bcc5a5b2100d64f04ad7b6451c5d12c8fb4cedee30870c00894d69a551d20be88969dd8bc30bd7236dde0d6b95e15145f4ccf911ea8b8fb53065292568127df1feb1f36c3af09386a177221fc902cfad7c8dbb4e91386a21e125c99196d817e88097173889d242ecba238d96c9d5e660bd60d268dec8cc73c2dae63cccc327", 0x9, r1}, 0x38) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r3, 0x0, 0x770e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) chown(0x0, 0x0, 0xee01) connect$inet(0xffffffffffffffff, 0x0, 0x0) 11m31.160970451s ago: executing program 4 (id=739): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="f1d966c6"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$can_bcm(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 11m29.560848991s ago: executing program 4 (id=742): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) creat(0x0, 0x5d) r0 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x1c, 0x1ffe, 0x0, 0x5, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x30) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) shmget(0x3, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) fcntl$setlease(r3, 0x400, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) inotify_init1(0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) 11m26.591090907s ago: executing program 0 (id=747): syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0xc, 0x2}, {0x5}}}}, 0xf) 11m25.549366373s ago: executing program 0 (id=750): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000040)=0x14, 0x4) sendmmsg$inet6(r0, &(0x7f0000000d00)=[{{&(0x7f0000000080)={0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x38}, 0x1a}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000300)="a1", 0x1}], 0x1}}], 0x1, 0x200400c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000ec7b6cfc635d0b0ad7017c9d184f843485ad6b0c66e46b4f2b2b3338ded465cc7a55d2a736fbe5caf56af30d84e957c1aff67f265538b2c9243391e98bd0d49249e784ec5865bec706d0ffcc9ee36f168460645fc9b9cbc6444f578ed1a652063ccaf386202986098ad022d4f06ff51960d8c526db848130817a8f2ad3580e6e80bada6adb489c66ee82b00b9777dbaab08233e404107ab405d1056190224cb200"/178, @ANYRES16=r2, @ANYBLOB="0d030000000000000000130000000c0009800800020000000000"], 0x20}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x40, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r5, &(0x7f0000000480)={&(0x7f0000000500)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x2}, 0x80, 0x0}, 0x4000011) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568da", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4848}, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, 0x0, 0x0}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 11m23.695327719s ago: executing program 0 (id=753): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r3, &(0x7f0000004640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c1}, 0xc044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001700)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT=r9, @ANYRESHEX=0x0, @ANYRESDEC]) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xa4, 0x1e, &(0x7f0000000100)=""/30, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8000008, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10008}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(r11, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x44040, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r8, r7, 0x0, r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x18, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001c80)=""/24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m13.948799254s ago: executing program 32 (id=742): madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) creat(0x0, 0x5d) r0 = dup(0xffffffffffffffff) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000000)={0x23, 0x3, 0x1c, 0x1ffe, 0x0, 0x5, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x8, 0x0, 0x0, 0x4, 0x5f, 0xfffefe0000000009, 0x7, 0xffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x20) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xfffffffa, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, 0x30) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) shmget(0x3, 0x1000, 0x80, &(0x7f0000ffd000/0x1000)=nil) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x8000) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, 0x0) fcntl$setlease(r3, 0x400, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000240)="c8", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x7, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0xe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0xff, @local, 0x7}, 0x1c) inotify_init1(0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) socket$xdp(0x2c, 0x3, 0x0) 11m8.083465377s ago: executing program 33 (id=753): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) read$FUSE(r3, &(0x7f0000004640)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000002000), r5) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f0000002280)={0x24, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x40400c1}, 0xc044) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000001700)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYRESOCT=r9, @ANYRESHEX=0x0, @ANYRESDEC]) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f00)={0x6, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0xa4, 0x1e, &(0x7f0000000100)=""/30, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x8000008, 0x1}, 0x8, 0x10, &(0x7f0000000180)={0x0, 0xb, 0x10000, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10008}, 0x94) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) syz_clone3(&(0x7f00000004c0)={0x84004400, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) r11 = socket$inet_sctp(0x2, 0x0, 0x84) bind$inet(r11, &(0x7f0000000000)={0x2, 0x3, @local}, 0x10) sendto$inet(r9, 0x0, 0x0, 0x44040, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x64) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000580)={r8, r7, 0x0, r10}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x8, 0x18, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000001c80)=""/24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.340554034s ago: executing program 2 (id=1856): r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, 0x0, 0x1) 8.307135822s ago: executing program 1 (id=1857): ioctl(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="f1d966c6"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) io_uring_setup(0x44dc, &(0x7f0000000000)={0x0, 0xbfffeffb, 0x1000, 0x1000b, 0x2}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/mcfilter\x00') socket$inet_mptcp(0x2, 0x1, 0x106) preadv(r7, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 8.187437576s ago: executing program 3 (id=1858): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000180)={0x200, 0x8, 0x6, 0x2}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00008a7000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0xfffffffffffffd2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r1 = io_uring_setup(0x7535, &(0x7f0000000040)={0x0, 0xc4ae, 0x1000, 0x6, 0x389}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80400000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0xdd, 0x3, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) shutdown(0xffffffffffffffff, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="ccce116e74bbb16c44134a4b23b8", 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7.158845774s ago: executing program 2 (id=1859): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) io_uring_setup(0x44dc, &(0x7f0000000000)={0x0, 0xbfffeffb, 0x1000, 0x1000b, 0x2}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 7.130475587s ago: executing program 6 (id=1860): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000600)={[0x4c94, 0x200, 0x4, 0x488e, 0x9, 0xa, 0x9d110b0, 0x1d69, 0x4, 0xffff741c, 0xe, 0x2, 0x7, 0xa, 0xf, 0xfff, 0x1, 0x0, 0x8000, 0x1ff, 0x0, 0x1, 0x40, 0x10000, 0x9, 0x709, 0x3, 0x2, 0xffffffff, 0x3, 0x1000, 0xf, 0xfffffffc, 0x0, 0x5, 0x4ef2, 0x9, 0x3ff, 0xf, 0xf, 0x80000001, 0x2, 0x7, 0xffff, 0x0, 0x3, 0xffffff7f, 0x7, 0x8, 0x7ff, 0x9, 0x7f, 0x24fc, 0xfffffffd, 0x40, 0x955, 0x1, 0x7fff, 0x1ff, 0x4, 0x1, 0x7, 0x6, 0x2, 0x7f18d2c7, 0x9, 0xfffffff7, 0x5, 0x8000, 0x1, 0x8000, 0xc829, 0x7, 0x5, 0x23d8, 0x6, 0x8a0, 0x7, 0x55, 0x1000, 0x7, 0x80000000, 0x10, 0xb, 0x80000001, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0x7fffffff, 0x7, 0x200, 0x48, 0x5, 0x1, 0x100, 0xe, 0xed2, 0x3b, 0x1, 0x10000, 0x9, 0x9, 0x4, 0x40, 0x6, 0x5, 0x0, 0x7ff, 0x1, 0x822, 0x0, 0x5, 0x200, 0x891f, 0x2, 0x4, 0x2, 0x1, 0x10001, 0x0, 0xfffffff9, 0x100, 0xe, 0x4, 0xd, 0x1, 0x0, 0x5, 0x2, 0x7, 0x2, 0xffff, 0x76, 0x7, 0x8, 0x9, 0x6, 0x1000, 0x5, 0x141, 0x10, 0x43de, 0x2e3880, 0x1, 0x7fffffff, 0x4, 0x3, 0x2, 0x3, 0x6, 0xff00000, 0x3, 0x5, 0x5, 0xfff, 0x2, 0x20a, 0x2, 0x0, 0x7, 0x400, 0x6, 0x0, 0x705, 0x0, 0x9, 0x1, 0xd, 0x2, 0x8, 0x656a, 0x4, 0x7ff, 0x6, 0xfffffff9, 0x3, 0xffffffff, 0x7fff, 0x5, 0x629c, 0x6, 0x490, 0x7, 0xfffffff5, 0x10000, 0x66e, 0xa, 0x7, 0x80000001, 0x9, 0xbe, 0x8, 0x8, 0x5, 0x8, 0xd1c1, 0x5, 0x6, 0x2, 0x8001, 0x7ff, 0x9, 0x4, 0xffff080c, 0x555c, 0x4b, 0x9, 0x33716a0e, 0xfffffff8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x0, 0x4, 0x95, 0x7, 0x78f0c9c6, 0x2, 0x6, 0x67d2ae15, 0xfffffff9, 0x61, 0x3, 0x9, 0x1, 0xf0, 0x8, 0x10000, 0x478, 0x6, 0xc0000000, 0xfffffffe, 0x8, 0x10000, 0xa0307df, 0x7, 0x1, 0x867, 0x5, 0xffff, 0x9, 0x10, 0xfffffbed, 0xade, 0x2, 0x3, 0x6, 0x9, 0x2, 0x3974, 0x0, 0x3, 0x10001, 0xa8b9, 0x2, 0x3, 0xfffffffb, 0x2, 0x7f, 0x8, 0xec, 0xa, 0x80000000, 0x2, 0x33f1, 0xf2, 0x1ff, 0x1000, 0x66f6, 0x40, 0x0, 0x8, 0x585, 0x3ff, 0x2, 0x1, 0x8000000, 0x0, 0x9, 0x1000, 0x7, 0x10000000, 0x200, 0x1, 0x1, 0x7, 0x0, 0x8001, 0x6, 0x3, 0x2, 0x6, 0x9, 0x7ff, 0x8, 0x8, 0x40, 0x1, 0x101, 0xfffffffb, 0xfffffff7, 0xc3b, 0x1, 0x9, 0x9, 0xffff, 0x8, 0x7, 0x3, 0x41, 0x3, 0x5, 0xffffb600, 0x5, 0x0, 0x3, 0x3, 0x2e, 0x10, 0x8000, 0xfffffffa, 0x5, 0x6, 0x1ed6, 0x5, 0x3ff, 0x3ff, 0x9, 0x2, 0x6, 0xffff, 0x800, 0xffff, 0x805, 0xf689, 0xe, 0x0, 0x81, 0x7, 0x6, 0x8, 0x2469, 0xceb9, 0x80, 0x2d7, 0x7, 0x3, 0x9, 0x5, 0x1, 0x3, 0x4, 0x4, 0x3, 0x3, 0x7, 0x292, 0x3, 0x101, 0x2, 0x8, 0x2, 0x7, 0x2, 0xfffffff8, 0x4, 0x3, 0x9, 0x5, 0xe627, 0x4, 0xffffff00, 0x10001, 0x2, 0xf, 0x5, 0xc, 0x4, 0x200, 0xd, 0x6, 0xffffffff, 0x3ff, 0x4, 0x1, 0x2400, 0xe9f1, 0x10000, 0x81, 0x4421, 0x0, 0x59c, 0x8, 0x6, 0x4, 0x2, 0x62, 0x3, 0x4, 0xfffffffe, 0x8, 0x4e, 0x7, 0x1, 0x6, 0xffff3829, 0x0, 0x87a4, 0x3, 0x6, 0x100, 0x7f, 0x100, 0xb4, 0x1133, 0x20, 0x7, 0x4, 0x7, 0xfffffff0, 0x1000, 0xe, 0x4, 0x0, 0x0, 0xf, 0x7, 0x4, 0x7, 0x2, 0x1, 0x560, 0x8, 0x8000, 0x0, 0xddab, 0xe1f, 0x8, 0xa, 0xb5dd, 0x39, 0xd8c69d2, 0x8, 0x4, 0x80000000, 0x8000, 0x5d9, 0x9, 0x1, 0x8, 0x9, 0x6, 0x74460464, 0xfffffffa, 0x1ff, 0x6, 0x4, 0x1, 0x7, 0xffffff88, 0x4, 0x1ff, 0x7, 0x1, 0x22, 0x882, 0xffff, 0x1, 0x2, 0x3, 0x4, 0x401, 0x8001, 0xfffffbff, 0x6, 0x9, 0x45d, 0x409, 0x0, 0x7, 0x7f, 0x2, 0xa0, 0x1, 0x8, 0xffffff00, 0x9, 0x38e, 0x4, 0xc0d, 0x96, 0x0, 0x8, 0x98, 0x1, 0xc1, 0x9, 0x2, 0x4, 0x7fffffff, 0x1, 0x800, 0x400, 0x7fff, 0xc2, 0x22, 0x2, 0x7, 0xfffffeff, 0x10000, 0x5, 0x0, 0x8, 0x4, 0x5, 0x8, 0x3, 0x3, 0x4d53, 0x101000, 0x2, 0x5, 0x9, 0xd3, 0x36, 0xd48, 0xf, 0x1, 0xffff, 0x8, 0x10, 0x9, 0x0, 0x9, 0x10000, 0x5, 0x6, 0x4, 0x4, 0x0, 0x6f86f9c3, 0x3, 0x400, 0x7ff, 0x100, 0x6, 0x9, 0x9, 0xd, 0x8a, 0x9, 0x0, 0xebd2, 0x8, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x7, 0xf826, 0x0, 0x2, 0x9, 0x11, 0x0, 0x9, 0x1, 0x4, 0x8, 0x6, 0x6, 0x4, 0x1000, 0x9, 0x0, 0x5, 0x0, 0x8, 0x8, 0x0, 0xa, 0x7f, 0xffffffff, 0x1, 0xdb18, 0x2, 0x5, 0x1, 0xe1e1, 0x7f, 0x101, 0x6, 0xe3, 0x1000, 0xe570, 0x0, 0x10, 0x9, 0xe, 0x3, 0xf, 0xc, 0x4, 0x3, 0x0, 0xc, 0x0, 0x1957, 0x800, 0x3d1, 0x96, 0xfffffffe, 0x9, 0xffffe433, 0x6, 0x6, 0x3, 0x6, 0x6, 0x9, 0x7b3, 0x7db, 0x8001, 0x3, 0x24aef43c, 0x7, 0x2, 0x8, 0x7, 0x43, 0x101, 0x100, 0x2, 0x7, 0x3, 0x10000, 0x6, 0x2, 0x200, 0xfffffffd, 0x0, 0x1, 0x8001, 0x7, 0x4, 0x3, 0x1000, 0x2, 0x4, 0x3, 0x7, 0x224, 0x9, 0x3, 0x6a6035e3, 0xc, 0xda, 0x6, 0x6, 0xfffffff3, 0x7fc5, 0x0, 0x0, 0x5, 0x3, 0xe, 0x7, 0x4, 0xa, 0x10, 0x7, 0x9, 0xd236, 0x0, 0x4, 0x0, 0x6, 0xa78, 0xea, 0xfe8, 0x5, 0xffffffff, 0xfffffff8, 0x2, 0x101, 0xe4f, 0x1, 0x3, 0x4, 0x5, 0x5, 0xdde, 0xa, 0x3, 0xd, 0x92f, 0x5de, 0x22a8000, 0x6, 0x101, 0x5, 0x4, 0x1, 0x1, 0x8cd, 0xbf4, 0x7abe, 0x800, 0x2d7, 0x0, 0xffff, 0x9, 0x4, 0xd79, 0x8, 0x8, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3, 0x0, 0x10, 0x7ff, 0x4, 0x6, 0x7, 0x8, 0x5, 0x10, 0x0, 0x5028, 0x6, 0x7, 0x9, 0xb, 0xabdf, 0x9, 0x5, 0xfffff170, 0x6, 0x5, 0x7, 0x4, 0x7, 0x4, 0x8, 0x23680, 0x3, 0x8, 0x800, 0x5, 0x6, 0x5, 0x4, 0xc440, 0xb, 0x8, 0x3, 0x9, 0x1, 0x6, 0x3c, 0x1, 0x2, 0x9, 0x4, 0x8, 0x1000, 0xdcc, 0x44f, 0x81, 0xfa86, 0x0, 0x0, 0x1ff, 0x80000000, 0x4, 0x2, 0x7, 0x5, 0x9ff, 0x1, 0x4, 0x100, 0xfffff56f, 0x11eecf5b, 0x0, 0x2, 0x4, 0x6, 0x6, 0x28000000, 0x4, 0x3, 0xe, 0x6, 0x5, 0xe705, 0xfffffffe, 0x9, 0x6, 0xa, 0x8, 0x2, 0x7, 0x5, 0x800, 0x5, 0x3, 0x1e, 0x5, 0xffff, 0x1, 0x3, 0xb5, 0x0, 0x3ff, 0x3, 0x4, 0xffffff01, 0x7, 0x1, 0xf, 0x2, 0x10001, 0x10, 0x2, 0x80000001, 0x6, 0x6, 0x380f, 0x7800000, 0xffff, 0x7f, 0x2, 0x5, 0x5, 0x5d4ff57e, 0x81a6, 0x5, 0xc, 0x8, 0x9, 0x5, 0x7, 0xfe0, 0x7, 0x1, 0x60000000, 0x80000000, 0x400, 0x9, 0x0, 0x4, 0x1, 0xc, 0x3, 0x400, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x3e, 0x9, 0x3, 0x8, 0x5, 0x3ff, 0x3, 0x81, 0xd44, 0x3ff, 0x1, 0xe2cd, 0xf8b, 0xfd0e, 0x3, 0x7, 0x9, 0x2, 0x29, 0xfffff800, 0x4, 0x90, 0x3, 0x2, 0xb, 0x5, 0x4, 0x80, 0x7, 0xfffffff8, 0xe, 0x2, 0x8, 0x8000, 0x0, 0x2, 0x3, 0x4cd5, 0x3000, 0x100000, 0xffc0, 0x6, 0x800, 0x81, 0xc, 0x2, 0xfffffff0, 0x7, 0x9, 0x8, 0x8, 0x39b0, 0x7, 0x9, 0x8, 0x380000, 0x3, 0xa, 0x1, 0x5, 0x70000000, 0x3, 0x1, 0x3, 0x1, 0x8001, 0x6, 0x80000000, 0xfffffff6, 0x2, 0x6f8, 0x10001, 0xbe, 0x2, 0x3, 0x10, 0xd98, 0x400, 0x8, 0x10, 0x3, 0x5, 0x0, 0x800, 0x2, 0x9284, 0x8001, 0x8, 0x9, 0xff, 0x0, 0x5, 0x9, 0x2b9, 0x24, 0x0, 0xffffffff, 0x2, 0x7fff, 0x9, 0xa, 0xfff, 0x1, 0xffff, 0x8, 0x9, 0x7, 0x24, 0xffff2192, 0x1, 0x5, 0x9, 0x6, 0x9, 0x8, 0x9, 0x2, 0x9, 0xd, 0x52, 0x9, 0x4, 0x4, 0x4, 0x0, 0x80, 0x101, 0x8, 0x4, 0xe8e6, 0x2, 0x6, 0xa0b, 0x1, 0xfffff001, 0x4, 0xffffd377, 0x0, 0x9, 0x3, 0x2, 0x101, 0xf, 0x0, 0x0, 0x6, 0x1, 0x1, 0x10001, 0x59fa, 0x6, 0x99, 0x8001]}) r9 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x129a00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000080)={0xc, 0x1, 0x4, {0x4, 0xa, 0x0, 0x2}}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x5}], 0x1, 0x40000002, 0x0) recvmmsg(r3, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000003c0)=[r2, 0x0], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, {0xac78, 0x1, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0xb, 0xb2bb, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 6.718494884s ago: executing program 1 (id=1861): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r7, 0x4008700e, 0x863) syz_clone(0x180000, &(0x7f00000000c0)="c5729af40916827ee4abee556356da4dbc30aa85ec05292bc5d7f7ca7014e832fbd832547cd5e452d96dc60dd9a572827420bd459b373862f8c9e9", 0x3b, &(0x7f00000001c0), &(0x7f0000000280), 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) 6.36066144s ago: executing program 3 (id=1862): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000240), 0x8, &(0x7f0000000340)={[{@metacopy_on}, {@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) 5.8679118s ago: executing program 2 (id=1863): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\a'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 5.378946377s ago: executing program 6 (id=1864): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="15000000000000000200", @ANYRES32=0x1, @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000210000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, &(0x7f0000000500)=""/80, &(0x7f0000000580), &(0x7f0000000640)="10b76b557ee57beebb8cb2c952bd7e014e409e5349c7c213433bb88c94e13437bcc5a5b2100d64f04ad7b6451c5d12c8fb4cedee30870c00894d69a551d20be88969dd8bc30bd7236dde0d6b95e15145f4ccf911ea8b8fb53065292568127df1feb1f36c3af09386a177221fc902cfad7c8dbb4e91386a21e125c99196d817e88097173889d242ecba238d96c9d5e660bd60d268dec8cc73c2dae63cccc327", 0x9, r1}, 0x38) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r3, 0x0, 0x770e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) chown(0x0, 0x0, 0xee01) connect$inet(0xffffffffffffffff, 0x0, 0x0) 5.127049267s ago: executing program 3 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[&(0x7f00000000c0)='=\x8d5\x10\xe4\x00\bj\xfb', &(0x7f0000000080)='=\x8d5\x10\xe4\x00\bj\xfb']}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000005c0)={'filter\x00', 0x7, 0x4, 0x3f8, 0x0, 0x1f0, 0x0, 0x318, 0x318, 0x318, 0x4, &(0x7f0000000180), {[{{@uncond, 0xbc, 0x10c}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @multicast1, 0x1}}}, {{@uncond, 0xbc, 0xe4}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x2, 0x5, 0x1}}}, {{@uncond, 0xbc, 0x128}, @unspec=@NFLOG={0x6c, 'NFLOG\x00', 0x0, {0xc, 0x79, 0x9, 0x0, 0x0, "72a35cf68ac9f50f47acd117e6668eeb7210b56f18638af1541f592900b4f39b6298926fc5ed319c1745029bba378ef4a6e0db4f582376029145678cf5214738"}}}], {{'\x00', 0xbc, 0xe0}, {0x24}}}}, 0x444) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'dummy0\x00', @random="01350104ff00"}) r3 = syz_open_dev$sg(&(0x7f0000000180), 0x0, 0x80041) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x129a02, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0xeec}, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='net/route\x00') preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r7 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r7, &(0x7f0000000340)=ANY=[@ANYBLOB='LINE \''], 0x8c) close(r7) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r8, &(0x7f00000061c0)={0x2020}, 0x115f) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendfile(r5, r4, &(0x7f0000000080)=0xb, 0x8) ioctl$SG_IO(r3, 0x2285, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, 0x0, 0x0) 4.807970817s ago: executing program 2 (id=1866): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="15000000000000000200", @ANYRES32=0x1, @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000210000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, &(0x7f0000000500)=""/80, &(0x7f0000000580), &(0x7f0000000640)="10b76b557ee57beebb8cb2c952bd7e014e409e5349c7c213433bb88c94e13437bcc5a5b2100d64f04ad7b6451c5d12c8fb4cedee30870c00894d69a551d20be88969dd8bc30bd7236dde0d6b95e15145f4ccf911ea8b8fb53065292568127df1feb1f36c3af09386a177221fc902cfad7c8dbb4e91386a21e125c99196d817e88097173889d242ecba238d96c9d5e660bd60d268dec8cc73c2dae63cccc327", 0x9, r1}, 0x38) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r3, 0x0, 0x770e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) chown(0x0, 0x0, 0xee01) connect$inet(0xffffffffffffffff, 0x0, 0x0) 3.813891732s ago: executing program 6 (id=1867): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000180)={0x200, 0x8, 0x6, 0x2}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00008a7000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0xfffffffffffffd2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r1 = io_uring_setup(0x7535, &(0x7f0000000040)={0x0, 0xc4ae, 0x1000, 0x6, 0x389}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80400000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0xdd, 0x3, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) shutdown(0xffffffffffffffff, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="ccce116e74bbb16c44134a4b23", 0xd) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.481092226s ago: executing program 1 (id=1868): r0 = io_uring_setup(0x1b16, &(0x7f0000000000)={0x0, 0x0, 0x800, 0x1, 0x4}) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x1b, &(0x7f0000000080)={0x0, 0x0, 0x4}, 0x1) 2.697453082s ago: executing program 1 (id=1869): r0 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000400)={'gre0\x00', &(0x7f00000002c0)={'ip_vti0\x00', 0x0, 0x7800, 0x7621, 0x2, 0x8000, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x40, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102}}}}) 2.36134723s ago: executing program 2 (id=1870): ioctl(0xffffffffffffffff, 0x8912, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x1d, r1}, 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x20, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0xc, 0x1c2, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @binary="f1d966c6"}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$can_bcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) io_uring_setup(0x44dc, &(0x7f0000000000)={0x0, 0xbfffeffb, 0x1000, 0x1000b, 0x2}) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) r7 = syz_open_procfs(0x0, &(0x7f0000000600)='net/mcfilter\x00') socket$inet_mptcp(0x2, 0x1, 0x106) preadv(r7, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 2.249772735s ago: executing program 3 (id=1871): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$OCFS2_IOC_GROUP_ADD64(r0, 0x40186f03, &(0x7f0000000180)={0x200, 0x8, 0x6, 0x2}) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$qrtr(0x2a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00008a7000/0x3000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0xfffffffffffffd2d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r1 = io_uring_setup(0x7535, &(0x7f0000000040)={0x0, 0xc4ae, 0x1000, 0x6, 0x389}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80400000, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @lirc_mode2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r4, &(0x7f00000000c0)='syz1\x00', 0x1ff) r6 = epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xfffffffffffffffd, 0x9}, 0x0, &(0x7f0000000240)={0xdd, 0x3, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x2}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r3, &(0x7f0000000000)={0xa0000001}) shutdown(0xffffffffffffffff, 0x1) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000580)="ccce116e74bbb16c44134a4b23b8", 0xe) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 2.141849644s ago: executing program 6 (id=1872): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000340), 0x10, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[], 0x20000600}}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0xc000) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020000000202000001000000", @ANYRES32=0x0, @ANYRES32=0xea60, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000006001003aeab97b00c0010118003ec4e61694e462ee"], 0x48}, 0x1, 0x0, 0x0, 0x240040c0}, 0x40840) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000100)={0x2, 0xe, 0x4, 0x2, 0xc}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x464, 0x318, 0x25, 0x148, 0x318, 0x60, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xff, 0xffffffff, 'lo\x00', '\x00', {0xff}, {}, 0x0, 0x2}, 0x0, 0x2f8, 0x318, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x5, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @bytecode={0x0, 0x2, 0x0, [{0x6, 0x10, 0xff, 0x80000000}, {0x7, 0x4, 0x8, 0x8}, {0x5, 0x40, 0x6e, 0x8}, {0x1, 0x9, 0x8, 0x10001}, {0x5, 0x6, 0x92, 0x6}, {0xa, 0x96, 0xd3, 0x3}, {0x8, 0x7, 0x3, 0x2}, {0x5, 0xf, 0x40, 0x2}, {0xe, 0x69, 0x2, 0x1}, {0xf2, 0x25, 0xff, 0x10001}, {0x8, 0x7, 0xff, 0x1}, {0x4, 0x1c, 0x2, 0x18}, {0x9, 0x6, 0xa3, 0x9}, {0x8, 0x0, 0x9, 0x5}, {0x2, 0x1, 0xff, 0x7ff}, {0x6c1, 0x8, 0x1, 0x9}, {0x0, 0xd0, 0x6, 0xc5}, {0x1000, 0x8, 0x6, 0x1}, {0x9a6, 0xd, 0x0, 0x800}, {0x7, 0x10, 0x1, 0x1}, {0x8000, 0x96, 0x81, 0xa0000}, {0x9, 0x8, 0x9, 0xff}, {0xb, 0x6, 0x8, 0x9}, {0x862, 0x18, 0x4, 0x9}, {0xffd8, 0xf, 0xae, 0x7fffffff}, {0x8, 0x3, 0x40, 0x3}, {0x4, 0x3, 0x0, 0x2}, {0xffff, 0x3, 0x2, 0x4}, {0x100, 0x3, 0x7, 0x40}, {0x1, 0x58, 0x0, 0x6}, {0x8000, 0x80, 0x4, 0x3}, {0x7, 0x4, 0x5, 0x7f}, {0xc6e, 0x3, 0xc, 0x2}, {0xf, 0x60, 0x1, 0x2}, {0x3af3, 0x3, 0xff, 0x6}, {0xfffe, 0x7, 0x0, 0x2}, {0xc, 0xd1, 0x3}, {0x8, 0x5, 0x8, 0x80000000}, {0xb, 0x7f, 0x0, 0x4}, {0x9f7d, 0xb}, {0x5, 0x9, 0x0, 0x8}, {0x868, 0xc5, 0x12}, {0x7fff, 0xa8, 0x48, 0x10000}, {0x4, 0x0, 0x8, 0x6}, {0x2, 0x2, 0xd, 0xfffffffe}, {0xa3c6, 0x80, 0x60, 0x5}, {0x5c50, 0x6, 0x4, 0x1c000}, {0x99eb, 0x7, 0x80, 0x4}, {0x7f, 0x32, 0xd3, 0x5}, {0x0, 0x9, 0xfc, 0x1}, {0x4, 0x40, 0x7b, 0x5}, {0xd97f, 0x4, 0x8, 0xe}, {0xffc0, 0x4, 0x0, 0x7}, {0x6, 0xd, 0x33, 0x6}, {0x5, 0xf, 0xf9, 0x3}, {0xa, 0x6, 0x80, 0xffff}, {0x3, 0x2, 0x9, 0x2}, {0x50, 0x8, 0x78, 0x8}, {0x820, 0x0, 0xb9, 0x10}, {0xffff, 0x49, 0x1, 0x464}, {0x80, 0x40, 0x76, 0x2}, {0x885, 0x2, 0x9, 0x10000}, {0xe6, 0x0, 0x3, 0x3}, {0x7, 0xc2, 0x8, 0x2}], {0x6}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x10001, 0x10, 'netbios-ns\x00', {0x7}}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x4c0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000018) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x4044050}, 0x4000000) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'aio_iiro_16\x00', [0x100, 0x6, 0x1, 0xc, 0x11, 0x5, 0x79, 0x3, 0x80008, 0x9, 0x2, 0x1, 0x7, 0x1, 0x1, 0xfd, 0xfffffffb, 0x20000009, 0x3, 0x7fffffff, 0xffffffff, 0xca9f, 0x7f, 0x200008, 0xfffffffb, 0xf39e, 0xffffffff, 0x8, 0x40, 0x0, 0xfffffff8]}) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(0xffffffffffffffff, 0x1e, &(0x7f0000000040), 0x1) io_uring_setup(0x44dc, &(0x7f0000000000)={0x0, 0xbfffeffb, 0x1000, 0x1000b, 0x2}) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[], 0x57) preadv(0xffffffffffffffff, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) 1.636550733s ago: executing program 1 (id=1873): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_XSAVE(r8, 0x5000aea5, &(0x7f0000000600)={[0x4c94, 0x200, 0x4, 0x488e, 0x9, 0xa, 0x9d110b0, 0x1d69, 0x4, 0xffff741c, 0xe, 0x2, 0x7, 0xa, 0xf, 0xfff, 0x1, 0x0, 0x8000, 0x1ff, 0x0, 0x1, 0x40, 0x10000, 0x9, 0x709, 0x3, 0x2, 0xffffffff, 0x3, 0x1000, 0xf, 0xfffffffc, 0x0, 0x5, 0x4ef2, 0x9, 0x3ff, 0xf, 0xf, 0x80000001, 0x2, 0x7, 0xffff, 0x0, 0x3, 0xffffff7f, 0x7, 0x8, 0x7ff, 0x9, 0x7f, 0x24fc, 0xfffffffd, 0x40, 0x955, 0x1, 0x7fff, 0x1ff, 0x4, 0x1, 0x7, 0x6, 0x2, 0x7f18d2c7, 0x9, 0xfffffff7, 0x5, 0x8000, 0x1, 0x8000, 0xc829, 0x7, 0x5, 0x23d8, 0x6, 0x8a0, 0x7, 0x55, 0x1000, 0x7, 0x80000000, 0x10, 0xb, 0x80000001, 0x5, 0x0, 0x5, 0x1, 0x2, 0x5, 0x7fffffff, 0x7, 0x200, 0x48, 0x5, 0x1, 0x100, 0xe, 0xed2, 0x3b, 0x1, 0x10000, 0x9, 0x9, 0x4, 0x40, 0x6, 0x5, 0x0, 0x7ff, 0x1, 0x822, 0x0, 0x5, 0x200, 0x891f, 0x2, 0x4, 0x2, 0x1, 0x10001, 0x0, 0xfffffff9, 0x100, 0xe, 0x4, 0xd, 0x1, 0x0, 0x5, 0x2, 0x7, 0x2, 0xffff, 0x76, 0x7, 0x8, 0x9, 0x6, 0x1000, 0x5, 0x141, 0x10, 0x43de, 0x2e3880, 0x1, 0x7fffffff, 0x4, 0x3, 0x2, 0x3, 0x6, 0xff00000, 0x3, 0x5, 0x5, 0xfff, 0x2, 0x20a, 0x2, 0x0, 0x7, 0x400, 0x6, 0x0, 0x705, 0x0, 0x9, 0x1, 0xd, 0x2, 0x8, 0x656a, 0x4, 0x7ff, 0x6, 0xfffffff9, 0x3, 0xffffffff, 0x7fff, 0x5, 0x629c, 0x6, 0x490, 0x7, 0xfffffff5, 0x10000, 0x66e, 0xa, 0x7, 0x80000001, 0x9, 0xbe, 0x8, 0x8, 0x5, 0x8, 0xd1c1, 0x5, 0x6, 0x2, 0x8001, 0x7ff, 0x9, 0x4, 0xffff080c, 0x555c, 0x4b, 0x9, 0x33716a0e, 0xfffffff8, 0x3, 0x3, 0x5, 0x6, 0x5, 0x0, 0x4, 0x95, 0x7, 0x78f0c9c6, 0x2, 0x6, 0x67d2ae15, 0xfffffff9, 0x61, 0x3, 0x9, 0x1, 0xf0, 0x8, 0x10000, 0x478, 0x6, 0xc0000000, 0xfffffffe, 0x8, 0x10000, 0xa0307df, 0x7, 0x1, 0x867, 0x5, 0xffff, 0x9, 0x10, 0xfffffbed, 0xade, 0x2, 0x3, 0x6, 0x9, 0x2, 0x3974, 0x0, 0x3, 0x10001, 0xa8b9, 0x2, 0x3, 0xfffffffb, 0x2, 0x7f, 0x8, 0xec, 0xa, 0x80000000, 0x2, 0x33f1, 0xf2, 0x1ff, 0x1000, 0x66f6, 0x40, 0x0, 0x8, 0x585, 0x3ff, 0x2, 0x1, 0x8000000, 0x0, 0x9, 0x1000, 0x7, 0x10000000, 0x200, 0x1, 0x1, 0x7, 0x0, 0x8001, 0x6, 0x3, 0x2, 0x6, 0x9, 0x7ff, 0x8, 0x8, 0x40, 0x1, 0x101, 0xfffffffb, 0xfffffff7, 0xc3b, 0x1, 0x9, 0x9, 0xffff, 0x8, 0x7, 0x3, 0x41, 0x3, 0x5, 0xffffb600, 0x5, 0x0, 0x3, 0x3, 0x2e, 0x10, 0x8000, 0xfffffffa, 0x5, 0x6, 0x1ed6, 0x5, 0x3ff, 0x3ff, 0x9, 0x2, 0x6, 0xffff, 0x800, 0xffff, 0x805, 0xf689, 0xe, 0x0, 0x81, 0x7, 0x6, 0x8, 0x2469, 0xceb9, 0x80, 0x2d7, 0x7, 0x3, 0x9, 0x5, 0x1, 0x3, 0x4, 0x4, 0x3, 0x3, 0x7, 0x292, 0x3, 0x101, 0x2, 0x8, 0x2, 0x7, 0x2, 0xfffffff8, 0x4, 0x3, 0x9, 0x5, 0xe627, 0x4, 0xffffff00, 0x10001, 0x2, 0xf, 0x5, 0xc, 0x4, 0x200, 0xd, 0x6, 0xffffffff, 0x3ff, 0x4, 0x1, 0x2400, 0xe9f1, 0x10000, 0x81, 0x4421, 0x0, 0x59c, 0x8, 0x6, 0x4, 0x2, 0x62, 0x3, 0x4, 0xfffffffe, 0x8, 0x4e, 0x7, 0x1, 0x6, 0xffff3829, 0x0, 0x87a4, 0x3, 0x6, 0x100, 0x7f, 0x100, 0xb4, 0x1133, 0x20, 0x7, 0x4, 0x7, 0xfffffff0, 0x1000, 0xe, 0x4, 0x0, 0x0, 0xf, 0x7, 0x4, 0x7, 0x2, 0x1, 0x560, 0x8, 0x8000, 0x0, 0xddab, 0xe1f, 0x8, 0xa, 0xb5dd, 0x39, 0xd8c69d2, 0x8, 0x4, 0x80000000, 0x8000, 0x5d9, 0x9, 0x1, 0x8, 0x9, 0x6, 0x74460464, 0xfffffffa, 0x1ff, 0x6, 0x4, 0x1, 0x7, 0xffffff88, 0x4, 0x1ff, 0x7, 0x1, 0x22, 0x882, 0xffff, 0x1, 0x2, 0x3, 0x4, 0x401, 0x8001, 0xfffffbff, 0x6, 0x9, 0x45d, 0x409, 0x0, 0x7, 0x7f, 0x2, 0xa0, 0x1, 0x8, 0xffffff00, 0x9, 0x38e, 0x4, 0xc0d, 0x96, 0x0, 0x8, 0x98, 0x1, 0xc1, 0x9, 0x2, 0x4, 0x7fffffff, 0x1, 0x800, 0x400, 0x7fff, 0xc2, 0x22, 0x2, 0x7, 0xfffffeff, 0x10000, 0x5, 0x0, 0x8, 0x4, 0x5, 0x8, 0x3, 0x3, 0x4d53, 0x101000, 0x2, 0x5, 0x9, 0xd3, 0x36, 0xd48, 0xf, 0x1, 0xffff, 0x8, 0x10, 0x9, 0x0, 0x9, 0x10000, 0x5, 0x6, 0x4, 0x4, 0x0, 0x6f86f9c3, 0x3, 0x400, 0x7ff, 0x100, 0x6, 0x9, 0x9, 0xd, 0x8a, 0x9, 0x0, 0xebd2, 0x8, 0x1000, 0x0, 0x8, 0x0, 0x0, 0x4, 0x7, 0xf826, 0x0, 0x2, 0x9, 0x11, 0x0, 0x9, 0x1, 0x4, 0x8, 0x6, 0x6, 0x4, 0x1000, 0x9, 0x0, 0x5, 0x0, 0x8, 0x8, 0x0, 0xa, 0x7f, 0xffffffff, 0x1, 0xdb18, 0x2, 0x5, 0x1, 0xe1e1, 0x7f, 0x101, 0x6, 0xe3, 0x1000, 0xe570, 0x0, 0x10, 0x9, 0xe, 0x3, 0xf, 0xc, 0x4, 0x3, 0x0, 0xc, 0x0, 0x1957, 0x800, 0x3d1, 0x96, 0xfffffffe, 0x9, 0xffffe433, 0x6, 0x6, 0x3, 0x6, 0x6, 0x9, 0x7b3, 0x7db, 0x8001, 0x3, 0x24aef43c, 0x7, 0x2, 0x8, 0x7, 0x43, 0x101, 0x100, 0x2, 0x7, 0x3, 0x10000, 0x6, 0x2, 0x200, 0xfffffffd, 0x0, 0x1, 0x8001, 0x7, 0x4, 0x3, 0x1000, 0x2, 0x4, 0x3, 0x7, 0x224, 0x9, 0x3, 0x6a6035e3, 0xc, 0xda, 0x6, 0x6, 0xfffffff3, 0x7fc5, 0x0, 0x0, 0x5, 0x3, 0xe, 0x7, 0x4, 0xa, 0x10, 0x7, 0x9, 0xd236, 0x0, 0x4, 0x0, 0x6, 0xa78, 0xea, 0xfe8, 0x5, 0xffffffff, 0xfffffff8, 0x2, 0x101, 0xe4f, 0x1, 0x3, 0x4, 0x5, 0x5, 0xdde, 0xa, 0x3, 0xd, 0x92f, 0x5de, 0x22a8000, 0x6, 0x101, 0x5, 0x4, 0x1, 0x1, 0x8cd, 0xbf4, 0x7abe, 0x800, 0x2d7, 0x0, 0xffff, 0x9, 0x4, 0xd79, 0x8, 0x8, 0x8, 0x4, 0x2, 0x1, 0x0, 0x3, 0x0, 0x10, 0x7ff, 0x4, 0x6, 0x7, 0x8, 0x5, 0x10, 0x0, 0x5028, 0x6, 0x7, 0x9, 0xb, 0xabdf, 0x9, 0x5, 0xfffff170, 0x6, 0x5, 0x7, 0x4, 0x7, 0x4, 0x8, 0x23680, 0x3, 0x8, 0x800, 0x5, 0x6, 0x5, 0x4, 0xc440, 0xb, 0x8, 0x3, 0x9, 0x1, 0x6, 0x3c, 0x1, 0x2, 0x9, 0x4, 0x8, 0x1000, 0xdcc, 0x44f, 0x81, 0xfa86, 0x0, 0x0, 0x1ff, 0x80000000, 0x4, 0x2, 0x7, 0x5, 0x9ff, 0x1, 0x4, 0x100, 0xfffff56f, 0x11eecf5b, 0x0, 0x2, 0x4, 0x6, 0x6, 0x28000000, 0x4, 0x3, 0xe, 0x6, 0x5, 0xe705, 0xfffffffe, 0x9, 0x6, 0xa, 0x8, 0x2, 0x7, 0x5, 0x800, 0x5, 0x3, 0x1e, 0x5, 0xffff, 0x1, 0x3, 0xb5, 0x0, 0x3ff, 0x3, 0x4, 0xffffff01, 0x7, 0x1, 0xf, 0x2, 0x10001, 0x10, 0x2, 0x80000001, 0x6, 0x6, 0x380f, 0x7800000, 0xffff, 0x7f, 0x2, 0x5, 0x5, 0x5d4ff57e, 0x81a6, 0x5, 0xc, 0x8, 0x9, 0x5, 0x7, 0xfe0, 0x7, 0x1, 0x60000000, 0x80000000, 0x400, 0x9, 0x0, 0x4, 0x1, 0xc, 0x3, 0x400, 0x3, 0x4, 0x80000000, 0xfffffff8, 0x3e, 0x9, 0x3, 0x8, 0x5, 0x3ff, 0x3, 0x81, 0xd44, 0x3ff, 0x1, 0xe2cd, 0xf8b, 0xfd0e, 0x3, 0x7, 0x9, 0x2, 0x29, 0xfffff800, 0x4, 0x90, 0x3, 0x2, 0xb, 0x5, 0x4, 0x80, 0x7, 0xfffffff8, 0xe, 0x2, 0x8, 0x8000, 0x0, 0x2, 0x3, 0x4cd5, 0x3000, 0x100000, 0xffc0, 0x6, 0x800, 0x81, 0xc, 0x2, 0xfffffff0, 0x7, 0x9, 0x8, 0x8, 0x39b0, 0x7, 0x9, 0x8, 0x380000, 0x3, 0xa, 0x1, 0x5, 0x70000000, 0x3, 0x1, 0x3, 0x1, 0x8001, 0x6, 0x80000000, 0xfffffff6, 0x2, 0x6f8, 0x10001, 0xbe, 0x2, 0x3, 0x10, 0xd98, 0x400, 0x8, 0x10, 0x3, 0x5, 0x0, 0x800, 0x2, 0x9284, 0x8001, 0x8, 0x9, 0xff, 0x0, 0x5, 0x9, 0x2b9, 0x24, 0x0, 0xffffffff, 0x2, 0x7fff, 0x9, 0xa, 0xfff, 0x1, 0xffff, 0x8, 0x9, 0x7, 0x24, 0xffff2192, 0x1, 0x5, 0x9, 0x6, 0x9, 0x8, 0x9, 0x2, 0x9, 0xd, 0x52, 0x9, 0x4, 0x4, 0x4, 0x0, 0x80, 0x101, 0x8, 0x4, 0xe8e6, 0x2, 0x6, 0xa0b, 0x1, 0xfffff001, 0x4, 0xffffd377, 0x0, 0x9, 0x3, 0x2, 0x101, 0xf, 0x0, 0x0, 0x6, 0x1, 0x1, 0x10001, 0x59fa, 0x6, 0x99, 0x8001]}) r9 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x129a00) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$VIDIOC_G_SELECTION(r9, 0xc040565e, &(0x7f0000000080)={0xc, 0x1, 0x4, {0x4, 0xa, 0x0, 0x2}}) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) unshare(0x22020400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f0000000340)}, 0x5}], 0x1, 0x40000002, 0x0) recvmmsg(r3, &(0x7f0000005840), 0x4000000000000ef, 0x20dc, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000240)={&(0x7f00000003c0)=[r2, 0x0], 0x2, 0x0, 0x0, 0x2, 0x0, 0x2, 0x1, {0xac78, 0x1, 0x7, 0x69, 0xf4b, 0x0, 0x2, 0x45, 0x412f, 0xe154, 0x20, 0xb, 0xb2bb, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 974.169901ms ago: executing program 6 (id=1874): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) execve(0x0, 0x0, 0x0) 788.398957ms ago: executing program 3 (id=1875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x3b}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_DATA={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 617.090849ms ago: executing program 2 (id=1876): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0xfffe, 0x0, 0x3, 0x14, 0x4}) 285.609501ms ago: executing program 6 (id=1877): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$RTC_EPOCH_SET(r7, 0x4008700e, 0x863) syz_clone(0x180000, &(0x7f00000000c0)="c5729af40916827ee4abee556356da4dbc30aa85ec05292bc5d7f7ca7014e832fbd832547cd5e452d96dc60dd9a572827420bd459b373862f8c9e9", 0x3b, &(0x7f00000001c0), &(0x7f0000000280), 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) ptrace$peekuser(0x3, 0x0, 0x0) 184.539884ms ago: executing program 1 (id=1878): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x2, 0xc, 0x7, 0x9, 0x7, 0x0, 0x70bd29, 0x25dfdbff, [@sadb_address={0x5, 0x17, 0x2b, 0x1a0, 0x0, @in6={0xa, 0x4e24, 0x64b2, @mcast1, 0x1}}]}, 0x38}}, 0x4080) 0s ago: executing program 3 (id=1879): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="15000000000000000200", @ANYRES32=0x1, @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000003000000210000000000"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000780)={0x0, &(0x7f0000000500)=""/80, &(0x7f0000000580), &(0x7f0000000640)="10b76b557ee57beebb8cb2c952bd7e014e409e5349c7c213433bb88c94e13437bcc5a5b2100d64f04ad7b6451c5d12c8fb4cedee30870c00894d69a551d20be88969dd8bc30bd7236dde0d6b95e15145f4ccf911ea8b8fb53065292568127df1feb1f36c3af09386a177221fc902cfad7c8dbb4e91386a21e125c99196d817e88097173889d242ecba238d96c9d5e660bd60d268dec8cc73c2dae63cccc327", 0x9, r1}, 0x38) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) sendfile(0xffffffffffffffff, r3, 0x0, 0x770e) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) chown(0x0, 0x0, 0xee01) connect$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): ][T11830] hsr_slave_1: entered promiscuous mode [ 907.407278][T11830] debugfs: 'hsr0' already exists in 'hsr' [ 907.445695][T11830] Cannot create hsr debugfs directory [ 907.509751][T12112] tipc: MTU too low for tipc bearer [ 907.547046][T12127] syz.3.1202 (12127): drop_caches: 2 [ 909.190194][T12142] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 909.430918][T11779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 909.486357][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 909.688946][T11779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 909.762937][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 909.820341][T11779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 909.867573][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 909.883780][T11779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 909.910792][T11779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 910.298890][T12154] syz.1.1207 (12154): drop_caches: 2 [ 911.564677][T12162] syz.2.1210 (12162): drop_caches: 2 [ 911.623019][T12164] syz.3.1209 (12164): drop_caches: 2 [ 912.565197][T11779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 913.098876][T11779] 8021q: adding VLAN 0 to HW filter on device team0 [ 913.264324][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.272028][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 913.362513][T12182] syz.2.1212 (12182): drop_caches: 2 [ 913.511858][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.537364][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 914.182325][T11830] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 914.320466][T11830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 914.392237][T12178] tipc: MTU too low for tipc bearer [ 914.431129][T11830] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 914.574599][T11830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 914.687112][T11830] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 914.761636][T11830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 914.771544][T11830] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 914.885143][T11830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 915.169836][T11779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.942456][T12208] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 916.613924][T11830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 916.884383][T11830] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.020730][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.028287][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.061083][T12228] syz.2.1221 (12228): drop_caches: 2 [ 917.132946][T12230] syz.3.1220 (12230): drop_caches: 2 [ 917.207597][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.215165][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 918.229078][T12222] syz.1.1219 (12222): drop_caches: 2 [ 919.079179][T12244] syz.2.1223 (12244): drop_caches: 2 [ 920.538287][T12245] tipc: MTU too low for tipc bearer [ 921.136723][T11779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 922.244182][T12291] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 922.264705][ T806] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 922.687943][T12296] syz.3.1230 (12296): drop_caches: 2 [ 922.717812][ T806] usb 2-1: Using ep0 maxpacket: 16 [ 923.165507][ T806] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 923.173997][ T806] usb 2-1: config 252 has no interface number 0 [ 923.180463][ T806] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 923.689553][ T806] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 923.698881][ T806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.707112][ T806] usb 2-1: Product: syz [ 923.711456][ T806] usb 2-1: Manufacturer: syz [ 923.749132][ T806] usb 2-1: SerialNumber: syz [ 923.760761][T12309] syz.2.1231 (12309): drop_caches: 2 [ 924.130860][ T5930] usb 2-1: Failed to submit usb control message: -71 [ 924.222882][ T5930] usb 2-1: unable to send the bmi data to the device: -71 [ 924.257446][ T806] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 924.271892][ T806] usb 2-1: USB disconnect, device number 4 [ 924.354416][ T5930] usb 2-1: unable to get target info from device [ 924.453644][T11830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.463105][ T5930] usb 2-1: could not get target info (-71) [ 924.562078][ T5930] usb 2-1: could not probe fw (-71) [ 925.096336][T12320] syz.3.1232 (12320): drop_caches: 2 [ 925.109951][T12322] syz.2.1233 (12322): drop_caches: 2 [ 925.169778][T11779] veth0_vlan: entered promiscuous mode [ 925.753892][T11779] veth1_vlan: entered promiscuous mode [ 926.465372][T11779] veth0_macvtap: entered promiscuous mode [ 926.625262][T11779] veth1_macvtap: entered promiscuous mode [ 926.931581][T11779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 927.126394][T11779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 927.346876][ T3327] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.424807][T12346] ALSA: mixer_oss: invalid OSS volume '' [ 927.503594][ T3327] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.558980][ T3327] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 927.589876][ T3327] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 928.260144][T12337] tipc: MTU too low for tipc bearer [ 928.682139][T11830] veth0_vlan: entered promiscuous mode [ 928.919606][T11830] veth1_vlan: entered promiscuous mode [ 929.068143][T12365] syz.2.1240 (12365): drop_caches: 2 [ 929.347095][T12368] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 929.487799][T11830] veth0_macvtap: entered promiscuous mode [ 929.920946][T11830] veth1_macvtap: entered promiscuous mode [ 930.159386][T11830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 930.372114][T11830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 930.616682][ T148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.694351][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.836866][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 930.901773][ T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.120321][T12384] syz.1.1241 (12384): drop_caches: 2 [ 931.834187][T12391] syz.3.1243 (12391): drop_caches: 2 [ 932.791120][T12404] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 932.801735][T12404] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 932.812858][T12404] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 932.925679][T12404] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 932.938443][T12404] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 933.409319][T12402] syz.2.1244 (12402): drop_caches: 2 [ 935.029497][ T5594] Bluetooth: hci4: command tx timeout [ 935.388677][T12437] ALSA: mixer_oss: invalid OSS volume '' [ 936.419269][T12448] syz.2.1250 (12448): drop_caches: 2 [ 936.429499][T12430] tipc: MTU too low for tipc bearer [ 936.842734][T12456] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 937.077957][ T5594] Bluetooth: hci4: command tx timeout [ 937.338583][ T34] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.690967][T12404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 937.703596][T12404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 937.713141][T12404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 937.733246][T12404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 937.754952][T12404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 937.842938][ T34] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.858267][T12464] syz.2.1253 (12464): drop_caches: 2 [ 938.047590][T12403] lo speed is unknown, defaulting to 1000 [ 938.423793][T12471] syz.3.1254 (12471): drop_caches: 2 [ 939.174998][T12404] Bluetooth: hci4: command tx timeout [ 939.249779][ T34] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 939.825435][T12404] Bluetooth: hci0: command tx timeout [ 939.832672][ T34] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.274928][T12404] Bluetooth: hci4: command tx timeout [ 941.920234][T12404] Bluetooth: hci0: command tx timeout [ 942.054595][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 942.064320][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 942.309452][ T34] bridge_slave_1: left allmulticast mode [ 942.320594][ T34] bridge_slave_1: left promiscuous mode [ 942.351526][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.456379][ T34] bridge_slave_0: left allmulticast mode [ 942.462236][ T34] bridge_slave_0: left promiscuous mode [ 942.468724][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.855251][T12521] ALSA: mixer_oss: invalid OSS volume '' [ 942.899210][T12520] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 943.927409][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.944457][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.974111][T12404] Bluetooth: hci0: command tx timeout [ 944.017759][ T34] bond0 (unregistering): Released all slaves [ 944.209176][T12515] tipc: MTU too low for tipc bearer [ 944.243333][T12460] lo speed is unknown, defaulting to 1000 [ 944.657788][T12540] syz.2.1264 (12540): drop_caches: 2 [ 945.420808][ T34] hsr_slave_0: left promiscuous mode [ 945.508818][ T34] hsr_slave_1: left promiscuous mode [ 945.511261][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 945.511341][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 945.556047][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 945.556130][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 945.682092][ T34] veth1_macvtap: left promiscuous mode [ 945.682235][ T34] veth0_macvtap: left promiscuous mode [ 945.682517][ T34] veth1_vlan: left promiscuous mode [ 945.682726][ T34] veth0_vlan: left promiscuous mode [ 946.045078][T12404] Bluetooth: hci0: command tx timeout [ 947.407904][T12575] loop3: detected capacity change from 0 to 512 [ 947.563751][T12575] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 947.990472][ T34] team0 (unregistering): Port device team_slave_1 removed [ 948.064618][ T34] team0 (unregistering): Port device team_slave_0 removed [ 948.106765][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 948.233718][T12583] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 949.156318][T12593] ALSA: mixer_oss: invalid OSS volume 'Destination' [ 949.163106][T12593] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 949.749944][T12606] loop1: detected capacity change from 0 to 256 [ 949.766889][T12586] tipc: MTU too low for tipc bearer [ 949.819123][T12603] syz.2.1275 (12603): drop_caches: 2 [ 950.207513][T12606] FAT-fs (loop1): Directory bread(block 64) failed [ 950.214255][T12606] FAT-fs (loop1): Directory bread(block 65) failed [ 950.269673][T12606] FAT-fs (loop1): Directory bread(block 66) failed [ 950.276395][T12606] FAT-fs (loop1): Directory bread(block 67) failed [ 950.283266][T12606] FAT-fs (loop1): Directory bread(block 68) failed [ 950.450653][T12606] FAT-fs (loop1): Directory bread(block 69) failed [ 950.457592][T12606] FAT-fs (loop1): Directory bread(block 70) failed [ 950.464290][T12606] FAT-fs (loop1): Directory bread(block 71) failed [ 950.471154][T12606] FAT-fs (loop1): Directory bread(block 72) failed [ 950.477828][T12606] FAT-fs (loop1): Directory bread(block 73) failed [ 950.856330][T12403] bridge0: port 1(bridge_slave_0) entered blocking state [ 950.927765][T12403] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.998440][T12403] bridge_slave_0: entered allmulticast mode [ 951.093075][T12403] bridge_slave_0: entered promiscuous mode [ 951.107428][T12403] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.120399][T12403] bridge0: port 2(bridge_slave_1) entered disabled state [ 951.128056][T12403] bridge_slave_1: entered allmulticast mode [ 951.284208][T12403] bridge_slave_1: entered promiscuous mode [ 951.927707][T12403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.068496][T12403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 952.133153][T12631] loop2: detected capacity change from 0 to 2048 [ 952.154767][T12631] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 952.705589][T12403] team0: Port device team_slave_0 added [ 952.736712][T12403] team0: Port device team_slave_1 added [ 953.060242][T12403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.122287][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.242956][T12403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.269279][T12403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.276392][T12403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 953.326189][T12635] loop3: detected capacity change from 0 to 4096 [ 953.474575][T12643] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 953.629335][T12635] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.643186][T12403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.871864][ T34] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.347705][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.439373][ T34] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.746041][T12403] hsr_slave_0: entered promiscuous mode [ 954.756378][T12403] hsr_slave_1: entered promiscuous mode [ 954.764906][T12403] debugfs: 'hsr0' already exists in 'hsr' [ 954.858633][T12658] syz.2.1286 (12658): drop_caches: 2 [ 955.413516][T12403] Cannot create hsr debugfs directory [ 955.769476][ T34] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.852237][T12672] ALSA: mixer_oss: invalid OSS volume 'Destination' [ 955.859043][T12672] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 956.342429][T12670] tipc: MTU too low for tipc bearer [ 956.358742][T12460] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.412298][T12460] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.437113][T12460] bridge_slave_0: entered allmulticast mode [ 956.479119][T12460] bridge_slave_0: entered promiscuous mode [ 956.568430][ T34] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.665213][T12460] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.692740][T12460] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.740015][T12460] bridge_slave_1: entered allmulticast mode [ 956.800347][T12460] bridge_slave_1: entered promiscuous mode [ 957.144060][T12685] xt_connbytes: Forcing CT accounting to be enabled [ 957.182042][T12685] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 957.261689][T12460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.379646][T12460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.501865][T12687] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 957.957976][T12460] team0: Port device team_slave_0 added [ 958.214084][T12460] team0: Port device team_slave_1 added [ 958.438612][ T1969] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 958.754310][ T1969] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 958.797573][ T1969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x4B, changing to 0xB [ 958.831943][ T1969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10 [ 958.904859][ T1969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 50562, setting to 64 [ 958.955268][ T1969] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89 [ 958.985317][ T1969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 959.092705][ T1969] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 959.157702][T12460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.202290][ T1969] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.ff [ 959.215071][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.285236][ T1969] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 959.327300][ T1969] usb 3-1: Manufacturer: syz [ 959.359966][T12460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.375039][ T1969] usb 3-1: config 0 descriptor?? [ 959.426020][T12698] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 959.574122][ T1969] mceusb 3-1:0.0: mceusb_dev_probe: device setup failed! [ 959.593328][T12460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.601591][ T1969] mceusb 3-1:0.0: probe with driver mceusb failed with error -12 [ 959.610659][T12460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.723060][T12460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.932600][ T806] usb 3-1: USB disconnect, device number 2 [ 960.129741][ T34] bridge_slave_1: left allmulticast mode [ 960.135663][ T34] bridge_slave_1: left promiscuous mode [ 960.156479][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 960.245361][ T34] bridge_slave_0: left allmulticast mode [ 960.300590][ T34] bridge_slave_0: left promiscuous mode [ 960.320859][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.251441][T12722] syz.2.1296 (12722): drop_caches: 2 [ 962.000635][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.110168][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 962.177575][ T34] bond0 (unregistering): Released all slaves [ 962.832065][T12733] loop3: detected capacity change from 0 to 64 [ 962.978299][T12460] hsr_slave_0: entered promiscuous mode [ 962.999291][T12460] hsr_slave_1: entered promiscuous mode [ 963.032867][T12460] debugfs: 'hsr0' already exists in 'hsr' [ 963.059110][T12460] Cannot create hsr debugfs directory [ 963.247142][ T34] hsr_slave_0: left promiscuous mode [ 963.364535][ T34] hsr_slave_1: left promiscuous mode [ 963.573504][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 963.647745][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 963.785654][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 963.876630][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.223517][ T34] veth1_macvtap: left promiscuous mode [ 964.265428][ T34] veth0_macvtap: left promiscuous mode [ 964.294151][ T34] veth1_vlan: left promiscuous mode [ 964.314943][ T34] veth0_vlan: left promiscuous mode [ 964.699996][T12741] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 966.605857][T12755] syz.1.1305 (12755): drop_caches: 2 [ 966.725165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 967.408456][ T34] team0 (unregistering): Port device team_slave_1 removed [ 967.567670][ T34] team0 (unregistering): Port device team_slave_0 removed [ 967.945096][T12765] loop1: detected capacity change from 0 to 2048 [ 968.201946][T12765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 968.227274][T12765] ext4 filesystem being mounted at /328/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 968.335516][T12765] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1307: bg 0: block 345: padding at end of block bitmap is not set [ 968.390735][T12765] EXT4-fs (loop1): Remounting filesystem read-only [ 968.419545][T12765] EXT4-fs warning (device loop1): ext4_xattr_inode_lookup_create:1609: inode #18: comm syz.1.1307: cleanup dec ref error -117 [ 968.667121][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 969.606744][T12772] siw: device registration error -23 [ 970.694010][T12774] tipc: MTU too low for tipc bearer [ 970.845756][T12403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 971.026129][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 971.267233][T12403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 971.370512][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 971.429088][T12403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 972.543066][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.667021][T12403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 972.823069][T12403] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.653251][T12797] siw: device registration error -23 [ 974.901489][T12403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 975.046057][T12460] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 975.095358][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.105296][T12460] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 975.154976][T12803] syz.3.1315 (12803): drop_caches: 2 [ 975.170474][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.232267][T12460] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 975.359591][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.372736][T12460] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 975.854231][T12460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 976.326711][T12403] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.643128][T12819] siw: device registration error -23 [ 977.979812][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.987193][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.243178][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.250975][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 979.988927][T12460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.312515][T12460] 8021q: adding VLAN 0 to HW filter on device team0 [ 980.338032][ T9433] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 980.473244][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.480946][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 980.690212][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.697968][ T5862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.789783][ T9433] usb 3-1: Using ep0 maxpacket: 32 [ 981.171030][ T9433] usb 3-1: config 4 has an invalid interface number: 196 but max is 0 [ 981.179431][ T9433] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 981.189699][ T9433] usb 3-1: config 4 has no interface number 0 [ 981.195972][ T9433] usb 3-1: config 4 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 981.209235][ T9433] usb 3-1: config 4 interface 196 has no altsetting 0 [ 981.884612][ T9433] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 981.893905][ T9433] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 981.902102][ T9433] usb 3-1: Product: syz [ 981.906447][ T9433] usb 3-1: Manufacturer: syz [ 981.911222][ T9433] usb 3-1: SerialNumber: syz [ 982.351665][T12866] syz.3.1327 (12866): drop_caches: 2 [ 982.459006][ T9433] ipheth 3-1:4.196: Unable to find endpoints [ 982.488733][ T9433] usb 3-1: USB disconnect, device number 3 [ 983.830806][T12880] loop3: detected capacity change from 0 to 512 [ 983.933118][T12880] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 983.954603][T12880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002] [ 983.963683][T12880] EXT4-fs (loop3): orphan cleanup on readonly fs [ 983.970195][T12880] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.1328: bad orphan inode 3 [ 984.054228][T12880] loop3: lost filesystem error report for type 5 error -117 [ 984.067460][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 984.081640][ C0] EXT4-fs (loop3): initial error at time 1778806200: ext4_orphan_get:1423 [ 984.090540][ C0] EXT4-fs (loop3): last error at time 1778806200: ext4_orphan_get:1423 [ 984.127099][T12880] EXT4-fs (loop3): Remounting filesystem read-only [ 984.165064][T12880] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 984.273223][T12880] EXT4-fs warning (device loop3): dx_probe:861: inode #2: comm syz.3.1328: dx entry: limit 0 != root limit 125 [ 984.301543][T12880] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1328: Corrupt directory, running e2fsck is recommended [ 984.954304][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 985.244358][T12403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.712881][T12900] random: crng reseeded on system resumption [ 986.872651][T12460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 987.020276][T12905] tipc: MTU too low for tipc bearer [ 987.390477][T12925] loop1: detected capacity change from 0 to 8 [ 987.436194][T10854] udevd[10854]: incorrect cramfs checksum on /dev/loop1 [ 987.633179][T10854] udevd[10854]: incorrect cramfs checksum on /dev/loop1 [ 988.549228][T12935] syz.1.1336 (12935): drop_caches: 2 [ 988.703646][T12403] veth0_vlan: entered promiscuous mode [ 989.396834][T12403] veth1_vlan: entered promiscuous mode [ 989.777210][T12403] veth0_macvtap: entered promiscuous mode [ 989.886770][T12403] veth1_macvtap: entered promiscuous mode [ 990.206993][T12403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 990.296766][T12948] random: crng reseeded on system resumption [ 990.631498][T12460] veth0_vlan: entered promiscuous mode [ 990.682459][T12403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 991.174986][T12460] veth1_vlan: entered promiscuous mode [ 991.892082][T12460] veth0_macvtap: entered promiscuous mode [ 991.967576][T12460] veth1_macvtap: entered promiscuous mode [ 992.146578][T12460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.284653][T12460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.324400][T12960] syz.1.1343 (12960): drop_caches: 2 [ 992.404293][T12958] loop2: detected capacity change from 0 to 512 [ 992.545151][ T5720] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.573844][ T5720] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.607609][ T5720] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.727596][T12958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 992.909795][ T5720] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.942616][T12958] ext4 filesystem being mounted at /357/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 993.300786][T12958] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1344: corrupted xattr block 33: overlapping e_value [ 993.456983][T12970] tipc: MTU too low for tipc bearer [ 993.484293][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 993.579358][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 993.593656][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 993.654764][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 993.666533][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 993.977990][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 994.315288][T12982] loop1: detected capacity change from 0 to 256 [ 994.545961][T12982] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 994.609089][T12982] exFAT-fs (loop1): failed to test first cluster bit of root dir(5) [ 994.698773][T12987] syz.3.1348 (12987): drop_caches: 2 [ 995.821629][T12404] Bluetooth: hci5: command tx timeout [ 996.222843][T12998] loop3: detected capacity change from 0 to 64 [ 996.388408][ T1969] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 996.651062][ T1969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 996.730254][ T1969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 996.805340][ T1969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 996.892751][ T1969] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 996.968521][ T1969] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 997.021113][ T1969] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.091449][ T1969] usb 2-1: config 0 descriptor?? [ 997.387940][ T1969] hdpvr 2-1:0.0: firmware version 0x15 dated Š–¸&S¶3;¨“Ãx&X^„œ wÒÎ–Š g/ƒ µn#»† [ 997.637625][ T1969] hdpvr 2-1:0.0: device init failed [ 997.661569][ T1969] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 997.743831][ T1969] usb 2-1: USB disconnect, device number 5 [ 997.918045][T12404] Bluetooth: hci5: command tx timeout [ 998.745906][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 998.778021][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 998.791303][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 998.898433][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 998.909161][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 998.996312][T12975] lo speed is unknown, defaulting to 1000 [ 999.286653][T13022] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1355'. [ 999.346118][T13022] netlink: zone id is out of range [ 999.889218][T13027] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 999.936762][ T148] bridge_slave_1: left allmulticast mode [ 999.953903][ T148] bridge_slave_1: left promiscuous mode [ 999.989346][ T5594] Bluetooth: hci5: command tx timeout [ 999.997404][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.014344][ T148] bridge_slave_0: left allmulticast mode [ 1000.028316][ T148] bridge_slave_0: left promiscuous mode [ 1000.064534][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1000.714584][T13036] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1000.940822][ T5594] Bluetooth: hci4: command tx timeout [ 1001.023598][T13042] syz.3.1358 (13042): drop_caches: 2 [ 1001.043285][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1001.186770][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1001.309432][ T148] bond0 (unregistering): Released all slaves [ 1001.976925][T13021] tipc: MTU too low for tipc bearer [ 1002.090252][ T5594] Bluetooth: hci5: command tx timeout [ 1003.032657][ T5594] Bluetooth: hci4: command tx timeout [ 1003.066977][ T148] hsr_slave_0: left promiscuous mode [ 1003.255084][ T148] hsr_slave_1: left promiscuous mode [ 1003.273771][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1003.302938][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1003.374454][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1003.409290][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1003.531584][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1003.540061][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.611443][ T148] veth1_macvtap: left promiscuous mode [ 1003.637563][ T148] veth0_macvtap: left promiscuous mode [ 1003.661490][T13063] syz.1.1362 (13063): drop_caches: 2 [ 1003.671361][ T148] veth1_vlan: left promiscuous mode [ 1003.684563][ T148] veth0_vlan: left promiscuous mode [ 1005.109694][ T5594] Bluetooth: hci4: command tx timeout [ 1006.161777][ T148] team0 (unregistering): Port device team_slave_1 removed [ 1006.203941][ T148] team0 (unregistering): Port device team_slave_0 removed [ 1006.350779][T13088] random: crng reseeded on system resumption [ 1007.151145][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1007.177676][ T5594] Bluetooth: hci4: command tx timeout [ 1007.446005][T13015] lo speed is unknown, defaulting to 1000 [ 1007.889757][T13097] loop1: detected capacity change from 0 to 64 [ 1008.383754][T13101] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1008.664208][T13111] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1009.276388][ T5862] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.390699][T13106] tipc: MTU too low for tipc bearer [ 1009.668630][ T5862] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1009.743195][T13124] syz.3.1371 (13124): drop_caches: 2 [ 1010.475393][ T5862] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.278165][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.296023][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.318966][T12975] bridge_slave_0: entered allmulticast mode [ 1011.347600][T12975] bridge_slave_0: entered promiscuous mode [ 1011.409159][T13144] random: crng reseeded on system resumption [ 1011.446037][ T5862] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.513879][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.525554][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.541215][T12975] bridge_slave_1: entered allmulticast mode [ 1011.559969][T12975] bridge_slave_1: entered promiscuous mode [ 1012.718184][T13153] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1376'. [ 1012.813472][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1012.921164][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.385875][T13161] loop3: detected capacity change from 0 to 16 [ 1013.449183][T13161] erofs (device loop3): mounted with root inode @ nid 36. [ 1013.700960][T12975] team0: Port device team_slave_0 added [ 1013.821353][T13170] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1013.846571][T12975] team0: Port device team_slave_1 added [ 1014.046672][ T5862] bridge_slave_1: left allmulticast mode [ 1014.080219][ T5862] bridge_slave_1: left promiscuous mode [ 1014.102818][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 1014.159577][ T5862] bridge_slave_0: left allmulticast mode [ 1014.191244][ T5862] bridge_slave_0: left promiscuous mode [ 1014.221173][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 1014.984095][T13176] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1015.366057][ T5862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1015.404408][ T5862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1015.424449][ T5862] bond0 (unregistering): Released all slaves [ 1015.570315][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1015.610139][T13176] tipc: MTU too low for tipc bearer [ 1015.664354][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.671481][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.697693][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1015.888392][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1015.921852][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1015.957920][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1016.191824][T13015] bridge0: port 1(bridge_slave_0) entered blocking state [ 1016.215910][T13015] bridge0: port 1(bridge_slave_0) entered disabled state [ 1016.268882][T13015] bridge_slave_0: entered allmulticast mode [ 1016.312030][T13015] bridge_slave_0: entered promiscuous mode [ 1016.585555][T13198] random: crng reseeded on system resumption [ 1016.642778][ T5862] hsr_slave_0: left promiscuous mode [ 1016.789555][ T5862] hsr_slave_1: left promiscuous mode [ 1016.856634][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.931341][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.074446][ T5862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.130154][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.490021][ T5862] veth1_macvtap: left promiscuous mode [ 1017.545308][ T5862] veth0_macvtap: left promiscuous mode [ 1017.592076][ T5862] veth1_vlan: left promiscuous mode [ 1017.664175][ T5862] veth0_vlan: left promiscuous mode [ 1018.974951][T13212] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1019.378055][ T5862] team0 (unregistering): Port device team_slave_1 removed [ 1019.493078][ T5862] team0 (unregistering): Port device team_slave_0 removed [ 1019.914603][T13015] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.947705][T13015] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.955610][T13015] bridge_slave_1: entered allmulticast mode [ 1019.964154][T13015] bridge_slave_1: entered promiscuous mode [ 1020.088765][T13015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.657962][T13015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.862606][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1392'. [ 1020.903217][T13236] Unknown options in mask b7f2 [ 1020.971241][T12975] hsr_slave_0: entered promiscuous mode [ 1020.980987][T12975] hsr_slave_1: entered promiscuous mode [ 1020.989443][T12975] debugfs: 'hsr0' already exists in 'hsr' [ 1020.995324][T12975] Cannot create hsr debugfs directory [ 1021.447901][T13015] team0: Port device team_slave_0 added [ 1021.920782][T13015] team0: Port device team_slave_1 added [ 1022.085507][T13247] random: crng reseeded on system resumption [ 1023.358410][T13015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.548257][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1023.700437][T13015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.368821][T13015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.416139][T13015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.503225][T13015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.776457][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 1024.844958][T13267] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1025.512391][T13015] hsr_slave_0: entered promiscuous mode [ 1025.553784][T13015] hsr_slave_1: entered promiscuous mode [ 1025.562272][T13015] debugfs: 'hsr0' already exists in 'hsr' [ 1025.580593][T13015] Cannot create hsr debugfs directory [ 1026.615388][T13287] loop3: detected capacity change from 0 to 4096 [ 1026.738404][T13287] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1027.081225][T13287] ntfs3(loop3): ino=1a, mi_enum_attr [ 1027.093315][T13287] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 1027.363742][T13293] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1027.585815][T12975] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1027.728554][T12975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1027.895184][T13289] tipc: MTU too low for tipc bearer [ 1027.902636][T12975] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1027.996125][T12975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1028.226599][T12975] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1028.335683][T12975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1028.387860][T12975] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1028.495611][T13307] random: crng reseeded on system resumption [ 1028.519219][T12975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1030.176777][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1408'. [ 1030.279695][T13015] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1030.363265][T13015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1030.428975][T13015] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1030.591137][T13015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1030.601198][T13015] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1030.652099][T13321] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1030.770633][T13015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1030.789104][T13015] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1030.865984][T13015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1031.354280][T13332] comedi comedi2: pcm3724: I/O base address or length out of range [ 1031.645347][T12975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.075984][T12975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.422300][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.430368][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.556734][ T5930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.564306][ T5930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.985164][T13015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1033.418981][T13015] 8021q: adding VLAN 0 to HW filter on device team0 [ 1033.595576][T13353] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1033.764813][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.772539][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.020819][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.028421][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.057610][T13364] random: crng reseeded on system resumption [ 1034.128148][T13353] tipc: MTU too low for tipc bearer [ 1036.251591][T13015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1036.755443][T13383] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1038.618962][T13400] loop2: detected capacity change from 0 to 4096 [ 1038.735369][T13400] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1038.998999][T13400] ntfs3(loop2): ino=b, mi_enum_attr [ 1039.004548][T13400] ntfs3(loop2): Failed to load $Extend (-22). [ 1039.010805][T13400] ntfs3(loop2): Failed to initialize $Extend. [ 1039.120700][T13400] ntfs3(loop2): ino=5, "/" indx_read_ra [ 1040.349648][T13427] loop1: detected capacity change from 0 to 16 [ 1040.477749][T13427] cramfs: Error -3 while decompressing! [ 1040.483470][T13427] cramfs: ffffffff95799468(27)->ffff888052754000(4096) [ 1040.501190][T12975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1040.534986][T12706] udevd[12706]: incorrect cramfs checksum on /dev/loop1 [ 1040.660998][T13427] cramfs: Error -3 while decompressing! [ 1040.667000][T13427] cramfs: ffffffff95799483(16)->ffff888052532000(4096) [ 1040.705350][T13427] cramfs: Error -3 while decompressing! [ 1040.711162][T13427] cramfs: ffffffff95799468(27)->ffff888052754000(4096) [ 1040.748746][ T29] audit: type=1800 audit(1778806257.001:472): pid=13427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1427" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 1041.132924][T13015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.394933][T13438] random: crng reseeded on system resumption [ 1041.945246][T13445] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1044.939125][T12975] veth0_vlan: entered promiscuous mode [ 1045.125922][T12975] veth1_vlan: entered promiscuous mode [ 1045.626311][T12975] veth0_macvtap: entered promiscuous mode [ 1045.634184][T13470] loop3: detected capacity change from 0 to 4096 [ 1045.735785][T12975] veth1_macvtap: entered promiscuous mode [ 1045.789248][T13470] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1045.816948][T13470] ntfs3(loop3): It is recommended to use chkdsk. [ 1046.055810][T12975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.294433][T12975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.311927][T13478] loop1: detected capacity change from 0 to 512 [ 1046.376923][T13478] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 1046.440104][T13478] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1046.447051][T13478] EXT4-fs error (device loop1): __ext4_iget:5481: inode #11: block 3: comm syz.1.1434: invalid block [ 1046.479595][T13478] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1046.510842][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.540110][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1046.546696][ C1] EXT4-fs (loop1): initial error at time 1778806262: __ext4_iget:5481: inode 11: block 3 [ 1046.554383][T13478] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.1434: couldn't read orphan inode 11 (err -117) [ 1046.556825][ C1] EXT4-fs (loop1): last error at time 1778806262: __ext4_iget:5481: inode 11: block 3 [ 1046.693317][T13478] loop1: lost filesystem error report for type 5 error -117 [ 1046.699032][T13478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1046.852183][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.892601][T13478] EXT4-fs (loop1): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 1046.914707][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.977969][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.333647][T13015] veth0_vlan: entered promiscuous mode [ 1047.370916][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.669232][T13015] veth1_vlan: entered promiscuous mode [ 1048.116554][T13015] veth0_macvtap: entered promiscuous mode [ 1048.239791][T13015] veth1_macvtap: entered promiscuous mode [ 1048.759448][T13015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1048.888380][T13015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1048.959433][ T148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.020447][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.077156][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.137547][ T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1049.229105][T13504] loop2: detected capacity change from 0 to 256 [ 1049.409852][T13504] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xf17e4aaa, utbl_chksum : 0xe619d30d) [ 1049.565102][T13504] exFAT-fs (loop2): failed to test first cluster bit of root dir(5) [ 1050.033653][T13515] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1051.120194][T13531] random: crng reseeded on system resumption [ 1053.782016][T13557] loop1: detected capacity change from 0 to 256 [ 1054.405108][T13557] FAT-fs (loop1): Directory bread(block 64) failed [ 1054.441918][T13557] FAT-fs (loop1): Directory bread(block 65) failed [ 1054.499877][T13557] FAT-fs (loop1): Directory bread(block 66) failed [ 1054.569234][T13557] FAT-fs (loop1): Directory bread(block 67) failed [ 1054.667816][T13557] FAT-fs (loop1): Directory bread(block 68) failed [ 1054.711972][T13557] FAT-fs (loop1): Directory bread(block 69) failed [ 1054.768416][T13557] FAT-fs (loop1): Directory bread(block 70) failed [ 1054.804786][T13557] FAT-fs (loop1): Directory bread(block 71) failed [ 1054.871031][T13557] FAT-fs (loop1): Directory bread(block 72) failed [ 1054.944359][T13557] FAT-fs (loop1): Directory bread(block 73) failed [ 1055.670299][T12404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1055.684609][T12404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1055.828914][T12404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1055.835895][T13574] siw: device registration error -23 [ 1055.934490][T12404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1055.946459][T12404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1058.037742][ T5594] Bluetooth: hci0: command tx timeout [ 1060.108688][T13602] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1060.170761][ T5594] Bluetooth: hci0: command tx timeout [ 1061.205821][T12404] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1061.234985][T12404] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1061.248529][T12404] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1061.295214][T12404] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1061.307311][T12404] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1061.773562][T13625] random: crng reseeded on system resumption [ 1062.236732][T12404] Bluetooth: hci0: command tx timeout [ 1062.296303][ T9629] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.437915][T12404] Bluetooth: hci5: command tx timeout [ 1063.936929][ T9629] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.136500][T13577] lo speed is unknown, defaulting to 1000 [ 1064.220584][T13633] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1064.359082][T12404] Bluetooth: hci0: command tx timeout [ 1064.926825][ T9629] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.949878][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1064.964300][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1065.346411][ T9629] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.541082][T12404] Bluetooth: hci5: command tx timeout [ 1065.581704][T13655] siw: device registration error -23 [ 1067.305134][T13674] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1067.548125][ T9629] bridge_slave_1: left allmulticast mode [ 1067.553998][ T9629] bridge_slave_1: left promiscuous mode [ 1067.594855][T12404] Bluetooth: hci5: command tx timeout [ 1067.679374][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.721781][ T9629] bridge_slave_0: left allmulticast mode [ 1067.727636][ T9629] bridge_slave_0: left promiscuous mode [ 1067.734193][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.685510][ T9629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1068.704776][ T9629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.733680][ T9629] bond0 (unregistering): Released all slaves [ 1069.034863][T13614] lo speed is unknown, defaulting to 1000 [ 1069.332644][ T9629] hsr_slave_0: left promiscuous mode [ 1069.387008][ T9629] hsr_slave_1: left promiscuous mode [ 1069.394910][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1069.402457][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.413183][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1069.420735][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.487258][T13695] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1069.664730][T12404] Bluetooth: hci5: command tx timeout [ 1069.723653][ T9629] veth1_macvtap: left promiscuous mode [ 1069.729358][ T9629] veth0_macvtap: left promiscuous mode [ 1069.735208][ T9629] veth1_vlan: left promiscuous mode [ 1069.740749][ T9629] veth0_vlan: left promiscuous mode [ 1069.847868][T13705] loop3: detected capacity change from 0 to 256 [ 1070.005794][T13705] FAT-fs (loop3): Directory bread(block 64) failed [ 1070.119564][T13705] FAT-fs (loop3): Directory bread(block 65) failed [ 1070.126476][T13705] FAT-fs (loop3): Directory bread(block 66) failed [ 1070.133183][T13705] FAT-fs (loop3): Directory bread(block 67) failed [ 1070.140281][T13705] FAT-fs (loop3): Directory bread(block 68) failed [ 1070.296124][T13705] FAT-fs (loop3): Directory bread(block 69) failed [ 1070.303035][T13705] FAT-fs (loop3): Directory bread(block 70) failed [ 1070.309746][T13705] FAT-fs (loop3): Directory bread(block 71) failed [ 1070.329913][T13705] FAT-fs (loop3): Directory bread(block 72) failed [ 1070.337270][T13705] FAT-fs (loop3): Directory bread(block 73) failed [ 1071.728964][T13719] loop2: detected capacity change from 0 to 1764 [ 1072.226262][T13723] siw: device registration error -23 [ 1073.489091][ T9629] team0 (unregistering): Port device team_slave_1 removed [ 1073.555033][ T9629] team0 (unregistering): Port device team_slave_0 removed [ 1073.908628][T13733] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1075.276151][T13749] random: crng reseeded on system resumption [ 1075.612400][T13577] bridge0: port 1(bridge_slave_0) entered blocking state [ 1075.625665][T13577] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.768280][T13577] bridge_slave_0: entered allmulticast mode [ 1075.840018][T13577] bridge_slave_0: entered promiscuous mode [ 1076.019093][T13577] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.139432][T13577] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.206195][T13577] bridge_slave_1: entered allmulticast mode [ 1076.291514][T13577] bridge_slave_1: entered promiscuous mode [ 1076.628688][ T9629] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1076.946916][ T9629] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.037600][T13577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.158989][T13756] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1077.185983][T13577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.254629][T13762] loop3: detected capacity change from 0 to 128 [ 1077.479294][ T9629] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.231808][ T9629] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.347017][T13577] team0: Port device team_slave_0 added [ 1078.393758][T13577] team0: Port device team_slave_1 added [ 1078.828721][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1479'. [ 1078.994713][T13577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1079.067465][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.114772][T13577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1079.130810][T13577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1079.137916][T13577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1079.260335][T13577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1079.380013][T13784] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1080.038293][T13577] hsr_slave_0: entered promiscuous mode [ 1080.047847][T13577] hsr_slave_1: entered promiscuous mode [ 1080.056206][T13577] debugfs: 'hsr0' already exists in 'hsr' [ 1080.148054][T13577] Cannot create hsr debugfs directory [ 1080.362505][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1080.792132][ T9629] bridge_slave_1: left allmulticast mode [ 1080.797965][ T9629] bridge_slave_1: left promiscuous mode [ 1080.804449][ T9629] bridge0: port 2(bridge_slave_1) entered disabled state [ 1080.871283][ T9629] bridge_slave_0: left allmulticast mode [ 1080.877281][ T9629] bridge_slave_0: left promiscuous mode [ 1081.028706][ T9629] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.579143][T13808] random: crng reseeded on system resumption [ 1083.139976][T13820] loop2: detected capacity change from 0 to 1764 [ 1083.195217][T13820] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 1083.316210][T13822] loop1: detected capacity change from 0 to 164 [ 1083.364581][ T9629] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.368041][T13822] Unsupported NM flag settings (240) [ 1083.503319][ T9629] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.565573][ T9629] bond0 (unregistering): Released all slaves [ 1084.271015][ T9629] hsr_slave_0: left promiscuous mode [ 1084.282271][ T9629] hsr_slave_1: left promiscuous mode [ 1084.375391][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1084.384661][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1084.444248][ T9629] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1084.477669][ T9629] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1084.563526][ T9629] veth1_macvtap: left promiscuous mode [ 1084.575915][ T9629] veth0_macvtap: left promiscuous mode [ 1084.586543][ T9629] veth1_vlan: left promiscuous mode [ 1084.613003][ T9629] veth0_vlan: left promiscuous mode [ 1085.821088][T13840] loop2: detected capacity change from 0 to 8 [ 1086.594518][ T9629] team0 (unregistering): Port device team_slave_1 removed [ 1086.634976][ T9629] team0 (unregistering): Port device team_slave_0 removed [ 1088.205341][T13858] loop3: detected capacity change from 0 to 64 [ 1089.382078][T13874] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1090.015056][T13614] bridge0: port 1(bridge_slave_0) entered blocking state [ 1090.050513][T13614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1090.119825][T13614] bridge_slave_0: entered allmulticast mode [ 1090.345394][T13614] bridge_slave_0: entered promiscuous mode [ 1090.437984][T13614] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.486336][T13614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.529870][T13614] bridge_slave_1: entered allmulticast mode [ 1090.588026][T13614] bridge_slave_1: entered promiscuous mode [ 1090.976054][T13888] loop2: detected capacity change from 0 to 4096 [ 1091.048247][T13888] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 1091.150631][T13614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1091.187193][T13614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.368860][T13888] ntfs3(loop2): ino=19, mi_enum_attr [ 1091.389665][T13888] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 1091.596454][T13888] ntfs3(loop2): failed to convert "c46c" to maciceland [ 1091.604992][T13888] ntfs3(loop2): ino=20, mi_enum_attr [ 1091.763052][T13614] team0: Port device team_slave_0 added [ 1092.090936][T13614] team0: Port device team_slave_1 added [ 1092.686058][T13577] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1092.772026][T13262] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1092.845413][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1092.857104][T13614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1092.867872][T13614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1092.957686][T13614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1093.031197][T13577] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1093.099308][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1093.208667][T13577] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1093.306822][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1093.327403][T13614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1093.334711][T13614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1093.408869][T13614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1093.423878][T13577] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1093.466025][T13577] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1093.516643][T13911] loop2: detected capacity change from 0 to 512 [ 1093.568040][T13262] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1093.576507][T13262] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1093.588021][T13262] usb 2-1: config 220 has no interface number 2 [ 1093.597722][T13262] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1093.662487][T13262] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1093.669461][T13262] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1093.819693][T13262] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1093.836551][T13911] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.016543][T13911] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.1509: bg 0: bad block bitmap checksum [ 1094.115173][T13614] hsr_slave_0: entered promiscuous mode [ 1094.137678][T13614] hsr_slave_1: entered promiscuous mode [ 1094.159729][T13614] debugfs: 'hsr0' already exists in 'hsr' [ 1094.178747][T13614] Cannot create hsr debugfs directory [ 1094.209505][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1094.302979][T13262] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1094.312240][T13262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.320323][T13262] usb 2-1: Product: syz [ 1094.324594][T13262] usb 2-1: Manufacturer: syz [ 1094.329270][T13262] usb 2-1: SerialNumber: syz [ 1094.890197][T13917] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1095.066216][T13262] usb 2-1: selecting invalid altsetting 0 [ 1095.072678][T13262] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1095.080247][T13262] uvcvideo 2-1:220.0: No valid video chain found. [ 1095.325155][T13262] usb 2-1: selecting invalid altsetting 0 [ 1095.331125][T13262] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1095.348209][T13262] usb 2-1: USB disconnect, device number 6 [ 1096.250336][T13577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1096.878135][T13577] 8021q: adding VLAN 0 to HW filter on device team0 [ 1097.007262][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 1097.014722][ T5862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1097.138380][ T9629] bridge0: port 2(bridge_slave_1) entered blocking state [ 1097.145849][ T9629] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1097.317073][T13940] random: crng reseeded on system resumption [ 1098.516392][T13614] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1098.673880][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1098.763169][T13614] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1098.781261][T13955] loop1: detected capacity change from 0 to 8 [ 1098.877009][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1099.159655][T13614] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1099.375752][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1099.491467][T13614] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1099.513997][T13614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1099.834520][T13968] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1100.126755][T13971] loop2: detected capacity change from 0 to 128 [ 1101.524459][T13985] loop1: detected capacity change from 0 to 256 [ 1101.720508][T13614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.830586][T13985] FAT-fs (loop1): Directory bread(block 64) failed [ 1101.837323][T13985] FAT-fs (loop1): Directory bread(block 65) failed [ 1101.844197][T13985] FAT-fs (loop1): Directory bread(block 66) failed [ 1101.850912][T13985] FAT-fs (loop1): Directory bread(block 67) failed [ 1101.857781][T13985] FAT-fs (loop1): Directory bread(block 68) failed [ 1101.864486][T13985] FAT-fs (loop1): Directory bread(block 69) failed [ 1101.871360][T13985] FAT-fs (loop1): Directory bread(block 70) failed [ 1101.942547][T13985] FAT-fs (loop1): Directory bread(block 71) failed [ 1102.038529][T13614] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.052187][T13985] FAT-fs (loop1): Directory bread(block 72) failed [ 1102.058902][T13985] FAT-fs (loop1): Directory bread(block 73) failed [ 1102.261324][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.269112][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1102.611979][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.619616][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1103.011661][T13614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1103.022171][T13614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1104.144302][T14003] random: crng reseeded on system resumption [ 1105.004048][T14006] loop2: detected capacity change from 0 to 4096 [ 1105.601993][T14015] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1105.609923][T13577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1105.830460][T14006] NILFS (loop2): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 1106.298520][T14026] loop1: detected capacity change from 0 to 16 [ 1106.340370][T14026] erofs (device loop1): mounted with root inode @ nid 36. [ 1108.774835][T13577] veth0_vlan: entered promiscuous mode [ 1109.034366][T13577] veth1_vlan: entered promiscuous mode [ 1109.461559][T13577] veth0_macvtap: entered promiscuous mode [ 1109.480805][T13577] veth1_macvtap: entered promiscuous mode [ 1110.415499][T13614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1110.517276][T13577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.537850][T13577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.789201][ T148] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.853034][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1110.953621][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.035413][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.187279][T14073] loop2: detected capacity change from 0 to 8 [ 1113.827424][T13614] veth0_vlan: entered promiscuous mode [ 1113.876042][T13614] veth1_vlan: entered promiscuous mode [ 1114.386804][T13614] veth0_macvtap: entered promiscuous mode [ 1114.580858][T13614] veth1_macvtap: entered promiscuous mode [ 1114.707880][T13614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.883981][T13614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1115.102368][ T148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.190642][ T148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.293827][ T148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.355153][ T148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.675097][ T5594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1116.711793][ T5594] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1116.721412][ T5594] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1116.735022][ T5594] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1116.769119][ T5594] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1117.170895][T14136] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1117.645376][T14128] tipc: MTU too low for tipc bearer [ 1117.870958][T14149] loop1: detected capacity change from 0 to 256 [ 1117.981833][T14149] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1118.177051][T14149] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d) [ 1118.518999][T14158] loop2: detected capacity change from 0 to 256 [ 1118.791071][T14158] FAT-fs (loop2): Directory bread(block 64) failed [ 1118.797818][T14158] FAT-fs (loop2): Directory bread(block 65) failed [ 1118.830120][T14158] FAT-fs (loop2): Directory bread(block 66) failed [ 1118.850938][T14158] FAT-fs (loop2): Directory bread(block 67) failed [ 1118.904863][T14158] FAT-fs (loop2): Directory bread(block 68) failed [ 1118.942535][T14158] FAT-fs (loop2): Directory bread(block 69) failed [ 1118.988144][T14158] FAT-fs (loop2): Directory bread(block 70) failed [ 1119.004593][ T5594] Bluetooth: hci4: command tx timeout [ 1119.029826][T14158] FAT-fs (loop2): Directory bread(block 71) failed [ 1119.036777][T14158] FAT-fs (loop2): Directory bread(block 72) failed [ 1119.043497][T14158] FAT-fs (loop2): Directory bread(block 73) failed [ 1119.246117][ T29] audit: type=1800 audit(1778806334.997:473): pid=14158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1550" name="rdma.current" dev="loop2" ino=1048613 res=0 errno=0 [ 1121.045259][ T14] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.246361][ T5594] Bluetooth: hci4: command tx timeout [ 1121.433030][T14188] loop3: detected capacity change from 0 to 512 [ 1121.649307][ T14] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.840508][T14188] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1121.977046][T14188] ext4 filesystem being mounted at /421/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1122.298657][ T14] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.487600][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1122.514858][T14191] loop2: detected capacity change from 0 to 4096 [ 1122.685496][ T14] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.738232][T12404] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1122.747519][T12404] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1122.756721][T12404] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1122.790126][T12404] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1122.801053][T12404] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1123.168858][T14132] lo speed is unknown, defaulting to 1000 [ 1123.526340][T12404] Bluetooth: hci4: command tx timeout [ 1124.337494][T14221] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1124.463414][ T14] bridge_slave_1: left allmulticast mode [ 1124.524518][ T14] bridge_slave_1: left promiscuous mode [ 1124.578807][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.709050][ T14] bridge_slave_0: left allmulticast mode [ 1124.750776][ T14] bridge_slave_0: left promiscuous mode [ 1124.757387][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.040693][T12404] Bluetooth: hci0: command tx timeout [ 1125.686713][T12404] Bluetooth: hci4: command tx timeout [ 1125.715789][T14232] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1125.887905][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1125.903102][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1125.942902][ T14] bond0 (unregistering): Released all slaves [ 1125.994517][T14221] tipc: MTU too low for tipc bearer [ 1126.592310][ T14] hsr_slave_0: left promiscuous mode [ 1126.678179][ T14] hsr_slave_1: left promiscuous mode [ 1126.685961][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.693493][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.708232][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.715813][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.866919][ T14] veth1_macvtap: left promiscuous mode [ 1126.883455][ T14] veth0_macvtap: left promiscuous mode [ 1126.909958][ T14] veth1_vlan: left promiscuous mode [ 1126.920645][ T14] veth0_vlan: left promiscuous mode [ 1126.960965][T14244] loop3: detected capacity change from 0 to 16 [ 1126.973580][T14244] erofs (device loop3): mounted with root inode @ nid 36. [ 1127.018824][T14242] loop1: detected capacity change from 0 to 1024 [ 1127.231864][T12404] Bluetooth: hci0: command tx timeout [ 1127.439928][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.447944][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1128.863613][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1128.927645][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1129.447048][T12404] Bluetooth: hci0: command tx timeout [ 1130.320654][T14200] lo speed is unknown, defaulting to 1000 [ 1131.530878][T14291] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1131.710898][T12404] Bluetooth: hci0: command tx timeout [ 1131.777476][ T14] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.999946][T14291] tipc: MTU too low for tipc bearer [ 1132.052265][T14280] tipc: MTU too low for tipc bearer [ 1132.309219][ T14] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.536463][T14302] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1132.885307][ T14] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.058866][T14302] tipc: MTU too low for tipc bearer [ 1133.200422][T14314] loop1: detected capacity change from 0 to 2048 [ 1133.233760][T14314] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1133.377629][T14321] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1133.641281][ T14] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.493687][ T14] bridge_slave_1: left allmulticast mode [ 1134.493789][ T14] bridge_slave_1: left promiscuous mode [ 1134.494636][ T14] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.504697][ T14] bridge_slave_0: left allmulticast mode [ 1134.504803][ T14] bridge_slave_0: left promiscuous mode [ 1134.505667][ T14] bridge0: port 1(bridge_slave_0) entered disabled state [ 1135.798599][ T14] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.838657][ T14] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.853214][ T14] bond0 (unregistering): Released all slaves [ 1136.096502][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1136.237072][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1136.244770][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1136.347150][T14132] bridge_slave_0: entered allmulticast mode [ 1136.406395][T14132] bridge_slave_0: entered promiscuous mode [ 1136.421068][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1136.428543][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1136.436150][T14132] bridge_slave_1: entered allmulticast mode [ 1136.491118][T14132] bridge_slave_1: entered promiscuous mode [ 1136.539287][T14353] loop2: detected capacity change from 0 to 8 [ 1136.714099][T14353] SQUASHFS error: Unable to read directory block [1d0:0] [ 1136.733933][ T14] hsr_slave_0: left promiscuous mode [ 1136.759497][ T14] hsr_slave_1: left promiscuous mode [ 1136.794117][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1136.828577][ T14] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1136.929679][ T14] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1136.964268][ T14] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1137.027976][ T14] veth1_macvtap: left promiscuous mode [ 1137.040111][ T14] veth0_macvtap: left promiscuous mode [ 1137.051634][ T14] veth1_vlan: left promiscuous mode [ 1137.064108][ T14] veth0_vlan: left promiscuous mode [ 1137.820660][T14366] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1138.235043][ T14] team0 (unregistering): Port device team_slave_1 removed [ 1138.254922][ T14] team0 (unregistering): Port device team_slave_0 removed [ 1138.439095][T14359] tipc: MTU too low for tipc bearer [ 1138.747817][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1138.878335][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1139.431293][T14377] loop3: detected capacity change from 0 to 512 [ 1139.607393][T14377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1139.620078][T14132] team0: Port device team_slave_0 added [ 1139.620308][T14377] ext4 filesystem being mounted at /430/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1139.630764][T14200] bridge0: port 1(bridge_slave_0) entered blocking state [ 1139.684289][T14200] bridge0: port 1(bridge_slave_0) entered disabled state [ 1139.717609][T14200] bridge_slave_0: entered allmulticast mode [ 1139.757045][T14200] bridge_slave_0: entered promiscuous mode [ 1139.851829][T14132] team0: Port device team_slave_1 added [ 1139.915619][T14200] bridge0: port 2(bridge_slave_1) entered blocking state [ 1139.937101][T14200] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.951985][T14200] bridge_slave_1: entered allmulticast mode [ 1139.985687][T14200] bridge_slave_1: entered promiscuous mode [ 1140.000732][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1140.601865][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.608928][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.791127][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.858345][T14132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.865479][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.119433][T14396] random: crng reseeded on system resumption [ 1141.659277][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.289352][T14200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1142.457994][T14200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1142.704694][T14200] team0: Port device team_slave_0 added [ 1142.746700][T14200] team0: Port device team_slave_1 added [ 1143.243472][T14200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1143.250600][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.307124][T14200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1143.323544][T14200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1143.330647][T14200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1143.444311][T14414] loop2: detected capacity change from 0 to 4096 [ 1143.475271][T14414] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 1143.521978][T14200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1143.803730][T14132] hsr_slave_0: entered promiscuous mode [ 1143.859662][T14132] hsr_slave_1: entered promiscuous mode [ 1143.912986][T14132] debugfs: 'hsr0' already exists in 'hsr' [ 1143.918896][T14132] Cannot create hsr debugfs directory [ 1144.795860][T14200] hsr_slave_0: entered promiscuous mode [ 1144.950695][T14200] hsr_slave_1: entered promiscuous mode [ 1144.959247][T14200] debugfs: 'hsr0' already exists in 'hsr' [ 1144.965128][T14200] Cannot create hsr debugfs directory [ 1145.075990][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1145.159737][T14434] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1145.356314][T14425] tipc: MTU too low for tipc bearer [ 1146.083999][T14427] tipc: MTU too low for tipc bearer [ 1148.206233][T14457] tipc: MTU too low for tipc bearer [ 1148.485991][T14472] random: crng reseeded on system resumption [ 1150.278413][T14132] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1150.320254][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1150.330101][T14132] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1150.380592][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1150.394218][T14132] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1150.426300][T14485] loop1: detected capacity change from 0 to 256 [ 1150.448753][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1150.458699][T14132] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1150.537369][T14485] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1150.647718][T14132] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1151.154124][T14200] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1151.208249][T14490] loop2: detected capacity change from 0 to 64 [ 1151.218702][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1151.314546][T14200] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1151.436981][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1151.505658][T14200] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1151.624664][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1151.649567][T14200] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1151.652295][ T29] audit: type=1326 audit(1778806365.322:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.1.1603" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1151.755771][T14200] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1151.832883][ T29] audit: type=1326 audit(1778806365.378:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.1.1603" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1151.988077][ T29] audit: type=1326 audit(1778806365.378:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.1.1603" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=424 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1152.144018][ T29] audit: type=1326 audit(1778806365.378:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.1.1603" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1152.277712][T14501] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1152.287037][ T29] audit: type=1326 audit(1778806365.378:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14492 comm="syz.1.1603" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1153.345092][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1153.459618][T14132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1153.973070][ T5930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.980780][ T5930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1154.246526][T14200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1154.277108][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1154.285045][T12475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1154.368913][T14520] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1154.927029][T14520] tipc: MTU too low for tipc bearer [ 1155.030403][T14200] 8021q: adding VLAN 0 to HW filter on device team0 [ 1155.346815][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.354286][T12475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1155.678248][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.686033][T12475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1156.612723][T14200] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1156.616207][T14551] loop1: detected capacity change from 0 to 65 [ 1156.668007][T14551] BFS-fs: bfs_iget(): Bad inode number loop1:00000002 [ 1156.710341][T14200] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1156.959967][ T24] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1156.974246][T14555] loop2: detected capacity change from 0 to 256 [ 1157.244374][T14555] FAT-fs (loop2): Directory bread(block 64) failed [ 1157.273564][T14555] FAT-fs (loop2): Directory bread(block 65) failed [ 1157.280475][T14555] FAT-fs (loop2): Directory bread(block 66) failed [ 1157.287188][T14555] FAT-fs (loop2): Directory bread(block 67) failed [ 1157.294047][T14555] FAT-fs (loop2): Directory bread(block 68) failed [ 1157.300747][T14555] FAT-fs (loop2): Directory bread(block 69) failed [ 1157.307590][T14555] FAT-fs (loop2): Directory bread(block 70) failed [ 1157.351225][T14555] FAT-fs (loop2): Directory bread(block 71) failed [ 1157.406365][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1157.417622][T14555] FAT-fs (loop2): Directory bread(block 72) failed [ 1157.424357][T14555] FAT-fs (loop2): Directory bread(block 73) failed [ 1157.837152][ T24] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 1157.845567][ T24] usb 2-1: config 0 has an invalid descriptor of length 210, skipping remainder of the config [ 1157.856014][ T24] usb 2-1: config 0 has no interface number 0 [ 1157.862299][ T24] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 1157.874170][ T24] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 1157.988938][ T24] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1158.048307][ T24] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 1158.084374][ T24] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xD has an invalid bInterval 145, changing to 7 [ 1158.143640][ T24] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xD has invalid maxpacket 1526, setting to 1024 [ 1158.155017][ T24] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 1158.168349][ T24] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 1158.177576][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1158.285512][ T24] usb 2-1: config 0 descriptor?? [ 1158.324938][T14551] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1158.459527][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1159.380548][T12706] udevd[12706]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.126/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1159.596795][ T24] usb 2-1: USB disconnect, device number 7 [ 1161.712015][T14610] loop3: detected capacity change from 0 to 128 [ 1161.784682][T14608] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1161.827685][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1161.981551][T14610] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1161.992010][T14608] tipc: MTU too low for tipc bearer [ 1162.052545][T14610] ext4 filesystem being mounted at /442/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.411578][T14200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1162.644957][ T5580] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1162.964405][T14626] loop1: detected capacity change from 0 to 64 [ 1166.698992][T14200] veth0_vlan: entered promiscuous mode [ 1166.789568][T14132] veth0_vlan: entered promiscuous mode [ 1166.871343][T14132] veth1_vlan: entered promiscuous mode [ 1167.005531][T14200] veth1_vlan: entered promiscuous mode [ 1167.421633][T14661] loop2: detected capacity change from 0 to 4096 [ 1167.606151][T14661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1167.689210][T14132] veth0_macvtap: entered promiscuous mode [ 1167.787309][T14132] veth1_macvtap: entered promiscuous mode [ 1168.159372][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1168.354845][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1168.432970][T14200] veth0_macvtap: entered promiscuous mode [ 1168.748862][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1168.767475][T14200] veth1_macvtap: entered promiscuous mode [ 1168.814096][T14688] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1169.092523][ T56] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.101601][ T56] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.221130][ T56] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.231395][T14681] tipc: MTU too low for tipc bearer [ 1169.279186][ T5862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1169.527465][T14200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1169.731527][T14200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1169.810017][T14702] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1169.946706][ T3233] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.004018][ T3233] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.061712][ T3233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.187724][ T3233] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1171.496852][T14726] loop2: detected capacity change from 0 to 64 [ 1172.542613][T14732] loop3: detected capacity change from 0 to 64 [ 1172.766751][T14740] loop1: detected capacity change from 0 to 8 [ 1173.839054][T14752] random: crng reseeded on system resumption [ 1176.167280][T14775] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1176.625648][T14770] tipc: MTU too low for tipc bearer [ 1178.554018][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.579684][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1178.724986][ T5930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1178.864822][ T5930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.079444][ T5930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.110109][ T5930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.507181][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1179.560798][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1179.570530][T14813] loop3: detected capacity change from 0 to 256 [ 1179.870529][T14813] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1180.629768][T14818] loop1: detected capacity change from 0 to 4096 [ 1180.696725][T14818] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512). [ 1180.941644][T14818] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 1180.948389][T14818] ntfs3(loop1): Failed to initialize $Extend/$Reparse. [ 1181.483941][T14828] random: crng reseeded on system resumption [ 1181.883551][ T34] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 1181.891102][ T5586] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 1181.897781][ T5586] ntfs3(loop1): Mark volume as dirty due to NTFS errors [ 1181.904894][ T5586] ntfs3(loop1): ino=3, ntfs_set_state failed, -22. [ 1182.096761][ T34] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22. [ 1182.490619][T14833] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1182.745799][ T5594] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1182.755161][ T5594] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1182.764598][ T5594] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1182.805849][ T5594] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1182.817263][ T5594] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1183.589744][T14843] loop2: detected capacity change from 0 to 512 [ 1183.690589][T14843] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1183.942435][T14843] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1183.951467][T14843] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1184.035551][T14850] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1184.069082][T14843] Quota error (device loop2): v2_read_file_info: Can't read info structure [ 1184.131514][T14843] EXT4-fs warning (device loop2): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-5, ino=4). Please run e2fsck to fix. [ 1184.146433][T14843] EXT4-fs (loop2): Cannot turn on quotas: error -5 [ 1184.254626][T14843] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1656: bg 0: block 64: padding at end of block bitmap is not set [ 1184.269039][T14843] loop2: lost filesystem error report for type 5 error -117 [ 1184.277629][T14855] tipc: MTU too low for tipc bearer [ 1184.301761][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 1184.301848][ C1] EXT4-fs (loop2): initial error at time 1778806395: ext4_validate_block_bitmap:441 [ 1184.301965][ C1] EXT4-fs (loop2): last error at time 1778806395: ext4_validate_block_bitmap:441 [ 1184.306170][T14843] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 1184.508765][T14843] loop2: lost filesystem error report for type 5 error -117 [ 1184.600639][T14843] EXT4-fs (loop2): 1 truncate cleaned up [ 1184.737131][T14843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1185.074783][ T5594] Bluetooth: hci5: command tx timeout [ 1185.220951][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.211447][T14876] loop2: detected capacity change from 0 to 512 [ 1186.264099][T14876] EXT4-fs: Ignoring removed orlov option [ 1186.307592][ T5930] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1186.459245][T14876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1186.803880][ T5930] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.029347][ T5585] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1187.138211][ T5930] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.311157][ T5594] Bluetooth: hci5: command tx timeout [ 1187.335633][T14882] loop3: detected capacity change from 0 to 256 [ 1187.401952][T14882] exfat: Deprecated parameter 'utf8' [ 1187.465522][ T5930] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.514273][T14887] loop6: detected capacity change from 0 to 256 [ 1187.523726][T14882] exfat: Deprecated parameter 'utf8' [ 1187.648847][T14837] lo speed is unknown, defaulting to 1000 [ 1187.684271][T14888] random: crng reseeded on system resumption [ 1187.723246][T14887] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 1187.881567][T14882] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 1188.309710][T14882] exFAT-fs (loop3): error, in sector 160, dentry 12 should be unused, but 0x85 [ 1189.487844][ T5594] Bluetooth: hci5: command tx timeout [ 1189.899035][T14906] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1190.135284][T14917] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1190.150897][T14906] tipc: MTU too low for tipc bearer [ 1190.399036][ T5930] bridge_slave_1: left allmulticast mode [ 1190.405044][ T5930] bridge_slave_1: left promiscuous mode [ 1190.411566][ T5930] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.454067][ T5930] bridge_slave_0: left allmulticast mode [ 1190.460592][ T5930] bridge_slave_0: left promiscuous mode [ 1190.469700][ T5930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.217130][ T5930] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.234388][ T5930] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.271942][ T5930] bond0 (unregistering): Released all slaves [ 1191.709209][ T5594] Bluetooth: hci5: command tx timeout [ 1192.154340][T14935] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1192.793156][T14944] loop1: detected capacity change from 0 to 136 [ 1193.089888][T14944] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 1193.164255][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1193.181189][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1193.265218][ T5930] hsr_slave_0: left promiscuous mode [ 1193.322697][ T5930] hsr_slave_1: left promiscuous mode [ 1193.399543][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.430737][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.440185][T14950] random: crng reseeded on system resumption [ 1193.564681][ T5930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.572180][ T5930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.662408][ T5930] veth1_macvtap: left promiscuous mode [ 1193.668041][ T5930] veth0_macvtap: left promiscuous mode [ 1193.724976][ T5930] veth1_vlan: left promiscuous mode [ 1193.742005][ T5930] veth0_vlan: left promiscuous mode [ 1194.716848][ T29] audit: type=1326 audit(1778806405.610:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.1.1678" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1194.794599][ T29] audit: type=1326 audit(1778806405.666:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.1.1678" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1194.830701][ T29] audit: type=1326 audit(1778806405.722:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.1.1678" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1194.869665][ T29] audit: type=1326 audit(1778806405.722:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.1.1678" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=436 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1195.028686][ T29] audit: type=1326 audit(1778806405.722:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14962 comm="syz.1.1678" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=252 compat=1 ip=0xf701f00c code=0x7ffc0000 [ 1196.037928][T14975] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1198.086384][ T5930] team0 (unregistering): Port device team_slave_1 removed [ 1198.267073][ T5930] team0 (unregistering): Port device team_slave_0 removed [ 1198.299830][T15001] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1199.004210][T15007] loop6: detected capacity change from 0 to 256 [ 1199.154082][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1199.282985][T15010] loop1: detected capacity change from 0 to 256 [ 1199.915978][T15010] FAT-fs (loop1): Directory bread(block 64) failed [ 1199.922728][T15010] FAT-fs (loop1): Directory bread(block 65) failed [ 1199.929584][T15010] FAT-fs (loop1): Directory bread(block 66) failed [ 1199.981498][T15007] FAT-fs (loop6): Directory bread(block 64) failed [ 1200.044185][T15010] FAT-fs (loop1): Directory bread(block 67) failed [ 1200.084714][T15007] FAT-fs (loop6): Directory bread(block 65) failed [ 1200.091648][T15007] FAT-fs (loop6): Directory bread(block 66) failed [ 1200.098360][T15007] FAT-fs (loop6): Directory bread(block 67) failed [ 1200.105207][T15007] FAT-fs (loop6): Directory bread(block 68) failed [ 1200.106604][T15010] FAT-fs (loop1): Directory bread(block 68) failed [ 1200.111869][T15007] FAT-fs (loop6): Directory bread(block 69) failed [ 1200.138826][T15010] FAT-fs (loop1): Directory bread(block 69) failed [ 1200.145754][T15010] FAT-fs (loop1): Directory bread(block 70) failed [ 1200.152457][T15010] FAT-fs (loop1): Directory bread(block 71) failed [ 1200.159317][T15010] FAT-fs (loop1): Directory bread(block 72) failed [ 1200.166027][T15010] FAT-fs (loop1): Directory bread(block 73) failed [ 1200.221981][T15007] FAT-fs (loop6): Directory bread(block 70) failed [ 1200.228721][T15007] FAT-fs (loop6): Directory bread(block 71) failed [ 1200.241697][T15020] random: crng reseeded on system resumption [ 1200.267792][T15007] FAT-fs (loop6): Directory bread(block 72) failed [ 1200.274589][T15007] FAT-fs (loop6): Directory bread(block 73) failed [ 1200.490133][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1200.580817][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1200.659117][T14837] bridge_slave_0: entered allmulticast mode [ 1200.690569][T15010] syz.1.1689: attempt to access beyond end of device [ 1200.690569][T15010] loop1: rw=2051, sector=1224, nr_sectors = 32 limit=256 [ 1200.898978][T14837] bridge_slave_0: entered promiscuous mode [ 1200.933853][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1200.949057][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1200.958504][T14837] bridge_slave_1: entered allmulticast mode [ 1200.989161][T14837] bridge_slave_1: entered promiscuous mode [ 1201.559310][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1201.802265][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1202.264493][T14837] team0: Port device team_slave_0 added [ 1202.287353][T15036] loop6: detected capacity change from 0 to 256 [ 1202.372219][T14837] team0: Port device team_slave_1 added [ 1202.754352][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1202.815967][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.061050][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1203.568893][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1203.576020][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1203.624385][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1204.461841][T14837] hsr_slave_0: entered promiscuous mode [ 1204.471502][T14837] hsr_slave_1: entered promiscuous mode [ 1204.581579][T14837] debugfs: 'hsr0' already exists in 'hsr' [ 1204.587497][T14837] Cannot create hsr debugfs directory [ 1205.479382][T15067] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1206.207999][ T29] audit: type=1326 audit(1778806416.358:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.6.1702" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff900c code=0x7ffc0000 [ 1206.449663][ T29] audit: type=1326 audit(1778806416.358:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.6.1702" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff900c code=0x7ffc0000 [ 1206.589523][ T29] audit: type=1326 audit(1778806416.489:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.6.1702" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=334 compat=1 ip=0xf7ff900c code=0x7ffc0000 [ 1206.737487][ T29] audit: type=1326 audit(1778806416.489:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15078 comm="syz.6.1702" exe="/root/ci-upstream-kmsan-gce-386-root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff900c code=0x7ffc0000 [ 1208.340006][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1210.311324][T15116] siw: device registration error -23 [ 1211.668268][T14837] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1212.004650][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1212.014632][T14837] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1212.199369][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1212.209323][T14837] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1212.388352][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1212.398239][T14837] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1212.466852][T14837] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1212.493681][T15128] ÿ: renamed from dummy0 (while UP) [ 1212.756398][T15128] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1215.757369][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1216.842316][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1216.987215][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1216.994879][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1217.216062][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1217.223777][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1217.329560][T15163] loop1: detected capacity change from 0 to 128 [ 1217.425805][T15163] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 1217.443701][T15166] loop2: detected capacity change from 0 to 256 [ 1217.487823][T15163] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1217.983708][T15166] FAT-fs (loop2): Directory bread(block 64) failed [ 1218.036606][T15166] FAT-fs (loop2): Directory bread(block 65) failed [ 1218.056327][T15166] FAT-fs (loop2): Directory bread(block 66) failed [ 1218.087104][T15166] FAT-fs (loop2): Directory bread(block 67) failed [ 1218.150882][T15166] FAT-fs (loop2): Directory bread(block 68) failed [ 1218.207888][T15166] FAT-fs (loop2): Directory bread(block 69) failed [ 1218.237294][T15166] FAT-fs (loop2): Directory bread(block 70) failed [ 1218.244031][T15166] FAT-fs (loop2): Directory bread(block 71) failed [ 1218.250885][T15166] FAT-fs (loop2): Directory bread(block 72) failed [ 1218.257596][T15166] FAT-fs (loop2): Directory bread(block 73) failed [ 1218.312886][T14837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1218.779880][T15172] loop6: detected capacity change from 0 to 64 [ 1219.127594][T15172] MINIX-fs: mounting file system with errors, running fsck is recommended [ 1219.237637][ T29] audit: type=1800 audit(1778806428.518:488): pid=15172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1724" name="file2" dev="loop6" ino=6 res=0 errno=0 [ 1221.697436][T15190] loop3: detected capacity change from 0 to 2048 [ 1222.081232][T15190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1225.337983][T14837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.536416][T15252] netlink: 830 bytes leftover after parsing attributes in process `syz.6.1738'. [ 1227.576970][T15267] siw: device registration error -23 [ 1229.498970][T15281] syz.1.1743 (15281): drop_caches: 2 [ 1229.542339][T15282] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1231.122691][T14837] veth0_vlan: entered promiscuous mode [ 1231.151152][T14837] veth1_vlan: entered promiscuous mode [ 1231.501219][T15301] ALSA: mixer_oss: invalid OSS volume '' [ 1231.895277][T14837] veth0_macvtap: entered promiscuous mode [ 1231.964045][T15309] ALSA: mixer_oss: invalid OSS volume '' [ 1232.370784][T14837] veth1_macvtap: entered promiscuous mode [ 1232.633206][T14837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1232.755490][T14837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1232.887185][ T14] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.915084][ T14] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1232.960428][ T14] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.037506][T15299] tipc: MTU too low for tipc bearer [ 1233.067987][ T14] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.961479][T15322] loop3: detected capacity change from 0 to 1024 [ 1234.800497][T15328] siw: device registration error -23 [ 1238.082369][T15348] loop1: detected capacity change from 0 to 1024 [ 1238.141403][T15348] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 1238.151285][T15348] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1238.269367][T15348] EXT4-fs error (device loop1): ext4_get_journal_inode:5896: inode #32: comm syz.1.1755: iget: special inode unallocated [ 1238.282209][T15348] loop1: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117 [ 1238.302529][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 1238.318315][ C1] EXT4-fs (loop1): initial error at time 1778806446: ext4_get_journal_inode:5896: inode 32 [ 1238.328584][ C1] EXT4-fs (loop1): last error at time 1778806446: ext4_get_journal_inode:5896: inode 32 [ 1238.346907][T15348] EXT4-fs (loop1): Remounting filesystem read-only [ 1238.372461][T15348] EXT4-fs (loop1): no journal found [ 1238.377841][T15348] EXT4-fs (loop1): can't get journal size [ 1238.444579][T15348] EXT4-fs (loop1): filesystem is read-only [ 1238.452478][T15348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1238.764184][T15350] syz.6.1756 (15350): drop_caches: 2 [ 1239.411578][T15362] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1239.540944][ T5586] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.707365][T15379] ALSA: mixer_oss: invalid OSS volume 'Destination' [ 1241.714162][T15379] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1242.489738][T15373] tipc: MTU too low for tipc bearer [ 1243.033118][T15405] siw: device registration error -23 [ 1244.144369][T15409] loop1: detected capacity change from 0 to 2048 [ 1244.233696][T15409] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1244.352489][T15409] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1247.440702][T15431] syz.6.1769 (15431): drop_caches: 2 [ 1247.649565][T15434] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1248.034934][T15430] loop1: detected capacity change from 0 to 4096 [ 1248.642698][T15439] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1248.929453][T15443] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1248.992632][T15443] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1249.024993][T15443] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1249.056108][T15443] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1249.068418][T15443] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1250.217433][T15457] loop3: detected capacity change from 0 to 1024 [ 1250.485336][ T56] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.560415][T15457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.952148][ T56] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.154136][ T5580] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.203929][T15472] ALSA: mixer_oss: invalid OSS volume 'Destination' [ 1251.210721][T15472] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1251.365708][T15443] Bluetooth: hci4: command tx timeout [ 1251.517506][ T56] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.776309][ T56] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.881175][T15462] tipc: MTU too low for tipc bearer [ 1252.377400][T15491] siw: device registration error -23 [ 1253.552503][ T5594] Bluetooth: hci4: command tx timeout [ 1253.702816][ T56] bridge_slave_1: left allmulticast mode [ 1253.708670][ T56] bridge_slave_1: left promiscuous mode [ 1253.715155][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 1253.891436][ T56] bridge_slave_0: left allmulticast mode [ 1253.919944][ T56] bridge_slave_0: left promiscuous mode [ 1253.957716][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.452450][T15505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1784'. [ 1254.544182][T15500] syz.3.1783 (15500): drop_caches: 2 [ 1254.855389][T15511] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1255.616426][T15443] Bluetooth: hci0: command 0x0406 tx timeout [ 1255.750106][T15519] loop3: detected capacity change from 0 to 64 [ 1255.786996][T15443] Bluetooth: hci4: command tx timeout [ 1255.891679][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.939257][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.954632][ T56] bond0 (unregistering): Released all slaves [ 1256.048293][T15505] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1256.145487][T15441] lo speed is unknown, defaulting to 1000 [ 1256.948635][T15531] loop6: detected capacity change from 0 to 8 [ 1257.186848][T15531] SQUASHFS error: Failed to read block 0x1ec: -5 [ 1257.193541][T15531] SQUASHFS error: Unable to read metadata cache entry [1ea] [ 1257.242421][ T56] hsr_slave_0: left promiscuous mode [ 1257.329122][ T56] hsr_slave_1: left promiscuous mode [ 1257.379831][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.387599][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.433229][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.440793][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.581252][ T56] veth1_macvtap: left promiscuous mode [ 1257.586985][ T56] veth0_macvtap: left promiscuous mode [ 1257.742771][ T56] veth1_vlan: left promiscuous mode [ 1257.748330][ T56] veth0_vlan: left promiscuous mode [ 1258.009187][T15443] Bluetooth: hci4: command tx timeout [ 1258.559455][T15550] siw: device registration error -23 [ 1258.864064][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 1259.032892][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 1259.765682][T15558] loop6: detected capacity change from 0 to 512 [ 1259.795105][T15558] EXT4-fs: Ignoring removed bh option [ 1259.812914][T15558] EXT4-fs: inline encryption not supported [ 1259.861932][T15558] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 1260.046636][T15558] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 1260.149805][T15558] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1794: bg 0: block 248: padding at end of block bitmap is not set [ 1260.198150][T15558] loop6: lost filesystem error report for type 5 error -117 [ 1260.202283][T15558] Quota error (device loop6): write_blk: dquota write failed [ 1260.243923][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 1260.250534][ C0] EXT4-fs (loop6): last error at time 1778806466: ext4_validate_block_bitmap:441 [ 1260.268285][T15558] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 1260.283898][T15558] EXT4-fs error (device loop6): ext4_acquire_dquot:7034: comm syz.6.1794: Failed to acquire dquot type 1 [ 1260.297029][T15558] loop6: lost filesystem error report for type 5 error -28 [ 1260.316856][T15558] EXT4-fs (loop6): 1 truncate cleaned up [ 1260.342573][T15558] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 1260.578262][T15558] syz.6.1794 (15558) used greatest stack depth: 2728 bytes left [ 1260.589028][ T56] team0 (unregistering): Port device team_slave_1 removed [ 1260.657363][T14200] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 1260.678333][ T56] team0 (unregistering): Port device team_slave_0 removed [ 1260.680644][ T3233] Quota error (device loop6): do_check_range: Getting block 0 out of range 1-5 [ 1260.706622][ T3233] EXT4-fs error (device loop6): ext4_release_dquot:7070: comm kworker/u8:8: Failed to release dquot type 1 [ 1260.740261][ T3233] loop6: lost filesystem error report for type 5 error -117 [ 1261.290889][T15549] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1793'. [ 1261.307289][T15549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1261.539959][T15569] syz.6.1796 (15569): drop_caches: 2 [ 1261.540070][ T5226] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1261.553397][T13262] lo speed is unknown, defaulting to 1000 [ 1261.559286][T13262] syz2: Port: 1 Link DOWN [ 1263.478630][T15579] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1264.253212][T15601] loop3: detected capacity change from 0 to 256 [ 1264.867421][T15601] FAT-fs (loop3): Directory bread(block 64) failed [ 1264.874170][T15601] FAT-fs (loop3): Directory bread(block 65) failed [ 1264.881035][T15601] FAT-fs (loop3): Directory bread(block 66) failed [ 1264.887765][T15601] FAT-fs (loop3): Directory bread(block 67) failed [ 1264.965060][T15606] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1264.976817][T15601] FAT-fs (loop3): Directory bread(block 68) failed [ 1264.983561][T15601] FAT-fs (loop3): Directory bread(block 69) failed [ 1264.990414][T15601] FAT-fs (loop3): Directory bread(block 70) failed [ 1264.997094][T15601] FAT-fs (loop3): Directory bread(block 71) failed [ 1265.003930][T15601] FAT-fs (loop3): Directory bread(block 72) failed [ 1265.010652][T15601] FAT-fs (loop3): Directory bread(block 73) failed [ 1265.243975][T15608] siw: device registration error -23 [ 1266.827508][T15441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.868290][T15441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.903873][T15441] bridge_slave_0: entered allmulticast mode [ 1266.958631][T15441] bridge_slave_0: entered promiscuous mode [ 1267.074717][T15441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.109615][T15441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.182457][T15441] bridge_slave_1: entered allmulticast mode [ 1267.261577][T15441] bridge_slave_1: entered promiscuous mode [ 1267.883794][T15441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.956923][T15441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.358594][T15441] team0: Port device team_slave_0 added [ 1268.379361][T15441] team0: Port device team_slave_1 added [ 1268.728707][T15441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1268.735825][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1268.761962][T15441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1268.812246][T15646] syz.1.1809 (15646): drop_caches: 2 [ 1269.053017][T15441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.060161][T15441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1269.086272][T15441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.893820][T15441] hsr_slave_0: entered promiscuous mode [ 1269.953844][T15441] hsr_slave_1: entered promiscuous mode [ 1270.015285][T15441] debugfs: 'hsr0' already exists in 'hsr' [ 1270.021199][T15441] Cannot create hsr debugfs directory [ 1270.248750][ T5226] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1272.290640][T15443] Bluetooth: to_multiplier 0 < 10 [ 1274.401741][T15441] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1274.505943][T15443] Bluetooth: hci3: command 0x0406 tx timeout [ 1274.651036][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1274.660920][T15441] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1274.847261][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1274.866176][T15441] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1274.875143][T15715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1824'. [ 1274.921026][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1275.031385][T15441] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1275.199459][T15719] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1275.221627][T15441] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1275.742700][T15726] loop2: detected capacity change from 0 to 64 [ 1277.212386][T15441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.428279][T15441] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.542483][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.549966][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.618091][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.642962][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.239527][T15796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 1282.311109][T15796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1838'. [ 1283.354458][T15807] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1285.062814][T15824] siw: device registration error -23 [ 1287.091785][T15441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.644015][T15879] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 1290.697154][T15441] veth0_vlan: entered promiscuous mode [ 1290.890689][T15441] veth1_vlan: entered promiscuous mode [ 1291.321654][T15887] syz.1.1855 (15887): drop_caches: 2 [ 1291.360678][T15441] veth0_macvtap: entered promiscuous mode [ 1291.381085][T15441] veth1_macvtap: entered promiscuous mode [ 1291.639518][T15441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1292.186954][T15441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1292.201067][T15894] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 1292.376492][ T34] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.432573][ T148] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.482469][ T148] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1292.560822][ T148] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1294.915729][T15934] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 1296.936911][T15953] syz.2.1866 (15953): drop_caches: 2 [ 1300.576099][T16000] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1300.584982][T16000] ===================================================== [ 1300.610435][T16000] BUG: KMSAN: uninit-value in dvbdmx_release_ts_feed+0x198/0x290 [ 1300.618350][T16000] dvbdmx_release_ts_feed+0x198/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1300.624266][T16000] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 1300.634197][T16000] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 1300.640088][T16000] dvb_demux_do_ioctl+0x9a3/0xc80 [ 1300.645309][T16000] dvb_usercopy+0x263/0x500 [ 1300.652253][T16000] dvb_demux_ioctl+0x46/0x70 [ 1300.676379][T16000] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1300.682191][T16000] ia32_sys_call+0x2854/0x4360 [ 1300.687836][T16000] __do_fast_syscall_32+0x180/0x460 [ 1300.693326][T16000] do_fast_syscall_32+0x37/0x80 [ 1300.698363][T16000] do_SYSENTER_32+0x1f/0x30 [ 1300.703042][T16000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1300.709581][T16000] [ 1300.711975][T16000] Uninit was created at: [ 1300.716448][T16000] __alloc_frozen_pages_noprof+0x6fa/0x1000 [ 1300.741823][T16000] alloc_pages_mpol+0x328/0x860 [ 1300.748827][T16000] alloc_pages_noprof+0x101/0x290 [ 1300.755815][T16000] __vmalloc_node_range_noprof+0xab0/0x2cd0 [ 1300.762658][T16000] __vmalloc_noprof+0x128/0x1f0 [ 1300.767661][T16000] vmalloc_array_noprof+0x48/0x80 [ 1300.773787][T16000] dvb_dmx_init+0x121/0x930 [ 1300.779074][T16000] vidtv_bridge_probe+0x1b1f/0x2690 [ 1300.785592][T16000] platform_probe+0x213/0x370 [ 1300.808770][T16000] really_probe+0x4d5/0xe40 [ 1300.813545][T16000] __driver_probe_device+0x2fb/0x410 [ 1300.819001][T16000] driver_probe_device+0x70/0x8f0 [ 1300.824194][T16000] __driver_attach+0x541/0xaa0 [ 1300.830925][T16000] bus_for_each_dev+0x33b/0x580 [ 1300.836473][T16000] driver_attach+0x51/0x70 [ 1300.841089][T16000] bus_add_driver+0x54f/0xdb0 [ 1300.845968][T16000] driver_register+0x42e/0x6a0 [ 1300.850917][T16000] __platform_driver_register+0x65/0x80 [ 1300.872827][T16000] vidtv_bridge_init+0x73/0x100 [ 1300.877994][T16000] do_one_initcall+0x237/0xb30 [ 1300.882926][T16000] do_initcall_level+0x157/0x330 [ 1300.888046][T16000] do_initcalls+0x176/0x310 [ 1300.892692][T16000] do_basic_setup+0x22/0x30 [ 1300.897336][T16000] kernel_init_freeable+0x213/0x460 [ 1300.902704][T16000] kernel_init+0x2f/0x5e0 [ 1300.907218][T16000] ret_from_fork+0x20f/0x8d0 [ 1300.912049][T16000] ret_from_fork_asm+0x1a/0x30 [ 1300.916999][T16000] [ 1300.936116][T16000] CPU: 1 UID: 0 PID: 16000 Comm: syz.2.1876 Not tainted syzkaller #0 PREEMPT(full) [ 1300.945674][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1300.955851][T16000] ===================================================== [ 1300.963239][T16000] Disabling lock debugging due to kernel taint [ 1300.986412][T16000] Kernel panic - not syncing: kmsan.panic set ... [ 1300.992986][T16000] CPU: 0 UID: 0 PID: 16000 Comm: syz.2.1876 Tainted: G B syzkaller #0 PREEMPT(full) [ 1301.004205][T16000] Tainted: [B]=BAD_PAGE [ 1301.008439][T16000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1301.018615][T16000] Call Trace: [ 1301.021990][T16000] [ 1301.025005][T16000] __dump_stack+0x26/0x30 [ 1301.029496][T16000] dump_stack_lvl+0x50/0x1c0 [ 1301.034242][T16000] ? dump_stack+0x12/0x25 [ 1301.038707][T16000] dump_stack+0x1e/0x25 [ 1301.042996][T16000] vpanic+0x7b4/0x1430 [ 1301.047241][T16000] panic+0x15d/0x160 [ 1301.051342][T16000] kmsan_report+0x31a/0x320 [ 1301.056021][T16000] ? __msan_warning+0x1b/0x30 [ 1301.060847][T16000] ? dvbdmx_release_ts_feed+0x198/0x290 [ 1301.066553][T16000] ? dvb_dmxdev_filter_start+0x1187/0x1af0 [ 1301.072534][T16000] ? dvb_dmxdev_pes_filter_set+0x810/0x860 [ 1301.078513][T16000] ? dvb_demux_do_ioctl+0x9a3/0xc80 [ 1301.083875][T16000] ? dvb_usercopy+0x263/0x500 [ 1301.088705][T16000] ? dvb_demux_ioctl+0x46/0x70 [ 1301.093627][T16000] ? __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1301.099512][T16000] ? ia32_sys_call+0x2854/0x4360 [ 1301.104614][T16000] ? __do_fast_syscall_32+0x180/0x460 [ 1301.110152][T16000] ? do_fast_syscall_32+0x37/0x80 [ 1301.115340][T16000] ? do_SYSENTER_32+0x1f/0x30 [ 1301.120180][T16000] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1301.126872][T16000] ? irqentry_exit+0x7b/0x820 [ 1301.131703][T16000] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1301.138286][T16000] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1301.144519][T16000] ? sysvec_call_function_single+0x4f/0x90 [ 1301.150476][T16000] ? kmsan_get_metadata+0xf1/0x160 [ 1301.155841][T16000] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1301.162333][T16000] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1301.168561][T16000] ? _raw_spin_unlock_irq+0x31/0x50 [ 1301.173968][T16000] ? kmsan_get_metadata+0x146/0x160 [ 1301.179357][T16000] __msan_warning+0x1b/0x30 [ 1301.184027][T16000] dvbdmx_release_ts_feed+0x198/0x290 [ 1301.189578][T16000] dvb_dmxdev_filter_start+0x1187/0x1af0 [ 1301.195434][T16000] ? __pfx_dvbdmx_release_ts_feed+0x10/0x10 [ 1301.201478][T16000] dvb_dmxdev_pes_filter_set+0x810/0x860 [ 1301.207300][T16000] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1301.213540][T16000] dvb_demux_do_ioctl+0x9a3/0xc80 [ 1301.218747][T16000] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1301.224473][T16000] dvb_usercopy+0x263/0x500 [ 1301.229130][T16000] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1301.234883][T16000] ? kmsan_get_metadata+0xf1/0x160 [ 1301.240183][T16000] dvb_demux_ioctl+0x46/0x70 [ 1301.244974][T16000] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1301.250449][T16000] __ia32_compat_sys_ioctl+0x7f9/0x1270 [ 1301.256180][T16000] ? fpregs_restore_userregs+0x211/0x3b0 [ 1301.261996][T16000] ? kmsan_get_metadata+0xf1/0x160 [ 1301.267265][T16000] ? kmsan_get_metadata+0xf1/0x160 [ 1301.272549][T16000] ia32_sys_call+0x2854/0x4360 [ 1301.277490][T16000] __do_fast_syscall_32+0x180/0x460 [ 1301.282869][T16000] do_fast_syscall_32+0x37/0x80 [ 1301.287886][T16000] do_SYSENTER_32+0x1f/0x30 [ 1301.292551][T16000] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1301.299052][T16000] RIP: 0023:0xf704f00c [ 1301.303324][T16000] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1301.323073][T16000] RSP: 002b:00000000f543d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 1301.331622][T16000] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040146f2c [ 1301.339702][T16000] RDX: 00000000800000c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1301.347766][T16000] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1301.355822][T16000] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1301.363888][T16000] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1301.372015][T16000] [ 1301.375441][T16000] Kernel Offset: disabled [ 1301.379823][T16000] Rebooting in 86400 seconds..