last executing test programs: 8m12.77189083s ago: executing program 4 (id=333): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 8m12.590715002s ago: executing program 4 (id=336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000065c0)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}}, 0x8040) r1 = epoll_create1(0x0) epoll_create1(0x0) close(r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x58240, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x1b, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 8m11.278537399s ago: executing program 2 (id=340): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r5, &(0x7f00000044c0), 0x4000000000001c0, 0x0) 8m11.033652693s ago: executing program 4 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10681}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x20044002) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_CACHEINFO={0x14, 0x6, {0xf, 0x7fffffff, 0x9, 0x10}}]}, 0x40}}, 0x0) r6 = socket(0x10, 0x803, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 8m10.157272493s ago: executing program 2 (id=344): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x78) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m10.020012365s ago: executing program 4 (id=346): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xb, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x4}) 8m9.018945328s ago: executing program 4 (id=348): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) semctl$SEM_STAT(0x0, 0x3, 0x12, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) 8m7.347793279s ago: executing program 4 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000180)={[{@shortname_mixed}, {@numtail}, {@rodir}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$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") r4 = syz_io_uring_setup(0x1eae, &(0x7f0000000480)={0x0, 0x100000, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x1815, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 8m7.223235771s ago: executing program 32 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200400a0}, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) getsockopt$sock_int(r3, 0x1, 0x4, 0x0, &(0x7f0000000280)) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x4002, &(0x7f0000000180)={[{@shortname_mixed}, {@numtail}, {@rodir}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_lower}]}, 0x1, 0x227, &(0x7f0000001980)="$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") r4 = syz_io_uring_setup(0x1eae, &(0x7f0000000480)={0x0, 0x100000, 0x1}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x40, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r4, 0x1815, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) 8m5.941729746s ago: executing program 2 (id=357): socket(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x40) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) openat$ptmx(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, 0x0, 0x0) listen(r2, 0x0) socket$tipc(0x1e, 0x5, 0x0) 8m5.700451619s ago: executing program 2 (id=359): r0 = syz_open_dev$dri(&(0x7f0000000100), 0xb, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$afs(0x0, &(0x7f0000000200)='./file1\x00', 0x0, 0x88, 0x0) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, 0x0) ioctl$AUTOFS_IOC_READY(r2, 0x9360, 0x800000000000001) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000140)={0x4}) 8m5.354500163s ago: executing program 2 (id=361): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x1, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20840}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x2}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0xf}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 8m5.200556825s ago: executing program 2 (id=363): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCGETS2(r0, 0x5434, 0x0) syz_open_dev$video(0x0, 0x9, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x0, 0x80800) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000440)) bind$unix(r2, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000280)=0x200000) 8m4.726044701s ago: executing program 33 (id=363): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) ioctl$TCGETS2(r0, 0x5434, 0x0) syz_open_dev$video(0x0, 0x9, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = accept4$unix(0xffffffffffffffff, &(0x7f00000002c0)=@abs, 0x0, 0x80800) r3 = socket$xdp(0x2c, 0x3, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80087601, &(0x7f0000000440)) bind$unix(r2, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xe0100, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000280)=0x200000) 4m48.622013197s ago: executing program 3 (id=890): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x20000000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4m45.02348092s ago: executing program 3 (id=897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x3a9, &(0x7f0000000080)={0x0, 0x0, 0x800, 0x0, 0x10000}, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="021009420a0000002ba97000fddbdf25080012000400040000000000000000a74c1d6a800600320004040600000000000000000020010c0700000000000000000000000200"/80], 0x50}}, 0x2000c800) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{'fsc,ntext'}], [{@smackfsroot={'smackfsroot', 0x3d, '%[-^'}}]}) 4m43.863160591s ago: executing program 3 (id=901): syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') socket$isdn(0x22, 0x2, 0x26) epoll_create1(0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0xb) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x403, 0x6101, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x6811}, 0x2400c810) 4m43.258167286s ago: executing program 3 (id=904): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000006c0)={0xffff, 0x0, 0x0, 0x4001, 0x2}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x1001a, &(0x7f0000000580)={[{@user_xattr}, {@resuid={'resuid', 0x3d, 0xee01}}, {@min_batch_time={'min_batch_time', 0x3d, 0x4c3b8}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@data_journal}, {@i_version}]}, 0x1, 0x43e, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004100)={0x2020}, 0x2020) 4m39.992808006s ago: executing program 3 (id=921): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000140)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x4e23, 0x8004}, {@in=@dev, 0x0, 0x32}, @in=@remote, {0x327, 0x0, 0x0, 0x0, 0xfff}, {}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0x21}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8000}, 0x4880) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x1101000000000000, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000c0000000001a0000f7000000000000009ddd0ef2a3a1", @ANYRES32=0x1, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32], 0x48) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) splice(r4, 0x0, r2, 0x0, 0xf846, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0) 4m38.205833968s ago: executing program 3 (id=913): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 4m38.108361679s ago: executing program 34 (id=913): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, &(0x7f0000000840)=[{&(0x7f0000000040)='\b', 0x1}], 0x1}}], 0x1, 0x14018891) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 2m31.686332498s ago: executing program 7 (id=1201): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r2, r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2f}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m29.94924147s ago: executing program 7 (id=1205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, &(0x7f0000000000)={0x38}, 0x38, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendfile(r3, 0xffffffffffffffff, &(0x7f0000000000), 0x9) r4 = fsopen(&(0x7f0000000240)='pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) 2m28.674146237s ago: executing program 7 (id=1210): io_uring_setup(0x1581, &(0x7f0000000a40)={0x0, 0x2000000, 0x40, 0x1000, 0x3bd}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4008000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r2 = socket(0x40000000015, 0x5, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.37468834s ago: executing program 7 (id=1212): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x4, &(0x7f0000000340)={0x0, 0xf, 0x2}, &(0x7f0000000380)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r2, &(0x7f0000000000), 0x0) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYRES16, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693f"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000004fe8000000000000000000000000000bb4e200000000000000a0040"], 0xb8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m26.664743572s ago: executing program 7 (id=1219): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x20800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="44cb58a6ab3bd7581ddf805e668ef52be0b686b0bf41", 0x16, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000340)={0x29}, 0x8) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x2, 0xfff, 0x3, 0x7, 0x3, 0x80000001, 0x3af]}) writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) 2m25.329509889s ago: executing program 7 (id=1224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000640), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r3, 0x1) 2m8.043637678s ago: executing program 35 (id=1224): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000640), 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) shutdown(r3, 0x1) 56.275667807s ago: executing program 1 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init() openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/bus/input/devices\x00', 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2580, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000400000000600"], 0x48) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121140, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 53.443357864s ago: executing program 1 (id=1421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_getattr(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 51.242806211s ago: executing program 1 (id=1425): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socket$netlink(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 48.629918604s ago: executing program 1 (id=1431): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) 45.640827332s ago: executing program 1 (id=1438): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xa00008, &(0x7f0000000140)={[{@min_batch_time={'min_batch_time', 0x3d, 0xd}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = inotify_init1(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_add_watch(r0, &(0x7f00000000c0)='.\x00', 0x4000000e) r4 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xfffffffffffffffe, 0x0, {{0x3, 0x1, 0x5, 0x6, 0x5, 0x1, {0x1, 0x2d203ae5, 0x6, 0x1, 0x2, 0xd615, 0x5, 0x800001, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3fa, 0x1}}, {0x0, 0x1f}}}, 0xa0) fsopen(0x0, 0x0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 42.704712099s ago: executing program 1 (id=1445): ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000140)={0x1, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) 27.482727712s ago: executing program 36 (id=1445): ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000140)={0x1, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000080)=0x14) 15.351985676s ago: executing program 8 (id=1504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0x19, 0x0, &(0x7f0000000240)) r0 = memfd_secret(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"/773], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r1, r0, 0x2f, 0x4608, @void}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') read$eventfd(r2, &(0x7f0000000080), 0x51) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local, 'gre0\x00'}}, 0x1e) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) finit_module(0xffffffffffffffff, &(0x7f0000000040)=';,\']^)\x00', 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001100)={&(0x7f00000010c0)='mm_page_free\x00'}, 0x10) write$binfmt_aout(r3, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 14.24133774s ago: executing program 8 (id=1508): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x8f) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r2, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r3], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2, {0xffe0}, {}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x39, 0x1}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x4004140}, 0x0) 14.106942392s ago: executing program 0 (id=1510): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xfffffd3d, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) getsockopt(r6, 0x8, 0x4, &(0x7f0000000340)=""/160, &(0x7f00000001c0)=0xa0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13.155612154s ago: executing program 8 (id=1511): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 13.061331325s ago: executing program 0 (id=1513): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05030500d3fc030000004788", 0xc, 0x4, &(0x7f0000000140)={0x11, 0x6558, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300), &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, &(0x7f00000001c0)=[0x39e], 0x2) 10.509346797s ago: executing program 8 (id=1516): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) close(0xffffffffffffffff) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x490, 0x320, 0x6affffff, 0x3403000b, 0x320, 0x7, 0x3f8, 0x230, 0x230, 0x3f8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'veth1_to_team\x00'}, 0x0, 0x2d8, 0x320, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}]}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4f0) 8.215681366s ago: executing program 5 (id=1527): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$drirender128(0xffffffffffffff9c, 0x0, 0x20000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xc8) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000180)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0xbb, @empty}}, 0x24) io_submit(0x0, 0x0, 0x0) 7.9601588s ago: executing program 8 (id=1519): syz_usb_connect(0x0, 0x6a, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlink(&(0x7f0000000440)='./file1\x00') setns(r1, 0x8020000) 7.95428858s ago: executing program 0 (id=1529): io_uring_setup(0x1cb2, &(0x7f0000000180)={0x0, 0xb157, 0x2, 0x0, 0x28c}) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0) 7.591598614s ago: executing program 6 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bond0\x00'}]}]}]}], {0x14, 0x10}}, 0xd8}}, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40305839, &(0x7f0000000240)=0x28084) 7.13851968s ago: executing program 5 (id=1522): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) r4 = memfd_create(&(0x7f0000000540)='\xdd#\x00\xe6Z\x00\xafq%\xa5\x83\xa6#\r\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\xf9\xff\xff\xff\x00\x17?$^\xe1Ob\xe1Y\x03\x00\x00\x00\x00\x00\x00\x00\xce\xe5\x19THP\xf4O\xe2\x9f\xd9\xae\xcf>/\xdc\xaa<\x96\xedE>{\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0\xb04\xb7T5\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\xdc\n\xcbC\x15\xfcp\x11\xdai\f{\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\x82t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\x87\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9w\xd2\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T[\xb7\xa4\xb0\bk&\xede\x8b\xc2\xb2\xcd\xef\xcf\x0fE\xc5\x86]\xc0]}\xdd^\xf6&\x16>c\x9d\x9c\xc9\x01\x04\x00\x00\xe9h\xbd\x10p\x8f\x14\x1f2\"\x1b;\xfda\x19\x8bo^\x96\x9a~Q\xce\x95\x02\xb8e\xbbG\xb0V[\xfe\x80\x94$y\x8a\\@\xa9^\x95!IJ\xcf\xf7\xafoX/qG\x97ITp\x01\xae\f\"n;%\xecT\xf6\xb6\xbf;\xde\xec\xb4z\xaa\xd9%\xa5;wy~\xcb\x9a\xd7\r\xe2\xcd\xf0C\x16\xbf0\x89\xb4\xf5\x86\xf3\x99\x9bq\xd3\x15\xe1:\x86\xe4\x14\x805K\xcf\xf6\xda\xd1A>\xf4r>\xfdyAH\x0f\x00'/426, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000000), 0x0, 0x0, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000080), &(0x7f0000000040)=@md5={0x1, "d70ec82c696148625acfe64606069033"}, 0xfeb5, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6.231511622s ago: executing program 6 (id=1523): fstatfs(0xffffffffffffffff, &(0x7f0000000080)=""/108) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000180)=[{0x0}], 0x1) syz_open_dev$loop(0x0, 0x9, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = add_key$keyring(&(0x7f00000085c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000008540), &(0x7f0000008580)={'syz', 0x3}, 0x0, 0x0, r2) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0x46) keyctl$unlink(0x9, r3, r2) 6.061747214s ago: executing program 0 (id=1524): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x35, 0x5, @tid=0xffffffffffffffff}, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$hfs(&(0x7f0000000300), &(0x7f0000000000)='.\x02\x00', 0x4810, &(0x7f0000000180)=ANY=[], 0x3, 0x2e7, &(0x7f0000001900)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x40) 4.585534102s ago: executing program 0 (id=1525): socket$inet6(0xa, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ftruncate(0xffffffffffffffff, 0xffff) get_mempolicy(0x0, 0x0, 0x1000, &(0x7f0000ff9000/0x4000)=nil, 0x3) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000080)="b1", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(r3, &(0x7f0000000100)=[{0x0}], 0x1) write$UHID_SET_REPORT_REPLY(r3, &(0x7f00000007c0)=ANY=[], 0xffe0) 4.562516433s ago: executing program 6 (id=1526): socket$kcm(0x2b, 0x1, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x0, 0xc4fc9e906872338b, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r2, @ANYBLOB="05005b"], 0x24}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 4.559622953s ago: executing program 5 (id=1528): r0 = socket(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x800, 0x2, 0x167}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) sched_setattr(0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0) 4.542818603s ago: executing program 8 (id=1530): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a68765a6c733a8eb6df2944f6c2ef07c022", 0x1f, 0xfffffffffffffffe) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r2, @ANYBLOB="ebffffffffffffff280012800b00010065727370616e000018000280040012000500163001000000080015"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r3, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.031345412s ago: executing program 5 (id=1531): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200"], 0x48) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @ioapic={0xf000, 0x100, 0x1ff, 0x6, 0x0, [{0xff, 0xbd, 0x5, '\x00', 0x81}, {0x3, 0x71, 0x5, '\x00', 0xc7}, {0xd5, 0xc4, 0x6, '\x00', 0x68}, {0x9, 0xf9, 0x4, '\x00', 0x72}, {0x9, 0xfc, 0x10, '\x00', 0x81}, {0xd, 0x8, 0x3, '\x00', 0x8}, {0x9, 0x20, 0x10, '\x00', 0xed}, {0x0, 0x4, 0x5, '\x00', 0xa1}, {0x3, 0x2, 0x7, '\x00', 0x8}, {0x8, 0xe1, 0x7c, '\x00', 0x8}, {0x1, 0xff, 0x2, '\x00', 0x2}, {0xfa, 0x6, 0x10, '\x00', 0xca}, {0x6, 0xe, 0xc, '\x00', 0x7}, {0x3, 0x5, 0x1, '\x00', 0xf0}, {0x7, 0x7, 0xfa, '\x00', 0x9}, {0xff, 0x8, 0x5, '\x00', 0x8f}, {0x80, 0x9, 0x2, '\x00', 0x8}, {0x6, 0x7, 0x8, '\x00', 0x1}, {0x8, 0x3, 0x9, '\x00', 0x7}, {0x5, 0xd, 0xa2, '\x00', 0x2}, {0x1, 0x0, 0x7, '\x00', 0x2}, {0x2, 0x0, 0x7, '\x00', 0x10}, {0x10, 0xf7, 0x8, '\x00', 0x7f}, {0x5, 0x80, 0x8d, '\x00', 0x8}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x0, 0x9, 0x0, 0x5, 0x4, 0xbdb], 0x1, 0x3c4210}) r3 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) syz_open_dev$usbfs(&(0x7f0000000140), 0x5, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000240)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x5, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.030241172s ago: executing program 0 (id=1532): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000180)={0x2020}, 0x2024) 3.010159982s ago: executing program 5 (id=1533): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0xa00004, &(0x7f0000000440)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@uid}, {}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@mode={'mode', 0x3d, 0x8}}, {@uid}, {@adinicb}, {@gid_forget}, {@lastblock={'lastblock', 0x3d, 0x7}}, {@gid_forget}, {@uid}]}, 0x1, 0xc4d, &(0x7f0000000f40)="$eJzs3U9sHNd9B/DfGy3FldxWTJwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQwWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xr546nTaZsOhh9AYAOCBuDz2tVNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+/LzQ+e7eak98wH199pn49WxKxcbL83enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvnZr8vr1hcaZ585u2nx74L3+J44PXBh65uTT3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORopnv/+z1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnz32Fq6mt/6UZ2HL1UDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/ijilUjx87dPxLV8n6nuNV+MeKXMH0a8WeaLEan8YpyLeHeb7xGPploU8efl9b+wliar+0H3vnLp642vzlyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcRnIsXL//ZH1bjiqMalH7sw9PsDv9w7ZvypD9lPWfa5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vv2wGwMAAAAAAAAAAAAAAAAAAPCxVsRPI8UL75xIy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIt6PFN/55lqKFBHNiIno5Er/w24dAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDqT0X8IFI0/qB5Z10tIlL1b8eJ8pdz0Txc5iejOVTmi9G8mLNVZa357YfQfnanLxXxk0jRX3/rzgXP17+v8+nO1yDe/NbGp8/WOnmou3Hgvf4njh+7MDTy+ad2Wk7bNWDwUnvm1u3G+PDIyFjP6lo++id71g3k4xZ703UiYuH1N15rTU9Pzd//QvkVuM/q3Su5i6M/yIVUe2SaamEvFqJ2IJrxcPq+Sf1h3JzYd+Xz/91I8dvv/Hv3gd95/tfjlzqf7jzh4xd/svH8f2Hrju7x+V/bWi8//8snwXbP/yd71r2QfzfSV4uoL96c6zseUV94/Y2T7ZutG1M3pmbOnTr1laGhr5w91Xc4on69PT3Vs7QnpwsAAAAAAAAAAAAAAADgwUlF/G6kaP1kLTUi4nY1XmvgwtAzJ58+FIeq8Vabxm2/OnblYuOl2Ztz81MLC1OTjfGZ9rXZyal7PVy9Gu41PjyyL535UEf2uf1H6i/Nzr0+377xh4vbbj9av3h1YXG+dW37zXEkiohm75rBqsHjwyNVo6fbrZmq6ui2g+k/ur5UxH9EimvnGukLeV0e/791hP+m8f9LW3e0h+P/P390Y/zfJ3qKlsdMqYhfRIrf+oun4gtVO4/GXecsl/ubSDF4/nO5XBwuy3Xb0HmvQGdkYFn2fyLFP7y/uWx3POSTG2VPf6ST+wgor/+xSPGDP/te/Hpet/n9D9tf/6Nbd7RP73/4VM+6o5veV7DrrpOv/8lI8eKTb8VvVGv+7wPf/9F9Y8OJTuGN93Ps0/X/1Z51A/m4v7lXnQcAAAAAAAAAAHiE9aUi/jZS/Giklp7P6+7l7/9Nbt3RPv39r0/3rJvcm/mKPnRh1ycVAAAAAA6IvlTETyPFjcW37oyh3jz+u2f85+9sjP8cTlu2Vn/O9yvVewP28s//eg3k407svtsAAAAAAAAAAAAAAAAAAABwoKRUxPN5PvWJajz/5I7zqa9Eipf/69lcLh0vy3XngR+ofq1fnp05eXF6erYei62r01ONsbnWtamy7qcixdpffy7XLar51bvzzXfmeN+Yi30+Uoz8XbdsZy727tzknfnA6+vrEafLsp+IFP/595vL5qmp89zR1X7PlGX/KlJ845+2L3t8o+zZsuz3IsWPv9Holj1alu2+H/XTG2WfuzZb7MNVAQAAAAAAAAAAAAAAAAAA4OOmLxXxp5Hiv28u3xnLn+f/7+v5WHnzWz3z/W9xu5rnf6Ca/3+n5fuZ/796r8DSTkcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDHU4oi3ogUc5fX0kp/+bmjfqk9c+v2+PDI9tWOpKrmoap8+VM/febsuS8/P3S+mx9cf699Jl4du3Kx8dLszbn5qYWFqcnG+Ez72uzk1D3vYbf1txqsTkDj5mu3Jq9fX2icee7sps23B97rf+L4wIWhZ04+3S07PjwyMtZTptZ330e/S9ph/eEo4i8jxbPf/1n6UX9EEbs/Fx/y3dlvR6pODFadGB8eqToy3W7NLJYbR7snooho9FRqds/RA7gWu9KMWCqbXzZ4sOze2FxrvnV1eqox2ppfbC+2Z2dGU6e1ZX8aUcT5FLEcEav9d++uL4p4LVJ899ha+uf+iEPd8/Cly2NfO3Vm53YU+9jHe1C2s9EXsVw8AtfsAOuPIv4xUvz87RPxL/0Rtej8xBcjXinzhxFvRud6p/KLcS7i3W2+RzyaalHE/5bX/8Jaeru/vB907yuXvt746sz12Z6y3fvKI/98eJAO+L2pHkX8uLrjr6V/9d81AAAAAAAAAAAAAAAAwAFSxK9FihfeOZGq8cF3xhS3Z240rrSuTneG9XXH/nXHTK+vr683UiebOSdyLuVczrmSczVnFLl+zmaZ9fX1ifx5KedyzpWcqznjUK6fs5lzIudSzuWcKzlXc0Yt18/ZzDmRcynncs6VnKs544CM3QMAAAAAAAAAAAAAAAAAAB4vRfVPiu98cy2t93fml56ITq6YD/Sx9/8BAAD//9kg9g0=") r0 = syz_io_uring_setup(0xd, &(0x7f0000000200), &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4) io_uring_enter(r0, 0x19bc, 0x0, 0x0, 0x0, 0x0) 2.862461164s ago: executing program 6 (id=1534): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') r1 = syz_open_dev$dri(&(0x7f0000000000), 0x5, 0x20800) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r4 = socket(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r4, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000000)=0x18ff9) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)="44cb58a6ab3bd7581ddf805e668ef52be0b686b0bf41", 0x16, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000340)={0x29}, 0x8) ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[0x2, 0xfff, 0x3, 0x7, 0x3, 0x80000001, 0x3af]}) writev(r0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) 2.722116526s ago: executing program 6 (id=1535): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r3 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r3, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe006fffe0000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 159.355998ms ago: executing program 5 (id=1536): io_uring_setup(0x1cb2, &(0x7f0000000180)={0x0, 0xb157, 0x2, 0x0, 0x28c}) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) syz_emit_ethernet(0x42, &(0x7f0000000a40)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @udp={0x2, 0x6, "a341d0", 0x8, 0x11, 0x1, @private2, @dev={0xfe, 0x80, '\x00', 0x2e}, {[], {0x4e20, 0x4e23, 0x8}}}}}}, 0x0) 0s ago: executing program 6 (id=1537): bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) kernel console output (not intermixed with test programs): e_1) entered disabled state [ 197.179780][ T5550] device bridge_slave_1 entered promiscuous mode [ 197.415715][ T5550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.846945][ T5550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.509082][ T5600] lo speed is unknown, defaulting to 1000 [ 198.604801][ T5550] team0: Port device team_slave_0 added [ 198.611113][ T5600] lo speed is unknown, defaulting to 1000 [ 198.649713][ T5550] team0: Port device team_slave_1 added [ 198.883276][ T1109] Bluetooth: hci1: command 0x040f tx timeout [ 199.643299][ T5550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.675221][ T5550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.720859][ T1109] Bluetooth: hci2: command 0x040f tx timeout [ 199.739273][ T5550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.805773][ T5550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.812757][ T5550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.883220][ T5550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.904829][ T5534] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 199.914596][ T5534] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 199.943245][ T5534] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 200.019243][ T5550] device hsr_slave_0 entered promiscuous mode [ 200.026355][ T5550] device hsr_slave_1 entered promiscuous mode [ 200.043295][ T5550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 200.050880][ T5550] Cannot create hsr debugfs directory [ 200.057084][ T5534] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 200.320853][ T5534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.359010][ T5534] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.370273][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 200.378981][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.437756][ T4389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.461252][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 200.471947][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.481107][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.488362][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.498669][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 200.509140][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.518170][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.525295][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.553598][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 200.564517][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 200.596527][ T4389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.609048][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 200.625900][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 200.646532][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.669819][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.684855][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.703253][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.711908][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.743836][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.778616][ T5534] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.819684][ T4389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.832822][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.842553][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.892233][ T4389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.022511][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.033645][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.053998][ T5534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.070310][ T5550] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 201.099854][ T5550] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 201.163833][ T5550] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 201.275890][ T5550] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 201.463092][ T5550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.479903][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 201.491808][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 201.510878][ T5550] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.583752][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 201.592916][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 201.605252][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.612333][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.631713][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 201.641921][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 201.657977][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.665104][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.677928][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 201.749902][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 201.758449][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.766884][ T5622] Bluetooth: hci2: command 0x0419 tx timeout [ 201.773025][ T5622] Bluetooth: hci1: command 0x0419 tx timeout [ 201.777442][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.788023][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 201.797861][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 201.808421][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 201.819069][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 201.829457][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 201.838918][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 201.886203][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 201.896536][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 201.911100][ T5550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 201.924220][ T5550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 201.938505][ T5534] device veth0_vlan entered promiscuous mode [ 201.949590][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 201.958347][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 201.967234][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.976351][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 202.024629][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 202.036457][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 202.081378][ T5534] device veth1_vlan entered promiscuous mode [ 202.111354][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 202.131000][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 202.140110][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.166303][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.178262][ T5534] device veth0_macvtap entered promiscuous mode [ 202.214152][ T5534] device veth1_macvtap entered promiscuous mode [ 202.227949][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 202.237438][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 202.246528][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 202.254443][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 202.272105][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.284125][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.297548][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.308730][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.319050][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.330409][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.341489][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.352655][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.362976][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.373828][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.385761][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.399781][ T5550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.425395][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 202.440120][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 202.469879][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.493608][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.513158][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.533154][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.548078][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.559100][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.569764][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.580852][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.591179][ T5534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.602311][ T5534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.614277][ T5534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.639561][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 202.649003][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 202.702251][ T5534] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.719350][ T5534] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.728597][ T5534] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.737690][ T5534] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.901532][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 202.910995][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 202.999895][ T4432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.017937][ T5550] device veth0_vlan entered promiscuous mode [ 203.026428][ T4432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.035880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.044608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.060794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.069352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.077975][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.102032][ T5550] device veth1_vlan entered promiscuous mode [ 203.123057][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.134592][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.147429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 203.178433][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 203.252425][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 203.270383][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 203.280599][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 203.293517][ T5550] device veth0_macvtap entered promiscuous mode [ 203.305509][ T5550] device veth1_macvtap entered promiscuous mode [ 203.382399][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.424372][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.454053][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.491066][ T5689] syz.5.355 sent an empty control message without MSG_MORE. [ 203.520897][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.548997][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.568824][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.628053][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.639142][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.649552][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.660258][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.671233][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.686671][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.714845][ T5550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.006340][ T4389] device hsr_slave_0 left promiscuous mode [ 204.060001][ T4389] device hsr_slave_1 left promiscuous mode [ 204.102705][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.149839][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.380540][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.388882][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.411630][ T4389] device bridge_slave_1 left promiscuous mode [ 204.420190][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.475179][ T4389] device bridge_slave_0 left promiscuous mode [ 204.491090][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.512135][ T4389] device veth1_macvtap left promiscuous mode [ 204.518854][ T4389] device veth0_macvtap left promiscuous mode [ 204.525876][ T4389] device veth1_vlan left promiscuous mode [ 204.532001][ T4389] device veth0_vlan left promiscuous mode [ 204.971303][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 204.984398][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 204.999661][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.016398][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.087810][ T4389] bond0 (unregistering): Released all slaves [ 205.175750][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 205.196214][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 205.216675][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 205.230420][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 205.242804][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.280941][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.293523][ T5697] ipt_ECN: cannot use operation on non-tcp rule [ 205.304373][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.381013][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.415079][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.446883][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.493309][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.503956][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.514523][ T5550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.525137][ T5550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.546634][ T5550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.576521][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 205.998914][ T5697] loop0: detected capacity change from 0 to 512 [ 206.422280][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.438308][ T5550] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.447593][ T5550] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.456423][ T5550] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.473178][ T5550] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.497842][ T5709] lo speed is unknown, defaulting to 1000 [ 206.539217][ T5697] EXT4-fs (loop0): Unrecognized mount option "dont_hash" or missing value [ 206.565621][ T5709] lo speed is unknown, defaulting to 1000 [ 206.875336][ T1185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.894326][ T1185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.971571][ T5717] netlink: 76 bytes leftover after parsing attributes in process `syz.0.381'. [ 206.981208][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.021201][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.043045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.137214][ T5721] loop1: detected capacity change from 0 to 16 [ 208.417619][ T5721] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 208.489573][ T5721] cramfs: wrong endianness [ 208.694181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.396994][ T5623] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 211.353354][ T5623] usb 2-1: Using ep0 maxpacket: 8 [ 211.613396][ T5623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.653973][ T5623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 211.723167][ T5623] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 211.735645][ T26] audit: type=1326 audit(1745492074.576:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 211.788531][ T5623] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 211.991688][ T5623] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 212.021625][ T26] audit: type=1326 audit(1745492074.576:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 212.082338][ T5623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.208642][ T5768] loop5: detected capacity change from 0 to 2048 [ 212.219882][ T26] audit: type=1326 audit(1745492074.576:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 212.513531][ T5623] usb 2-1: can't set config #1, error -71 [ 212.670620][ T26] audit: type=1326 audit(1745492074.576:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 212.718626][ T5623] usb 2-1: USB disconnect, device number 3 [ 212.956680][ T26] audit: type=1326 audit(1745492074.576:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 212.984979][ T26] audit: type=1326 audit(1745492074.576:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 213.007173][ T26] audit: type=1326 audit(1745492074.576:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 213.029726][ T26] audit: type=1326 audit(1745492074.576:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 213.051800][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.062196][ T26] audit: type=1326 audit(1745492074.576:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 213.084317][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.087801][ T5768] loop5: p1 < > p3 [ 213.093426][ T26] audit: type=1326 audit(1745492074.576:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5761 comm="syz.0.396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 213.116876][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.202774][ T5780] netlink: 'syz.0.400': attribute type 16 has an invalid length. [ 213.239082][ T5768] loop5: p3 size 134217728 extends beyond EOD, truncated [ 213.265289][ T5780] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.400'. [ 213.592569][ T5796] loop0: detected capacity change from 0 to 1024 [ 213.609691][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 213.649166][ T4458] udevd[4458]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 213.745164][ T5796] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 223.664347][ T5902] loop3: detected capacity change from 0 to 16 [ 224.592816][ T5904] lo speed is unknown, defaulting to 1000 [ 224.599702][ T5904] lo speed is unknown, defaulting to 1000 [ 225.442758][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 225.442775][ T26] audit: type=1326 audit(1745492088.276:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5892 comm="syz.5.425" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f892b8aa969 code=0x0 [ 225.514023][ T5902] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 225.524589][ T5902] cramfs: wrong endianness [ 225.872721][ T5918] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 227.519868][ T5940] loop3: detected capacity change from 0 to 512 [ 227.612889][ T5940] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 227.689268][ T5940] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 227.753944][ T5940] EXT4-fs (loop3): 1 truncate cleaned up [ 227.759720][ T5940] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,errors=remount-ro,quota,. Quota mode: writeback. [ 227.841978][ T26] audit: type=1804 audit(1745492090.676:49): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.434" name="/newroot/91/file2/bus" dev="loop3" ino=18 res=1 errno=0 [ 227.865287][ T5956] nftables ruleset with unbound chain [ 227.964963][ T26] audit: type=1800 audit(1745492090.716:50): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.434" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 228.174529][ T4387] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 228.673327][ T4387] usb 6-1: config 7 has an invalid interface number: 101 but max is 0 [ 228.684815][ T4387] usb 6-1: config 7 has no interface number 0 [ 228.819430][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.434'. [ 228.863467][ T4387] usb 6-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 228.893972][ T4387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.902011][ T4387] usb 6-1: Product: syz [ 228.906225][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.906285][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.934662][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.158170][ T4387] usb 6-1: Manufacturer: syz [ 229.200991][ T4387] usb 6-1: SerialNumber: syz [ 230.386850][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.795364][ T5989] xt_hashlimit: invalid rate [ 230.825599][ T5989] netlink: 136 bytes leftover after parsing attributes in process `syz.6.442'. [ 230.943079][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 231.969090][ T6002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.815355][ T4387] as10x_usb: device has been detected [ 235.822200][ T4387] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 235.872433][ T4387] usb 6-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 237.049402][ T6037] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 237.533631][ T4387] as10x_usb: error during firmware upload part1 [ 237.542463][ T4387] Registered device Elgato EyeTV DTT Deluxe [ 237.636071][ T4387] usb 6-1: USB disconnect, device number 2 [ 237.877340][ T6040] loop0: detected capacity change from 0 to 512 [ 237.885290][ T6039] loop5: detected capacity change from 0 to 512 [ 237.997484][ T6039] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 238.022070][ T4387] Unregistered device Elgato EyeTV DTT Deluxe [ 238.027869][ T4387] as10x_usb: device has been disconnected [ 238.090011][ T6039] EXT4-fs (loop5): 1 truncate cleaned up [ 238.113290][ T6039] EXT4-fs (loop5): mounted filesystem without journal. Opts: bsdgroups,noload,auto_da_alloc,,errors=continue. Quota mode: none. [ 238.136057][ T4389] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.149462][ T6040] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 238.215729][ T6040] ext4 filesystem being mounted at /95/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 238.221436][ T26] audit: type=1800 audit(1745492101.056:51): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.455" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 238.276895][ T4389] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.294736][ T6040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.452'. [ 238.479455][ T4389] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.484885][ T6039] EXT4-fs warning (device loop5): __ext4fs_dirhash:270: inode #2: comm syz.5.455: Siphash requires key [ 238.621776][ T4389] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.673565][ T6063] loop3: detected capacity change from 0 to 4096 [ 238.832102][ T6063] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 238.970794][ T6068] loop6: detected capacity change from 0 to 2048 [ 239.140771][ T6063] fs-verity: sha256 using implementation "sha256-avx2" [ 239.548270][ T6068] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,auto_da_alloc,nojournal_checksum,norecovery,auto_da_alloc,noquota,data_err=abort,grpid,grpjquota=,nouid32,grpid,,errors=continue. Quota mode: none. [ 239.770825][ T6063] fs-verity (loop3, inode 16): Error -4 building Merkle tree [ 240.032871][ T6067] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.462: bg 0: block 234: padding at end of block bitmap is not set [ 240.054662][ T6087] loop0: detected capacity change from 0 to 512 [ 240.240877][ T6087] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 240.278321][ T6087] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 240.455932][ T6106] loop6: detected capacity change from 0 to 256 [ 240.493339][ T4211] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 240.554562][ T6105] netlink: 'syz.1.469': attribute type 3 has an invalid length. [ 240.734121][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 240.908920][ T4211] usb 4-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 240.928428][ T4211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.974132][ T4211] usb 4-1: config 0 descriptor?? [ 241.460745][ T4211] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 241.501373][ T4211] hid-led 0003:04D8:F372.0002: unknown main item tag 0x0 [ 241.609230][ T4211] hid-led 0003:04D8:F372.0002: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.3-1/input0 [ 242.369515][ T4211] hid-led 0003:04D8:F372.0002: Greynut Luxafor initialized [ 242.666977][ T4211] usb 4-1: USB disconnect, device number 4 [ 242.684655][ T4387] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 242.698537][ T21] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 242.707777][ T21] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 242.717292][ T21] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 242.766516][ T21] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 242.783417][ T6159] --map-set only usable from mangle table [ 242.927389][ T21] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 243.054375][ T21] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 243.188624][ T21] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 243.399730][ T21] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 243.440079][ T21] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 243.484843][ T21] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 243.552957][ T4387] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 243.574753][ T26] audit: type=1326 audit(1745492106.416:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6998f70969 code=0x7ffc0000 [ 243.671629][ T4213] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 243.689104][ T4213] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 243.701159][ T6174] loop6: detected capacity change from 0 to 128 [ 243.734625][ T4213] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 243.764251][ T4387] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 243.779877][ T4389] device hsr_slave_0 left promiscuous mode [ 243.788294][ T4387] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 243.806248][ T26] audit: type=1326 audit(1745492106.486:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6998f70969 code=0x7ffc0000 [ 243.847101][ T21] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 243.926115][ T6174] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 243.928778][ T26] audit: type=1326 audit(1745492106.486:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.6.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6998f70969 code=0x7ffc0000 [ 243.958049][ T4389] device hsr_slave_1 left promiscuous mode [ 244.810576][ T6178] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 244.908237][ T6178] FAT-fs (loop6): Filesystem has been set read-only [ 245.063519][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.071012][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.408314][ T4389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.610967][ T4389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.816669][ T4389] device bridge_slave_1 left promiscuous mode [ 245.822923][ T4389] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.860223][ T4389] device bridge_slave_0 left promiscuous mode [ 245.866576][ T4389] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.998263][ T4389] device veth1_macvtap left promiscuous mode [ 246.019793][ T4389] device veth0_macvtap left promiscuous mode [ 247.045844][ T4389] team0 (unregistering): Port device team_slave_1 removed [ 247.283028][ T4389] team0 (unregistering): Port device team_slave_0 removed [ 247.306425][ T4389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.981618][ T4389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.186163][ T4389] bond0 (unregistering): Released all slaves [ 249.062754][ T5550] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 250.972965][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.5.496'. [ 251.942865][ T6268] netlink: 120 bytes leftover after parsing attributes in process `syz.6.504'. [ 251.960337][ T6265] device netdevsim0 entered promiscuous mode [ 252.008777][ T6265] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 252.038774][ T6268] Invalid option length (1047411) for dns_resolver key [ 252.469193][ T6279] loop6: detected capacity change from 0 to 2048 [ 254.539840][ T26] audit: type=1326 audit(1745492117.376:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 254.606387][ T6279] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.616982][ T6294] loop0: detected capacity change from 0 to 256 [ 254.668451][ T26] audit: type=1326 audit(1745492117.386:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 254.707841][ T6296] cgroup: Unknown subsys name 'obj_role' [ 254.816150][ T26] audit: type=1326 audit(1745492117.466:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.056198][ T26] audit: type=1326 audit(1745492117.466:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.133388][ T26] audit: type=1326 audit(1745492117.466:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.155711][ T26] audit: type=1326 audit(1745492117.466:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.217723][ T26] audit: type=1326 audit(1745492117.466:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.444490][ T26] audit: type=1326 audit(1745492117.466:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.485251][ T26] audit: type=1326 audit(1745492117.466:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 255.527286][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.594702][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.574894][ T26] audit: type=1326 audit(1745492117.476:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6290 comm="syz.1.511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 256.689638][ T6322] loop1: detected capacity change from 0 to 512 [ 257.574260][ T6322] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,quota,,errors=continue. Quota mode: writeback. [ 257.701756][ T6322] ext4 filesystem being mounted at /110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 257.975377][ T6338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.517'. [ 259.294520][ T4213] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 260.623867][ T4213] usb 7-1: Using ep0 maxpacket: 8 [ 261.150576][ T6385] lo speed is unknown, defaulting to 1000 [ 261.158332][ T6385] lo speed is unknown, defaulting to 1000 [ 262.183275][ T4213] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 262.192552][ T4213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.288098][ T6398] netlink: 256 bytes leftover after parsing attributes in process `syz.0.530'. [ 263.118151][ T4213] usb 7-1: config 0 descriptor?? [ 263.143325][ T4213] usb 7-1: can't set config #0, error -71 [ 263.153342][ T4213] usb 7-1: USB disconnect, device number 2 [ 264.238600][ T6404] loop3: detected capacity change from 0 to 512 [ 264.378958][ T6404] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000004739,inode_readahead_blks=0x0000000000000800,norecovery,,errors=continue. Quota mode: writeback. [ 264.433288][ T6404] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 265.741764][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 265.837281][ T6421] siw: device registration error -23 [ 266.098975][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 266.098990][ T26] audit: type=1326 audit(1745492128.936:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 266.896343][ T26] audit: type=1326 audit(1745492129.026:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 267.019512][ T26] audit: type=1326 audit(1745492129.026:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 267.026130][ T6440] loop1: detected capacity change from 0 to 1024 [ 267.085539][ T6454] loop5: detected capacity change from 0 to 512 [ 267.160467][ T26] audit: type=1326 audit(1745492129.026:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 267.384835][ T26] audit: type=1326 audit(1745492129.046:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 267.413432][ T26] audit: type=1326 audit(1745492129.056:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 267.433045][ T6440] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 267.445131][ T6454] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 267.453060][ T6454] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 267.463304][ T6454] System zones: 0-1, 15-15, 18-18, 34-34 [ 267.464505][ T6454] EXT4-fs (loop5): orphan cleanup on readonly fs [ 267.464593][ T6454] Quota error (device loop5): v2_read_header: Failed header read: expected=8 got=0 [ 267.464662][ T6454] EXT4-fs warning (device loop5): ext4_enable_quotas:6439: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 267.464691][ T6454] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 267.495197][ T6454] EXT4-fs error (device loop5): ext4_orphan_get:1427: comm syz.5.545: bad orphan inode 16 [ 268.113143][ T26] audit: type=1326 audit(1745492129.516:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 268.207360][ T6454] ext4_test_bit(bit=15, block=18) = 1 [ 268.219531][ T6454] is_bad_inode(inode)=0 [ 268.232837][ T6454] NEXT_ORPHAN(inode)=0 [ 268.242977][ T6454] max_ino=32 [ 268.276447][ T6440] kvm: emulating exchange as write [ 268.293223][ T6454] i_nlink=2 [ 268.296436][ T6454] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 268.353288][ T26] audit: type=1326 audit(1745492129.536:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 268.493393][ T26] audit: type=1326 audit(1745492129.536:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6437 comm="syz.1.541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 268.543525][ T6454] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 268.626641][ T6454] fscrypt (loop5, inode 16): Error -61 getting encryption context [ 270.516601][ T6492] 9pnet: Insufficient options for proto=fd [ 271.374925][ T6492] 9pnet: Insufficient options for proto=fd [ 271.739698][ T4254] Bluetooth: hci5: Frame reassembly failed (-84) [ 271.809119][ T4254] Bluetooth: hci5: Frame reassembly failed (-84) [ 273.683222][ T1109] Bluetooth: hci5: command 0xfc11 tx timeout [ 273.693476][ T4171] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 274.843908][ C1] Illegal XDP return value 16128, expect packet loss! [ 275.187512][ T6587] loop1: detected capacity change from 0 to 40427 [ 275.352211][ T6599] loop5: detected capacity change from 0 to 128 [ 275.389671][ T6587] F2FS-fs (loop1): invalid crc value [ 275.420288][ T6587] F2FS-fs (loop1): Found nat_bits in checkpoint [ 275.669225][ T6602] lo speed is unknown, defaulting to 1000 [ 275.682585][ T6602] lo speed is unknown, defaulting to 1000 [ 276.289743][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 276.319558][ T6587] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 276.539857][ T6612] F2FS-fs (loop1) : inject page get in f2fs_pagecache_get_page of generic_perform_write+0x2bf/0x5b0 [ 276.802000][ T6599] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 277.629233][ T6623] loop0: detected capacity change from 0 to 256 [ 277.659894][ T4165] handle_bad_sector: 7 callbacks suppressed [ 277.659915][ T4165] attempt to access beyond end of device [ 277.659915][ T4165] loop1: rw=2049, want=45104, limit=40427 [ 277.696198][ T6623] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.748716][ T6623] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 277.840332][ T6623] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 278.055761][ T6623] "syz.0.565" (6623) uses obsolete ecb(arc4) skcipher [ 278.847711][ T6643] loop5: detected capacity change from 0 to 1024 [ 280.020058][ T6643] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 281.047055][ T5620] hid-generic 0005:0457:0009.0003: unknown main item tag 0x0 [ 281.088820][ T5620] hid-generic 0005:0457:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 281.234535][ T6676] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 281.250688][ T6676] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 284.017084][ T6705] netlink: 256 bytes leftover after parsing attributes in process `syz.3.589'. [ 284.166573][ T26] kauditd_printk_skb: 84 callbacks suppressed [ 284.166624][ T26] audit: type=1326 audit(1745492147.006:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 284.195634][ T5622] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 284.583735][ T5622] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 284.620671][ T26] audit: type=1326 audit(1745492147.046:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 284.660489][ T5622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.862636][ T26] audit: type=1326 audit(1745492147.266:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 284.904094][ T5622] usb 2-1: config 0 descriptor?? [ 285.018065][ T26] audit: type=1326 audit(1745492147.276:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.0.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ea40d969 code=0x7ffc0000 [ 285.155952][ T6718] tipc: Enabled bearer , priority 10 [ 285.169957][ T6716] loop5: detected capacity change from 0 to 2048 [ 285.226133][ T6718] tipc: Resetting bearer [ 285.269486][ T6718] tipc: Resetting bearer [ 285.631046][ T6716] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.175717][ T5622] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 286.182829][ T5622] hid-led 0003:04D8:F372.0004: unknown main item tag 0x0 [ 286.193543][ T5622] hid-led 0003:04D8:F372.0004: hidraw0: USB HID v1.01 Device [HID 04d8:f372] on usb-dummy_hcd.1-1/input0 [ 286.265953][ T5622] hid-led 0003:04D8:F372.0004: Greynut Luxafor initialized [ 286.323385][ T5622] usb 2-1: USB disconnect, device number 4 [ 286.426657][ T5620] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 286.461065][ T5620] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 286.491478][ T5620] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 286.516217][ T5620] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 286.670664][ T6746] loop1: detected capacity change from 0 to 256 [ 286.726477][ T4214] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 286.746223][ T5621] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 286.920523][ T6748] lo speed is unknown, defaulting to 1000 [ 286.931417][ T6748] lo speed is unknown, defaulting to 1000 [ 288.504971][ T4214] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 288.832814][ T1109] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 288.845813][ T1109] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 288.854887][ T1109] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 288.864722][ T1109] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 288.873993][ T1109] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 288.882960][ T1109] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 288.933920][ T1109] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 289.032073][ T5620] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 289.062733][ T5620] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 289.126469][ T6765] loop6: detected capacity change from 0 to 512 [ 289.147801][ T4214] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 289.191475][ T5620] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 289.412232][ T6765] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 289.769408][ T6765] EXT4-fs (loop6): 1 truncate cleaned up [ 289.921774][ T6765] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 290.241492][ T6786] loop5: detected capacity change from 0 to 512 [ 290.305816][ T6786] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 290.670490][ T6786] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.601: iget: bad extended attribute block 512 [ 290.847164][ T6786] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.601: couldn't read orphan inode 15 (err -117) [ 290.897660][ T6786] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 291.143267][ T5622] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 291.795601][ T6801] tipc: Started in network mode [ 291.808862][ T6801] tipc: Node identity 7f000001, cluster identity 4711 [ 291.856549][ T6801] tipc: Enabled bearer , priority 10 [ 291.908352][ T6802] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 291.937610][ T6801] tipc: Enabled bearer , priority 0 [ 291.969198][ T6802] kvm: pic: level sensitive irq not supported [ 291.969514][ T6802] kvm: pic: non byte read [ 291.974871][ T5622] usb 1-1: config 0 has no interfaces? [ 291.995562][ T6802] kvm: pic: level sensitive irq not supported [ 291.995636][ T6802] kvm: pic: non byte read [ 292.001808][ T5622] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.001862][ T5622] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.010149][ T5622] usb 1-1: config 0 descriptor?? [ 292.065841][ T6802] kvm: pic: level sensitive irq not supported [ 292.065915][ T6802] kvm: pic: non byte read [ 292.123607][ T6802] kvm: pic: level sensitive irq not supported [ 292.123678][ T6802] kvm: pic: non byte read [ 292.201001][ T6802] kvm: pic: single mode not supported [ 292.202805][ T6802] kvm: pic: non byte read [ 292.837691][ T6802] kvm: pic: non byte read [ 292.936310][ T4211] tipc: Node number set to 2130706433 [ 293.012591][ T6792] loop0: detected capacity change from 0 to 512 [ 293.341538][ T6792] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 293.372900][ T6792] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.384502][ T5622] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 293.526608][ T4259] usb 1-1: USB disconnect, device number 2 [ 293.743521][ T5622] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 293.926857][ T5622] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.788898][ T5622] usb 6-1: config 0 descriptor?? [ 294.993297][ T5622] usbhid 6-1:0.0: can't add hid device: -71 [ 294.999536][ T5622] usbhid: probe of 6-1:0.0 failed with error -71 [ 295.032701][ T5622] usb 6-1: USB disconnect, device number 3 [ 295.052084][ T6828] syz.1.608 (6828): drop_caches: 2 [ 295.059239][ T6828] syz.1.608 (6828): drop_caches: 2 [ 295.152582][ T6853] device ipip0 entered promiscuous mode [ 295.691135][ T6832] loop6: detected capacity change from 0 to 128 [ 295.771952][ T6872] loop1: detected capacity change from 0 to 512 [ 295.825714][ T6832] FAT-fs (loop6): Unrecognized mount option "ÿÿÿÿÿÿA" or missing value [ 296.056893][ T6869] device syzkaller0 entered promiscuous mode [ 296.358270][ T6872] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 297.078959][ T6872] EXT4-fs (loop1): 1 truncate cleaned up [ 297.133481][ T6872] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,nombcache,quota,,errors=continue. Quota mode: writeback. [ 297.387516][ T6894] ipt_REJECT: TCP_RESET invalid for non-tcp [ 298.731991][ T6898] loop6: detected capacity change from 0 to 2048 [ 298.892998][ T6906] loop3: detected capacity change from 0 to 512 [ 298.928201][ T6898] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 298.978017][ T6898] UDF-fs: Scanning with blocksize 512 failed [ 299.072884][ T6906] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 299.104663][ T6918] loop0: detected capacity change from 0 to 2048 [ 299.126192][ T6898] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 299.155102][ T6906] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.334038][ T6918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.009079][ T1167] attempt to access beyond end of device [ 301.009079][ T1167] loop6: rw=1, want=2050, limit=2048 [ 301.079287][ T6950] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.088892][ T6950] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.097739][ T6950] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.106580][ T6950] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.150040][ T1167] buffer_io_error: 6 callbacks suppressed [ 301.150059][ T1167] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 301.239594][ T1167] attempt to access beyond end of device [ 301.239594][ T1167] loop6: rw=1, want=2050, limit=2048 [ 301.321075][ T6946] loop5: detected capacity change from 0 to 40427 [ 301.333429][ T6950] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 301.336701][ T1167] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 301.375932][ T6946] F2FS-fs (loop5): invalid crc value [ 301.401266][ T6946] F2FS-fs (loop5): Found nat_bits in checkpoint [ 301.421511][ T1167] attempt to access beyond end of device [ 301.421511][ T1167] loop6: rw=1, want=2050, limit=2048 [ 301.470481][ T6946] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 301.508751][ T1167] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 301.508797][ T6946] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 301.572363][ T6962] loop3: detected capacity change from 0 to 128 [ 301.580479][ T1167] attempt to access beyond end of device [ 301.580479][ T1167] loop6: rw=1, want=2050, limit=2048 [ 301.610170][ T1167] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 301.639463][ T1167] attempt to access beyond end of device [ 301.639463][ T1167] loop6: rw=1, want=2052, limit=2048 [ 301.799816][ T1167] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 301.899621][ T6946] attempt to access beyond end of device [ 301.899621][ T6946] loop5: rw=2049, want=45104, limit=40427 [ 301.958335][ T1167] attempt to access beyond end of device [ 301.958335][ T1167] loop6: rw=1, want=2052, limit=2048 [ 302.189106][ T1167] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 302.203185][ T1167] attempt to access beyond end of device [ 302.203185][ T1167] loop6: rw=1, want=2052, limit=2048 [ 302.238811][ T1167] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 302.353221][ T1167] attempt to access beyond end of device [ 302.353221][ T1167] loop6: rw=1, want=2052, limit=2048 [ 302.437303][ T1167] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 302.516029][ T1167] attempt to access beyond end of device [ 302.516029][ T1167] loop6: rw=1, want=2054, limit=2048 [ 302.613575][ T1167] Buffer I/O error on dev loop6, logical block 1026, lost async page write [ 302.872146][ T6979] netlink: 'syz.3.639': attribute type 4 has an invalid length. [ 303.039631][ T6993] loop1: detected capacity change from 0 to 16 [ 303.051298][ T6988] loop6: detected capacity change from 0 to 256 [ 303.090446][ T6992] input: syz0 as /devices/virtual/input/input6 [ 303.098084][ T6990] netlink: 'syz.3.639': attribute type 4 has an invalid length. [ 303.107097][ T4213] lo speed is unknown, defaulting to 1000 [ 303.137963][ T4387] lo speed is unknown, defaulting to 1000 [ 303.164385][ T6993] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 303.307913][ T6988] loop6: detected capacity change from 0 to 16 [ 303.406193][ T6988] erofs: (device loop6): mounted with root inode @ nid 36. [ 303.574390][ T6988] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 303.863249][ T6988] erofs: (device loop6): z_erofs_readpage: failed to read, err [-117] [ 304.075136][ T1106] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 304.493482][ T1106] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.542240][ T1106] usb 1-1: config 0 has no interface number 0 [ 304.656776][ T1106] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.500413][ T1106] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.394112][ T7043] lo speed is unknown, defaulting to 1000 [ 306.401006][ T7043] lo speed is unknown, defaulting to 1000 [ 307.223318][ T1106] usb 1-1: config 0 descriptor?? [ 307.303332][ T1106] usb 1-1: can't set config #0, error -71 [ 308.812262][ T1106] usb 1-1: USB disconnect, device number 3 [ 309.848754][ T26] audit: type=1326 audit(1745492172.686:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 309.993124][ T26] audit: type=1326 audit(1745492172.726:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 310.687829][ T26] audit: type=1326 audit(1745492172.726:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 311.861065][ T26] audit: type=1326 audit(1745492172.726:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 312.002296][ T26] audit: type=1326 audit(1745492172.726:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 312.107750][ T26] audit: type=1326 audit(1745492172.726:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 312.213506][ T7111] netlink: 60 bytes leftover after parsing attributes in process `syz.0.669'. [ 312.289072][ T26] audit: type=1326 audit(1745492172.726:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 312.341454][ T7116] loop6: detected capacity change from 0 to 1024 [ 312.398631][ T26] audit: type=1326 audit(1745492172.736:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 312.653563][ T4211] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 312.694264][ T7116] EXT4-fs (loop6): Unrecognized mount option "defcontext=system_u" or missing value [ 313.158741][ T26] audit: type=1326 audit(1745492172.736:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 313.223181][ T26] audit: type=1326 audit(1745492172.736:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7071 comm="syz.5.661" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f892b8aa969 code=0x7ffc0000 [ 313.418571][ T7122] loop3: detected capacity change from 0 to 1024 [ 313.483379][ T4211] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.500283][ T4211] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 313.710084][ T4211] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.00 [ 313.719847][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.729958][ T4211] usb 1-1: config 0 descriptor?? [ 313.777481][ T4211] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 314.919186][ T4259] Bluetooth: hci2: command 0x0406 tx timeout [ 314.929054][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.0.669'. [ 315.079121][ T7147] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 315.103434][ T3530] bcm5974 1-1:0.0: could not read from device [ 315.128233][ T4211] usb 1-1: USB disconnect, device number 4 [ 315.280341][ T7151] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 315.531129][ T7160] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 316.284070][ T7163] loop3: detected capacity change from 0 to 1024 [ 316.738192][ T7163] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 316.972527][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.980710][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.509329][ T7183] loop0: detected capacity change from 0 to 1024 [ 317.784932][ T7183] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 318.462036][ T7183] EXT4-fs error (device loop0): ext4_get_journal_inode:5160: inode #32: comm syz.0.686: iget: special inode unallocated [ 318.515038][ T7183] EXT4-fs (loop0): no journal found [ 318.520293][ T7183] EXT4-fs (loop0): can't get journal size [ 318.556421][ T7183] EXT4-fs error (device loop0): ext4_protect_reserved_inode:160: inode #32: comm syz.0.686: iget: special inode unallocated [ 318.583698][ T7183] EXT4-fs (loop0): failed to initialize system zone (-117) [ 318.591056][ T7183] EXT4-fs (loop0): mount failed [ 318.907582][ T7215] device bond_slave_0 entered promiscuous mode [ 318.914292][ T7215] device bond_slave_1 entered promiscuous mode [ 318.920489][ T7215] device wlan1 entered promiscuous mode [ 318.929776][ T7215] device vlan2 entered promiscuous mode [ 318.935773][ T7215] device bond0 entered promiscuous mode [ 319.883565][ T7215] device bond0 left promiscuous mode [ 319.889803][ T7215] device bond_slave_0 left promiscuous mode [ 319.895822][ T7215] device bond_slave_1 left promiscuous mode [ 319.901770][ T7215] device wlan1 left promiscuous mode [ 321.293033][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.697'. [ 321.790549][ T7256] netlink: 'syz.5.702': attribute type 4 has an invalid length. [ 324.184008][ T7310] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 325.717438][ T7322] loop0: detected capacity change from 0 to 1024 [ 327.629614][ T7314] syz.3.715 (7314): drop_caches: 2 [ 330.555740][ T7370] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 330.602982][ T7376] loop0: detected capacity change from 0 to 4096 [ 330.623374][ T7370] CIFS mount error: No usable UNC path provided in device string! [ 330.623374][ T7370] [ 330.647651][ T7370] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 332.756665][ T7391] netlink: 4 bytes leftover after parsing attributes in process `syz.5.732'. [ 334.211599][ T7376] NILFS (loop0): error -4 creating segctord thread [ 336.175299][ T7410] netlink: 'syz.5.738': attribute type 21 has an invalid length. [ 336.183215][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.5.738'. [ 336.364590][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.739'. [ 338.965796][ T7454] netlink: 224 bytes leftover after parsing attributes in process `syz.1.752'. [ 338.979701][ T7459] netlink: 24 bytes leftover after parsing attributes in process `syz.6.753'. [ 339.003137][ T7454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.752'. [ 339.359666][ T7473] loop6: detected capacity change from 0 to 1024 [ 340.425519][ T7469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.757'. [ 340.740106][ T7482] bridge: RTM_NEWNEIGH with invalid ether address [ 341.855892][ T7494] loop1: detected capacity change from 0 to 64 [ 343.842195][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 343.842212][ T26] audit: type=1804 audit(1745492206.676:198): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.770" name="/newroot/157/file1" dev="fuse" ino=1 res=1 errno=0 [ 343.944210][ T26] audit: type=1800 audit(1745492206.676:199): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 344.479782][ T26] audit: type=1804 audit(1745492206.676:200): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.770" name="/newroot/157/file1" dev="fuse" ino=1 res=1 errno=0 [ 344.751962][ T26] audit: type=1800 audit(1745492206.676:201): pid=7507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.770" name="/" dev="fuse" ino=1 res=0 errno=0 [ 345.468284][ T7534] autofs4:pid:7534:autofs_fill_super: called with bogus options [ 346.530880][ T26] audit: type=1326 audit(1745492209.176:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7538 comm="syz.3.782" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f569e505969 code=0x0 [ 348.308616][ T26] audit: type=1804 audit(1745492211.146:203): pid=7556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.784" name="/newroot/58/bus/bus" dev="overlay" ino=334 res=1 errno=0 [ 348.479065][ T7562] loop3: detected capacity change from 0 to 1024 [ 348.629052][ T4379] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.648263][ T4379] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.728278][ T7575] loop6: detected capacity change from 0 to 1024 [ 350.120422][ T7584] loop1: detected capacity change from 0 to 1024 [ 350.481659][ T7575] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 351.053667][ T7593] loop0: detected capacity change from 0 to 512 [ 351.283461][ T7593] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 351.329703][ T7600] loop1: detected capacity change from 0 to 256 [ 351.391080][ T7593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc128, mo2=0002] [ 351.442657][ T7600] exfat: Deprecated parameter 'utf8' [ 351.448199][ T7600] exfat: Deprecated parameter 'namecase' [ 351.454074][ T7600] exfat: Deprecated parameter 'utf8' [ 351.480750][ T7593] System zones: 1-12 [ 351.509368][ T7593] EXT4-fs (loop0): 1 truncate cleaned up [ 351.546729][ T7593] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,errors=remount-ro,norecovery,nobarrier,nodiscard,quota,. Quota mode: writeback. [ 351.625560][ T7600] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 351.674004][ T7600] handle_bad_sector: 1 callbacks suppressed [ 351.674043][ T7600] attempt to access beyond end of device [ 351.674043][ T7600] loop1: rw=524288, want=34359738496, limit=256 [ 351.692737][ T7600] attempt to access beyond end of device [ 351.692737][ T7600] loop1: rw=0, want=34359738496, limit=256 [ 351.704594][ T26] audit: type=1800 audit(1745492214.546:204): pid=7600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.797" name="file1" dev="loop1" ino=1048629 res=0 errno=0 [ 351.899875][ T7604] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 352.173408][ T7609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.800'. [ 354.943950][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.5.808'. [ 358.190101][ T7666] loop0: detected capacity change from 0 to 2048 [ 358.252198][ T7678] loop1: detected capacity change from 0 to 1024 [ 358.268269][ T7666] loop0: p1 < > p3 [ 358.281123][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.820'. [ 358.303838][ T7666] loop0: p3 size 134217728 extends beyond EOD, truncated [ 358.329580][ T7681] device ipvlan2 entered promiscuous mode [ 358.433107][ T7681] bridge0: port 3(ipvlan2) entered blocking state [ 358.461237][ T7681] bridge0: port 3(ipvlan2) entered disabled state [ 359.890819][ T7696] loop6: detected capacity change from 0 to 1024 [ 360.162766][ T7704] loop3: detected capacity change from 0 to 512 [ 360.278167][ T7696] EXT4-fs (loop6): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 360.359069][ T4270] udevd[4270]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 360.378978][ T6189] udevd[6189]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 360.430171][ T7704] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 360.519958][ T7704] ext4 filesystem being mounted at /173/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.721568][ T7716] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 361.906314][ T7724] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 363.746443][ T7737] nfs: Unknown parameter 'ntext' [ 365.511755][ T7746] loop1: detected capacity change from 0 to 512 [ 366.443238][ T7746] EXT4-fs (loop1): Ignoring removed nobh option [ 366.449570][ T7746] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 368.575654][ T7746] EXT4-fs: failed to create workqueue [ 368.621787][ T7746] EXT4-fs (loop1): mount failed [ 368.857841][ T7774] loop0: detected capacity change from 0 to 128 [ 369.511053][ T7783] netlink: 64 bytes leftover after parsing attributes in process `syz.5.849'. [ 369.607220][ T7785] netlink: 'syz.5.849': attribute type 11 has an invalid length. [ 369.805299][ T7785] netlink: 428 bytes leftover after parsing attributes in process `syz.5.849'. [ 370.303160][ T7788] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 370.764135][ T7803] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 373.169172][ T7818] netlink: 32 bytes leftover after parsing attributes in process `syz.3.858'. [ 373.417751][ T7823] lo speed is unknown, defaulting to 1000 [ 373.464265][ T7823] lo speed is unknown, defaulting to 1000 [ 374.990668][ T7835] loop6: detected capacity change from 0 to 8 [ 378.590476][ T7846] loop1: detected capacity change from 0 to 512 [ 380.123222][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.602934][ T7846] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 380.747046][ T7846] ext4 filesystem being mounted at /172/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 381.712152][ T7876] device vlan3 entered promiscuous mode [ 382.018956][ T7858] lo speed is unknown, defaulting to 1000 [ 382.042670][ T7858] lo speed is unknown, defaulting to 1000 [ 387.055557][ T1106] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 387.500217][ T7933] loop0: detected capacity change from 0 to 512 [ 387.888127][ T7926] ªªªªªª: renamed from vlan0 [ 388.004768][ T7930] netlink: 'syz.6.884': attribute type 4 has an invalid length. [ 388.131639][ T7933] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 388.186136][ T7933] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 389.327721][ T7952] loop1: detected capacity change from 0 to 128 [ 391.658202][ T7952] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 391.721771][ T7970] nfs: Unknown parameter 'ntext' [ 391.723731][ T7952] sysv_free_block: trying to free block not in datazone [ 391.791414][ T7969] loop6: detected capacity change from 0 to 256 [ 391.945091][ T7952] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 393.168091][ T7980] delete_channel: no stack [ 393.490972][ T7985] loop1: detected capacity change from 0 to 32768 [ 394.350965][ T7988] loop3: detected capacity change from 0 to 512 [ 394.677626][ T7985] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 394.965874][ T7988] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.424210][ T7988] EXT4-fs (loop3): 1 truncate cleaned up [ 395.433104][ T7988] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,resuid=0x000000000000ee01,min_batch_time=0x000000000004c3b8,inode_readahead_blks=0x0000000002000000,data=journal,i_version,,errors=continue. Quota mode: none. [ 395.466055][ T5620] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 395.567599][ T8001] loop0: detected capacity change from 0 to 1024 [ 395.581175][ T7985] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 396.334199][ T5620] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 396.670229][ T4165] ocfs2: Unmounting device (7,1) on (node local) [ 398.343747][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.914'. [ 398.588835][ T8022] nfs: Unknown parameter 'ntext' [ 398.632520][ T8017] device bridge0 entered promiscuous mode [ 398.736929][ T8017] device macvtap1 entered promiscuous mode [ 399.154761][ T8016] device bridge0 left promiscuous mode [ 401.389762][ T8043] loop6: detected capacity change from 0 to 32768 [ 402.377765][ T8043] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 402.422289][ T8043] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 402.525732][ T8043] 9pnet: Insufficient options for proto=fd [ 402.736557][ T5550] ocfs2: Unmounting device (7,6) on (node local) [ 403.021984][ T8055] lo speed is unknown, defaulting to 1000 [ 403.028838][ T8055] lo speed is unknown, defaulting to 1000 [ 404.239054][ T8055] chnl_net:caif_netlink_parms(): no params data found [ 404.680593][ T8077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.688604][ T8077] IPv6: NLM_F_CREATE should be set when creating new route [ 404.764620][ T8055] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.771783][ T8055] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.811774][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 404.906425][ T8055] device bridge_slave_0 entered promiscuous mode [ 404.958328][ T8055] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.021030][ T8055] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.021481][ T8079] loop6: detected capacity change from 0 to 32768 [ 405.040297][ T8055] device bridge_slave_1 entered promiscuous mode [ 406.273922][ T4387] Bluetooth: hci1: command 0x0406 tx timeout [ 407.462459][ T5620] Bluetooth: hci3: command 0x041b tx timeout [ 409.649910][ T1109] Bluetooth: hci3: command 0x040f tx timeout [ 409.735770][ T8077] tipc: Resetting bearer [ 410.477065][ T8077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.082508][ T8077] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.091835][ T8077] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.101350][ T8077] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.111740][ T8077] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.133223][ T8077] device netdevsim0 left promiscuous mode [ 411.349418][ T8055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.383322][ T8055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.452626][ T8055] team0: Port device team_slave_0 added [ 411.470318][ T8055] team0: Port device team_slave_1 added [ 411.561710][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.568830][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.602766][ T8055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.625261][ T8055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.632230][ T8055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.669151][ T8055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.686731][ T5620] Bluetooth: hci3: command 0x0419 tx timeout [ 411.762067][ T8055] device hsr_slave_0 entered promiscuous mode [ 411.771775][ T8055] device hsr_slave_1 entered promiscuous mode [ 411.787088][ T8055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.801218][ T8055] Cannot create hsr debugfs directory [ 411.892844][ T5774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.910800][ T5774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.997651][ T5774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.015912][ T5774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.092392][ T5774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.110787][ T5774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.169879][ T5774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 412.184924][ T5774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.461589][ T5774] tipc: Disabling bearer [ 412.474712][ T5774] tipc: Left network mode [ 412.480473][ T8055] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 412.502359][ T8055] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 412.544390][ T8055] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 412.596743][ T8055] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 412.820573][ T8055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.907259][ T8055] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.934797][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 412.967195][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 412.994119][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 413.003604][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 413.028304][ T4432] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.035413][ T4432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.051515][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 413.060728][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 413.079577][ T4432] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.086710][ T4432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.104524][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 413.121277][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 413.172500][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 413.188281][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 413.208219][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 413.221467][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 413.235303][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 413.251730][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 413.281783][ T8055] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 413.300639][ T8055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 413.343666][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 413.355226][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 413.374852][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 413.392105][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 413.401148][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 413.578352][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 413.595389][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 413.612001][ T8055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.968569][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 413.986471][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 414.058915][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 414.070900][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 414.085610][ T8055] device veth0_vlan entered promiscuous mode [ 414.102804][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 414.114063][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 414.127096][ T8055] device veth1_vlan entered promiscuous mode [ 414.221758][ T5774] device hsr_slave_0 left promiscuous mode [ 414.231568][ T5774] device hsr_slave_1 left promiscuous mode [ 414.249344][ T5774] device bridge_slave_1 left promiscuous mode [ 414.261860][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.277912][ T5774] device bridge_slave_0 left promiscuous mode [ 414.291744][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.647563][ T5774] device veth1_macvtap left promiscuous mode [ 414.655259][ T5774] device veth0_macvtap left promiscuous mode [ 414.661346][ T5774] device veth1_vlan left promiscuous mode [ 414.678081][ T5774] device veth0_vlan left promiscuous mode [ 414.899495][ T5774] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 415.152314][ T5774] team0 (unregistering): Port device team_slave_1 removed [ 415.172749][ T5774] team0 (unregistering): Port device team_slave_0 removed [ 415.188717][ T5774] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.207277][ T5774] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.325864][ T5774] bond0 (unregistering): Released all slaves [ 415.584672][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 415.614497][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 415.622847][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 415.632434][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 415.649961][ T4166] lo speed is unknown, defaulting to 1000 [ 415.660382][ T8055] device veth0_macvtap entered promiscuous mode [ 415.678029][ T8055] device veth1_macvtap entered promiscuous mode [ 415.705277][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 415.750146][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.768901][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.785117][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.801660][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.816918][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 415.853068][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.904438][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.915754][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 415.924639][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 415.976210][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.995749][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.013209][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.030462][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.042631][ T8055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.062748][ T8055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.086812][ T8055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.103063][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 416.111742][ T5775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 416.147181][ T8055] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.167204][ T8055] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.184730][ T8055] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.199659][ T8055] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.330074][ T4254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.372361][ T4254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.428313][ T5775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.440223][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.452300][ T5775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.503288][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 422.101026][ T8214] loop6: detected capacity change from 0 to 16 [ 423.318103][ T8218] device syzkaller0 entered promiscuous mode [ 432.039463][ T8314] netlink: 20 bytes leftover after parsing attributes in process `syz.1.974'. [ 432.623559][ T8314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 432.630819][ T8314] IPv6: NLM_F_CREATE should be set when creating new route [ 432.638218][ T8314] IPv6: NLM_F_CREATE should be set when creating new route [ 435.437299][ T8347] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 435.773633][ T8351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.982'. [ 436.677517][ T8366] loop0: detected capacity change from 0 to 256 [ 439.866447][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.901127][ T8441] loop1: detected capacity change from 0 to 1764 [ 443.370325][ T8457] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1008'. [ 446.611201][ T8490] loop1: detected capacity change from 0 to 8192 [ 454.910840][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1041'. [ 455.906683][ T8591] loop1: detected capacity change from 0 to 8192 [ 455.918217][ T8593] device bond_slave_0 entered promiscuous mode [ 455.924476][ T8593] device bond_slave_1 entered promiscuous mode [ 455.979060][ T8593] device macvtap1 entered promiscuous mode [ 456.043112][ T8593] device bond0 entered promiscuous mode [ 456.063998][ T8593] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 456.098079][ T8604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1044'. [ 456.164052][ T8591] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 456.263960][ T8591] REISERFS (device loop1): using ordered data mode [ 456.278195][ T8591] reiserfs: using flush barriers [ 456.319298][ T8591] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 456.426916][ T8591] REISERFS (device loop1): checking transaction log (loop1) [ 456.995449][ T8591] REISERFS (device loop1): Using r5 hash to sort names [ 457.064208][ T8591] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 457.534899][ T8628] delete_channel: no stack [ 461.517619][ T8646] loop1: detected capacity change from 0 to 4096 [ 461.549824][ T8610] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.557320][ T8610] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.663659][ T8646] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 462.632415][ T4165] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 463.312418][ T8610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.427254][ T8610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.211829][ T8610] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.222706][ T8610] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.240174][ T8610] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.251023][ T8610] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.515425][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1059'. [ 464.554509][ T8652] device macvtap2 entered promiscuous mode [ 464.572939][ T8610] syz.7.1046 (8610) used greatest stack depth: 17888 bytes left [ 464.624446][ T8652] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 470.194731][ T26] audit: type=1326 audit(1745492333.036:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 470.325508][ T26] audit: type=1326 audit(1745492333.066:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 471.264225][ T26] audit: type=1326 audit(1745492333.066:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 471.428172][ T26] audit: type=1326 audit(1745492333.066:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 471.493294][ T26] audit: type=1326 audit(1745492333.066:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 471.516057][ T26] audit: type=1326 audit(1745492333.066:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 471.553073][ T26] audit: type=1326 audit(1745492333.066:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 471.584775][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1081'. [ 471.617627][ T8737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.198484][ T26] audit: type=1326 audit(1745492333.066:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 472.220763][ T26] audit: type=1326 audit(1745492333.066:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 472.264063][ T26] audit: type=1326 audit(1745492333.066:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8712 comm="syz.1.1074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f808825c969 code=0x7ffc0000 [ 473.634920][ T8737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.041500][ T8763] loop1: detected capacity change from 0 to 128 [ 476.770470][ T8792] device vlan2 entered promiscuous mode [ 477.399382][ T8796] x_tables: duplicate underflow at hook 1 [ 488.445769][ T8912] overlayfs: failed to clone upperpath [ 491.567614][ T8942] x_tables: duplicate underflow at hook 1 [ 492.224695][ T8940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 501.301310][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.346598][ T8991] lo speed is unknown, defaulting to 1000 [ 505.287936][ T9030] loop1: detected capacity change from 0 to 512 [ 507.148522][ T9030] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042c11c, mo2=0002] [ 507.156660][ T9030] System zones: 0-2, 18-18, 34-34 [ 507.162100][ T9030] EXT4-fs: error -4 creating inode table initialization thread [ 507.170691][ T9030] EXT4-fs (loop1): mount failed [ 507.368209][ T9040] delete_channel: no stack [ 508.482475][ T9053] device wg2 entered promiscuous mode [ 508.540606][ T9057] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1158'. [ 509.905119][ T9075] IPv6: syztnl0: Disabled Multicast RS [ 511.217996][ T9080] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 512.677442][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.684934][ T9080] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.745316][ T9080] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.752460][ T9080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.760720][ T9080] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.767835][ T9080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.925179][ T9080] device bridge0 entered promiscuous mode [ 512.942755][ T9080] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 512.978811][ T9086] netlink: 'syz.0.1163': attribute type 10 has an invalid length. [ 513.685795][ T9086] device netdevsim0 entered promiscuous mode [ 513.704066][ T9086] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 515.907754][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1172'. [ 516.003254][ T9115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.705146][ T9115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 520.624086][ T9153] loop7: detected capacity change from 0 to 128 [ 521.877634][ T9164] device ip6erspan0 entered promiscuous mode [ 521.961765][ T9171] tipc: Started in network mode [ 521.979737][ T9171] tipc: Node identity 4, cluster identity 4711 [ 522.000790][ T9153] qnx6: superblock #1 checksum error [ 522.010049][ T9171] tipc: Node number set to 4 [ 525.663350][ T9256] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1202'. [ 529.861374][ T9306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1217'. [ 530.039373][ T4214] Bluetooth: hci3: command 0x0406 tx timeout [ 531.176845][ T9323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1222'. [ 532.225563][ T9345] lo speed is unknown, defaulting to 1000 [ 532.231420][ T9345] lo speed is unknown, defaulting to 1000 [ 532.237718][ T9345] lo speed is unknown, defaulting to 1000 [ 532.249973][ T9345] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 532.314984][ T9345] lo speed is unknown, defaulting to 1000 [ 532.338790][ T9345] lo speed is unknown, defaulting to 1000 [ 532.365879][ T9345] lo speed is unknown, defaulting to 1000 [ 533.453501][ T9345] lo speed is unknown, defaulting to 1000 [ 533.460215][ T9345] lo speed is unknown, defaulting to 1000 [ 533.752643][ T9349] loop1: detected capacity change from 0 to 64 [ 536.164782][ T9369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.000697][ T4213] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 542.442049][ T9424] delete_channel: no stack [ 542.574708][ T4213] usb 2-1: unable to read config index 0 descriptor/all [ 542.581724][ T4213] usb 2-1: can't read configurations, error -71 [ 545.586095][ T9452] loop1: detected capacity change from 0 to 256 [ 548.805414][ T9470] overlayfs: failed to resolve './file1': -2 [ 549.026097][ T9477] loop1: detected capacity change from 0 to 40427 [ 549.054427][ T9477] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 549.062559][ T9477] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 549.104492][ T9477] F2FS-fs (loop1): invalid crc value [ 551.425304][ T9477] F2FS-fs (loop1): Found nat_bits in checkpoint [ 551.509392][ T9477] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 551.516792][ T9477] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 554.052649][ T9504] lo speed is unknown, defaulting to 1000 [ 554.840666][ T9504] lo speed is unknown, defaulting to 1000 [ 554.963083][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 555.100464][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 556.131872][ T9504] chnl_net:caif_netlink_parms(): no params data found [ 556.290514][ T9544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 556.553909][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 557.035063][ T9504] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.306566][ T9504] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.358811][ T7] Bluetooth: hci5: command 0x041b tx timeout [ 557.381542][ T9504] device bridge_slave_0 entered promiscuous mode [ 557.408109][ T9504] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.438376][ T9504] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.462810][ T9504] device bridge_slave_1 entered promiscuous mode [ 557.540016][ T9504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.560545][ T9504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.611906][ T9549] netlink: 'syz.5.1280': attribute type 25 has an invalid length. [ 557.648998][ T9504] team0: Port device team_slave_0 added [ 557.660885][ T9504] team0: Port device team_slave_1 added [ 557.698826][ T9576] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1286'. [ 557.714838][ T9576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1286'. [ 557.740554][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.750921][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.785076][ C1] dccp_check_seqno: Step 6 failed for CLOSE packet, (LSWL(123133769534540) <= P.seqno(123133769534539) <= S.SWH(123133769534614)) and (P.ackno exists or LAWL(220670381138305) <= P.ackno(220670381138305) <= S.AWH(220670381138305), sending SYNC... [ 557.808407][ T9504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.832093][ T9504] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.847819][ T9504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 557.874676][ T9504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.024633][ T9504] device hsr_slave_0 entered promiscuous mode [ 558.045344][ T9504] device hsr_slave_1 entered promiscuous mode [ 558.052221][ T9504] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.059874][ T9504] Cannot create hsr debugfs directory [ 560.886349][ T7] Bluetooth: hci5: command 0x040f tx timeout [ 563.005012][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.044673][ T7] Bluetooth: hci5: command 0x0419 tx timeout [ 563.054719][ T9612] gfs2: path_lookup on /dev/net/tun returned error -2 [ 565.180258][ T9630] CIFS mount error: No usable UNC path provided in device string! [ 565.180258][ T9630] [ 565.230217][ T9630] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 565.277274][ T9504] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 565.297897][ T9504] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 565.323955][ T9504] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 565.344049][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1303'. [ 565.370656][ T9504] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 567.044144][ T9635] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1303'. [ 570.076809][ T9675] xt_time: unknown flags 0xc [ 571.274088][ T9504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 572.710367][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 572.742847][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 572.818314][ T9699] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 572.825815][ T9699] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 572.833375][ T9699] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 572.848686][ T9699] Error parsing options; rc = [-22] [ 573.666208][ T9695] overlayfs: failed to clone upperpath [ 573.726480][ T9504] 8021q: adding VLAN 0 to HW filter on device team0 [ 575.583186][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 575.621698][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 575.880382][ T4254] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.887566][ T4254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 575.990035][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 576.152153][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 576.344335][ T4254] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.351527][ T4254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.835167][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 576.920976][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 576.989857][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 577.005691][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 577.025003][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 577.050091][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 577.089688][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 577.123536][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 577.300530][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 577.648345][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 578.171287][ T9504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.413524][ T9717] netlink: 71 bytes leftover after parsing attributes in process `syz.1.1323'. [ 578.443487][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 578.475595][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.713206][ T9] device hsr_slave_0 left promiscuous mode [ 583.733278][ T9] device hsr_slave_1 left promiscuous mode [ 583.740079][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 584.965894][ T9801] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1339'. [ 584.974929][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1339'. [ 584.984485][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 584.993548][ T9801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1339'. [ 585.018936][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.210332][ T9] device bridge_slave_1 left promiscuous mode [ 585.223423][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.245657][ T9] device bridge_slave_0 left promiscuous mode [ 585.251898][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.620133][ T9] team0 (unregistering): Port device team_slave_1 removed [ 585.635254][ T9] team0 (unregistering): Port device team_slave_0 removed [ 585.647428][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 585.662807][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.275965][ T9] bond0 (unregistering): Released all slaves [ 587.731435][ T9504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.571162][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.596855][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.871450][ T9846] io-wq is not configured for unbound workers [ 589.199381][ T9856] device batadv0 entered promiscuous mode [ 589.211890][ T9856] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 589.220846][ T9856] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 590.295347][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 590.314630][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.430406][ T9504] device veth0_vlan entered promiscuous mode [ 591.507432][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.527199][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.552703][ T9504] device veth1_vlan entered promiscuous mode [ 591.595489][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 591.603931][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 591.809653][ T9504] device veth0_macvtap entered promiscuous mode [ 591.881354][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 591.903157][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 593.618256][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 593.693575][ T9504] device veth1_macvtap entered promiscuous mode [ 593.793884][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.862233][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 593.905817][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 593.955500][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.002150][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 594.016670][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 594.057817][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 594.802468][ T9504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 594.873277][ T9504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.904955][ T9504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 594.917932][ T9504] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.926858][ T9504] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 594.937349][ T9504] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.183168][ T9504] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.234410][ T9919] overlayfs: failed to clone lowerpath [ 597.255519][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 597.281471][ T4254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 597.462708][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.493039][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.732783][ T5301] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 597.758637][ T5301] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.764355][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 598.531251][ T9930] overlayfs: failed to clone upperpath [ 598.857734][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 599.319713][ T9945] bridge0: port 3(netdevsim2) entered blocking state [ 599.326787][ T9945] bridge0: port 3(netdevsim2) entered disabled state [ 599.343313][ T9945] device netdevsim2 entered promiscuous mode [ 599.350865][ T9945] bridge0: port 3(netdevsim2) entered blocking state [ 599.357787][ T9945] bridge0: port 3(netdevsim2) entered forwarding state [ 604.771515][ T9997] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1385'. [ 604.808219][ T9982] kvm [9979]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x82e [ 611.829080][T10049] overlayfs: failed to clone upperpath [ 616.540466][T10099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.574937][T10099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 620.669492][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 621.212069][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 621.272190][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 623.135944][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 623.227246][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 623.280201][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 623.383765][T10122] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 623.649881][T10160] overlayfs: failed to clone upperpath [ 624.592700][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.783178][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1422'. [ 624.792107][T10162] IPVS: Unknown mcast interface: vcan0 [ 627.033107][T10182] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 627.916777][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1428'. [ 629.153296][T10195] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1414'. [ 629.271170][T10201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1428'. [ 630.889075][ T5623] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 630.928236][ T5623] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 631.964014][T10223] loop8: detected capacity change from 0 to 1024 [ 632.295244][T10223] EXT4-fs (loop8): Mount option "nodioread_nolock" incompatible with ext2 [ 635.188227][T10269] lo speed is unknown, defaulting to 1000 [ 635.195021][T10269] lo speed is unknown, defaulting to 1000 [ 637.938303][T10293] lo speed is unknown, defaulting to 1000 [ 637.946212][T10293] lo speed is unknown, defaulting to 1000 [ 644.600290][T10334] loop8: detected capacity change from 0 to 16 [ 644.685761][T10334] erofs: (device loop8): mounted with root inode @ nid 36. [ 645.025927][T10338] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 645.085116][ T4183] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[9000] [ 645.089801][T10338] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 645.145585][T10341] erofs: (device loop8): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 645.179571][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 645.179613][ T26] audit: type=1800 audit(1745492508.016:237): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1460" name="file2" dev="loop8" ino=89 res=0 errno=0 [ 645.346877][T10338] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 645.473972][T10338] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 645.514393][T10338] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 645.563948][T10338] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 645.808847][T10352] overlayfs: failed to clone upperpath [ 650.278220][T10384] netlink: 'syz.6.1471': attribute type 10 has an invalid length. [ 651.485311][T10384] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.493010][T10384] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.892647][T10394] overlayfs: failed to clone upperpath [ 651.903674][T10384] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.910799][T10384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.918260][T10384] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.925364][T10384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.142132][T10384] device bridge0 entered promiscuous mode [ 652.186364][T10384] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 652.273116][T10386] netlink: 'syz.6.1471': attribute type 10 has an invalid length. [ 652.356450][T10386] device netdevsim0 entered promiscuous mode [ 652.392427][T10386] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 652.420923][T10404] netlink: 'syz.8.1474': attribute type 9 has an invalid length. [ 652.505146][T10396] lo speed is unknown, defaulting to 1000 [ 652.511827][T10396] lo speed is unknown, defaulting to 1000 [ 652.537009][T10404] loop8: detected capacity change from 0 to 1024 [ 652.761988][T10404] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 654.132137][T10396] chnl_net:caif_netlink_parms(): no params data found [ 654.323170][ T5621] Bluetooth: hci3: command 0x0409 tx timeout [ 654.457119][T10396] bridge0: port 1(bridge_slave_0) entered blocking state [ 654.482150][T10396] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.522420][T10396] device bridge_slave_0 entered promiscuous mode [ 654.531412][T10396] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.538795][T10396] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.552606][T10396] device bridge_slave_1 entered promiscuous mode [ 654.613005][T10396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.634813][T10396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 654.702159][T10396] team0: Port device team_slave_0 added [ 654.726358][T10396] team0: Port device team_slave_1 added [ 654.772493][T10396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.789721][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.842959][T10396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.875092][T10396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.882064][T10396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 654.942949][T10396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.026442][T10396] device hsr_slave_0 entered promiscuous mode [ 655.047044][T10396] device hsr_slave_1 entered promiscuous mode [ 655.063632][T10396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 655.071209][T10396] Cannot create hsr debugfs directory [ 655.287075][T10450] lo speed is unknown, defaulting to 1000 [ 655.294029][T10450] lo speed is unknown, defaulting to 1000 [ 655.424726][T10396] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 655.442624][T10396] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 655.659361][T10396] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 656.700122][ T5623] Bluetooth: hci3: command 0x041b tx timeout [ 656.723356][T10396] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 657.036392][T10396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.079028][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 657.105259][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 657.371297][T10396] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.522092][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 657.540773][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 657.559758][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.566879][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.622488][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 657.641027][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 657.673773][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 657.733434][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.740551][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.767205][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 658.021823][T10396] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 658.037249][T10396] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 658.748534][ T5621] Bluetooth: hci3: command 0x040f tx timeout [ 658.754747][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 658.766595][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 658.789085][T10485] overlayfs: failed to clone upperpath [ 658.793136][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.153974][T10487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.234956][T10487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 659.656701][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.668121][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.706255][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.751420][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.811332][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.848985][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.876332][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.884596][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.162226][T10504] xt_time: unknown flags 0xc [ 660.879587][ T7] Bluetooth: hci3: command 0x0419 tx timeout [ 661.029880][T10515] IPv6: syztnl0: Disabled Multicast RS [ 662.169960][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 662.203253][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 662.267486][T10396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.374345][T10539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1508'. [ 662.406733][T10535] delete_channel: no stack [ 662.445381][T10539] device team_slave_0 entered promiscuous mode [ 662.452415][T10539] device team_slave_1 entered promiscuous mode [ 662.522274][T10539] device macvtap1 entered promiscuous mode [ 662.541248][T10539] device team0 entered promiscuous mode [ 662.616411][T10539] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 662.701149][T10548] device team0 left promiscuous mode [ 662.710778][T10548] device team_slave_0 left promiscuous mode [ 662.716913][T10548] device team_slave_1 left promiscuous mode [ 668.326995][T10583] xt_time: unknown flags 0xc [ 668.412410][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 668.428913][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 668.643588][T10599] loop8: detected capacity change from 0 to 128 [ 668.784317][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 668.818134][T10599] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 668.896324][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 669.119270][T10396] device veth0_vlan entered promiscuous mode [ 669.200307][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 669.319209][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 669.575800][T10396] device veth1_vlan entered promiscuous mode [ 669.603376][T10396] device veth0_macvtap entered promiscuous mode [ 670.326498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 670.373913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 670.421838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 671.974912][T10396] device veth1_macvtap entered promiscuous mode [ 672.274530][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.303187][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.361481][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.435859][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.501038][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 673.557972][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 673.584361][T10396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 673.643919][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 673.723902][ T5774] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 673.897987][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 673.912051][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 675.413379][T10396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 675.425321][T10396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 676.381582][T10396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.407624][T10396] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.429144][T10396] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.457690][T10396] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.479709][T10396] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.512062][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 676.572026][ T5301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 676.612619][T10673] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 676.617732][ T4388] tipc: Disabling bearer [ 676.620466][T10673] #PF: supervisor instruction fetch in kernel mode [ 676.620481][T10673] #PF: error_code(0x0010) - not-present page [ 676.620495][T10673] PGD 50e16067 P4D 50e16067 PUD 0 [ 676.643285][T10673] Oops: 0010 [#1] PREEMPT SMP KASAN [ 676.648497][T10673] CPU: 0 PID: 10673 Comm: syz.5.1536 Not tainted 5.15.180-syzkaller #0 [ 676.650710][ T4388] tipc: Disabling bearer [ 676.656741][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 676.656757][T10673] RIP: 0010:0x0 [ 676.656783][T10673] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 676.683265][T10673] RSP: 0018:ffffc90002e8f4f8 EFLAGS: 00010246 [ 676.689347][T10673] RAX: 1ffffffff1659bc7 RBX: ffffffff8b2cde38 RCX: 0000000000000001 [ 676.697341][T10673] RDX: ffffc90002e8f5a0 RSI: 0000000000000001 RDI: ffff88807ce70000 [ 676.705350][T10673] RBP: ffffc90002e8f670 R08: ffffffff85731f11 R09: ffffed100f9ce008 [ 676.713377][T10673] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807ce70000 [ 676.721420][T10673] R13: ffff88805a428140 R14: ffffe8ffffc81208 R15: dffffc0000000000 [ 676.729540][T10673] FS: 00007f89296f16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 676.738491][T10673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.745096][T10673] CR2: ffffffffffffffd6 CR3: 0000000020be6000 CR4: 00000000003506f0 [ 676.753262][T10673] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 676.761257][T10673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 676.769256][T10673] Call Trace: [ 676.772561][T10673] [ 676.775508][T10673] bond_xdp_xmit+0x380/0x570 [ 676.780120][T10673] ? kvm_sched_clock_read+0x14/0x40 [ 676.785341][T10673] ? sched_clock_cpu+0x15/0x3b0 [ 676.790268][T10673] ? bond_xdp+0x950/0x950 [ 676.794623][T10673] ? get_page_from_freelist+0x3b8f/0x3d40 [ 676.800463][T10673] ? save_stack+0x11a/0x1e0 [ 676.804992][T10673] ? bad_range+0x77/0x2c0 [ 676.809345][T10673] ? lockdep_hardirqs_on+0x94/0x130 [ 676.814577][T10673] bq_xmit_all+0xd1d/0x1100 [ 676.819102][T10673] ? bq_enqueue+0x2e4/0x3b0 [ 676.823640][T10673] ? dev_map_enqueue+0x210/0x210 [ 676.828600][T10673] ? __lock_acquire+0x1295/0x1ff0 [ 676.833652][T10673] ? __dev_flush+0x1c0/0x1c0 [ 676.838267][T10673] ? trace_xdp_redirect+0x9e/0x230 [ 676.843409][T10673] ? xdp_do_redirect+0x6a1/0xae0 [ 676.848379][T10673] ? tun_xdp_act+0x5ac/0x880 [ 676.852992][T10673] ? local_bh_disable+0x5/0x20 [ 676.857779][T10673] ? __cant_sleep+0x270/0x270 [ 676.862476][T10673] ? __tun_build_skb+0x230/0x230 [ 676.867438][T10673] __dev_flush+0xc9/0x1c0 [ 676.871925][T10673] xdp_do_flush+0xa/0x20 [ 676.876194][T10673] tun_get_user+0x2f4a/0x40f0 [ 676.880908][T10673] ? tun_ring_recv+0xcc0/0xcc0 [ 676.885782][T10673] ? rcu_lock_release+0x5/0x20 [ 676.890581][T10673] tun_chr_write_iter+0x10c/0x1e0 [ 676.895631][T10673] vfs_write+0xacd/0xe50 [ 676.899902][T10673] ? file_end_write+0x250/0x250 [ 676.904778][T10673] ? __fget_files+0x413/0x480 [ 676.909748][T10673] ? __fdget_pos+0x1e9/0x380 [ 676.914365][T10673] ? ksys_write+0x77/0x2c0 [ 676.918808][T10673] ksys_write+0x1a2/0x2c0 [ 676.923157][T10673] ? print_irqtrace_events+0x210/0x210 [ 676.928654][T10673] ? __ia32_sys_read+0x80/0x80 [ 676.933443][T10673] ? syscall_enter_from_user_mode+0x2e/0x240 [ 676.939446][T10673] ? lockdep_hardirqs_on+0x94/0x130 [ 676.944665][T10673] ? syscall_enter_from_user_mode+0x2e/0x240 [ 676.950670][T10673] do_syscall_64+0x3b/0x80 [ 676.955112][T10673] ? clear_bhb_loop+0x15/0x70 [ 676.959804][T10673] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 676.965702][T10673] RIP: 0033:0x7f892b8a941f [ 676.970129][T10673] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 676.989731][T10673] RSP: 002b:00007f89296f1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 676.998331][T10673] RAX: ffffffffffffffda RBX: 00007f892bad2080 RCX: 00007f892b8a941f [ 677.006321][T10673] RDX: 0000000000000042 RSI: 0000200000000a40 RDI: 00000000000000c8 [ 677.014299][T10673] RBP: 00007f892b92cab1 R08: 0000000000000000 R09: 0000000000000000 [ 677.022281][T10673] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000000 [ 677.030346][T10673] R13: 0000000000000001 R14: 00007f892bad2080 R15: 00007fff32cb41f8 [ 677.038335][T10673] [ 677.041452][T10673] Modules linked in: [ 677.045360][T10673] CR2: 0000000000000000 [ 677.058030][T10673] ---[ end trace a3b85d728059438b ]--- [ 677.063504][T10673] RIP: 0010:0x0 [ 677.067117][T10673] Code: Unable to access opcode bytes at RIP 0xffffffffffffffd6. [ 677.074817][T10673] RSP: 0018:ffffc90002e8f4f8 EFLAGS: 00010246 [ 677.080883][T10673] RAX: 1ffffffff1659bc7 RBX: ffffffff8b2cde38 RCX: 0000000000000001 [ 677.088871][T10673] RDX: ffffc90002e8f5a0 RSI: 0000000000000001 RDI: ffff88807ce70000 [ 677.096838][T10673] RBP: ffffc90002e8f670 R08: ffffffff85731f11 R09: ffffed100f9ce008 [ 677.105024][T10673] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88807ce70000 [ 677.113105][T10673] R13: ffff88805a428140 R14: ffffe8ffffc81208 R15: dffffc0000000000 [ 677.121094][T10673] FS: 00007f89296f16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 677.130026][T10673] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.136607][T10673] CR2: ffffffffffffffd6 CR3: 0000000020be6000 CR4: 00000000003506f0 [ 677.144587][T10673] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 677.152568][T10673] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 677.160575][T10673] Kernel panic - not syncing: Fatal exception in interrupt [ 677.168016][T10673] Kernel Offset: disabled [ 677.172344][T10673] Rebooting in 86400 seconds..