last executing test programs: 1m57.233977053s ago: executing program 1 (id=232): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) recvmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0xf}], 0x1, 0x20, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410d00, 0x10a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a50500000000d7d86929483a930f2c70e28b47c5a00beaff8cc04257c275f6febbffdda80963ef4d4723307ab70fec7e371be2f916497c74ba124e7c3d0d0ef2d9fae6916f283d9ff87d9a2dede5f1e1268044b539e00f3a7136acde92c31d5db96585f6369be77641f27ead6e878ed48108d92d7bb3670ef346f9450f2c3f9c1430b8ec2a767823a16c87e1ff53172a95c85d3491c0fc93e6e3893d2674bfefa957b16f5de52eec758cf56a16bac6daa02a7ec3e5f1e8bb27"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) ioctl$int_in(0xffffffffffffffff, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) close(0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x0) 1m55.668478884s ago: executing program 1 (id=236): socket$inet_udp(0x2, 0x2, 0x0) syz_ublk_setup_io_uring(0x7ded, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000140)=[{0x40, 0x0, 0x0, 0x2}, {0x28, 0x1, 0x4f, 0xfffff038}, {0x6, 0x1, 0x0, 0x57c}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x9ffc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 1m52.517968544s ago: executing program 1 (id=244): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') userfaultfd(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") rename(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) unshare(0x2c020400) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r5, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0x1, 0x1}]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1m51.509832186s ago: executing program 1 (id=249): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2004ce, &(0x7f00000001c0), 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000003c0)='.\x00', 0x5db) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 1m49.103623993s ago: executing program 1 (id=253): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0xffbffffd, 0x5, 0x0, 'queue0\x00', 0xe}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socket$inet6_udplite(0xa, 0x2, 0x88) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') read$FUSE(r3, &(0x7f00000102c0)={0x2020}, 0x2020) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000025c0)=@security={'security\x00', 0xe, 0x4, 0x478, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a8, 0x3a8, 0x3a8, 0xffffffff, 0x4, &(0x7f0000000100), {[{{@ipv6={@mcast1, @mcast1, [0xff, 0xff000000, 0xff000000, 0xffffffff], [0xffffffff, 0xffffff, 0xff, 0xffffff00], 'veth0_to_team\x00', 'batadv0\x00', {0xff}, {0xff}, 0x3a, 0x1, 0x1, 0x8}, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x2, [0x0, 0x7ff], 0x6, 0x20, 0x2, [@dev={0xfe, 0x80, '\x00', 0x2f}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @empty, @private1, @mcast2, @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x2e}], 0x2}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff, 0x0, 0xff000000], [0xff, 0xff000000], 'syz_tun\x00', 'lo\x00', {0xff}, {}, 0x3b, 0x5, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2d8}}, {{@ipv6={@rand_addr=' \x01\x00', @private0, [0xffffffff, 0x0, 0xff], [0xffffff00, 0xff000000, 0xffffffff], 'vlan0\x00', 'sit0\x00', {0xff}, {0xff}, 0x2c, 0xb6, 0x7, 0x24}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) fchmod(r6, 0x29) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00'}, 0x94) write(r1, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000380)) ioctl$XFS_IOC_EXCHANGE_RANGE(0xffffffffffffffff, 0x40285881, 0x0) 1m48.456425144s ago: executing program 1 (id=257): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$system_posix_acl(&(0x7f0000002180)='./file1\x00', &(0x7f00000021c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x5}, [], {}, [], {0x10, 0x5}}, 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m47.600818231s ago: executing program 32 (id=257): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") setxattr$system_posix_acl(&(0x7f0000002180)='./file1\x00', &(0x7f00000021c0)='system.posix_acl_access\x00', &(0x7f0000000280)={{}, {0x1, 0x5}, [], {}, [], {0x10, 0x5}}, 0x24, 0x3) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m3.594329138s ago: executing program 4 (id=388): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') userfaultfd(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") rename(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) unshare(0x2c020400) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, 0x0]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 1m2.24864027s ago: executing program 4 (id=390): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x1, 0x40, "20854e8c4b94a5715f8227fd4236ff070000000000001c9d3f45f2e89c1cffa964866b4b54712851c8825a2f8de125e3470c50febcb7566c61ba4ffbb8c84e5b"}, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 58.529399969s ago: executing program 4 (id=398): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000340)={'pcmmio\x00', [0x100, 0x203, 0x1, 0x202, 0x9, 0xfd, 0x3, 0x20000000, 0xa, 0x2000000e, 0x2, 0xb51, 0x2, 0x1, 0x9b64, 0x100, 0x200, 0xa, 0x7, 0x401, 0x20000007, 0x3, 0x7, 0x2, 0x48, 0x9, 0x8, 0x423b, 0x2, 0x7, 0xa]}) 58.357984525s ago: executing program 4 (id=400): syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') userfaultfd(0x800) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$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") rename(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000100), 0x12) unshare(0x2c020400) write$tun(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x19) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r6, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}, 0x0]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 56.846140833s ago: executing program 4 (id=403): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cc, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) 52.328725018s ago: executing program 4 (id=414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@broadcast, @in=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffd, 0xa9, 0x0, 0x0, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 51.872417362s ago: executing program 33 (id=414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xb8, 0x19, 0x1, 0x4, 0x0, {{@in=@broadcast, @in=@local, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xfffffffffffffffd, 0xa9, 0x0, 0x0, 0x6, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 17.376492824s ago: executing program 6 (id=418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000040000000600000000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) syz_emit_ethernet(0x36, &(0x7f00000006c0)={@local, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x0, 0x0, @private2, @mcast2}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x52) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24000084) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) pread64(r4, 0x0, 0x0, 0x800000000000000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, 0x0, 0x0) r6 = fcntl$dupfd(r5, 0x406, r5) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) write$binfmt_elf64(r6, &(0x7f00000004c0)=ANY=[], 0xfffffdcf) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 14.624843552s ago: executing program 0 (id=519): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x4b564d04, 0x0, 0xfffffffffffffff9}]}) 14.553807125s ago: executing program 6 (id=520): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = msgget$private(0x0, 0x0) msgctl$MSG_INFO(r3, 0xc, &(0x7f0000000000)=""/117) 14.243165635s ago: executing program 0 (id=521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYRES64, @ANYRES16, @ANYBLOB="2a8a436fbb94a01652fc9870dbcbb4bfe1e8ef421582116a9a530aff4adad693fac541798cfb", @ANYRES32], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee7, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x4000000) socket(0x10, 0x3, 0x0) r6 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) close(r6) r8 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x210) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000002c0)='adfs\x00', 0x800a, 0x0) execveat$binfmt(0xffffffffffffff9c, r4, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 13.291805975s ago: executing program 2 (id=523): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x49c, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fchown(r4, 0x0, 0x0) 12.120305712s ago: executing program 0 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_vhci(0x0, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x2, 0x0, [0x80000000, 0x9, 0x8, 0x3, 0x5, 0xb, 0xfffffe01, 0x7]}) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000001c0)=0x1) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x1f3, @time={0x6, 0x3}, 0xf, {0x0, 0x6}, 0x8, 0x0, 0x1}) r7 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)=ANY=[], 0x0) setsockopt$sock_timeval(r7, 0x1, 0x14, &(0x7f0000000080)={0x77359400}, 0x10) write$proc_mixer(r5, &(0x7f0000000380)=ANY=[@ANYBLOB='OGAIN \'C'], 0x4000) close(r5) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x24}}, 0x0) 12.103213343s ago: executing program 2 (id=527): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'/11], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) 12.045868215s ago: executing program 3 (id=528): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_open_dev$vim2m(0x0, 0x0, 0x2) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f000092f000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x12f}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) 10.752980926s ago: executing program 2 (id=529): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000540), 0x200000b1, 0x8a681) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='fd\x00') bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r2}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) mkdir(0x0, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x80047437, 0x2) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0d05604, &(0x7f0000000080)={0x1, @raw_data="e2713a787c2fa96c68eecfb6effe5f1291bdc4f0c000fae6961f1606d1fedf218381a14c7a5a7c78073e1abe4ff13ac1f2419d6af2e372cf7a7b2b280fde213f7df01f0896d81346f6d0b8e46f0c22c22e7db8ba30a82747bab1a5e82f3e217caee4997a7886da11a75d7ae3de3ca9f7f45dbac849d457c9008504d0eea695085713776f2cdf66b6aeda9722c8678bb2a6dcea05a0639723a18d7f8b313b3873e304ab2b163618aaf2b1cf287579751a1034d52e8d7ff8148db72cc21375746466808148306ab0e3"}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick=0x320, {0xc}, {}, @quote={{0x3, 0x8}, 0x7e59}}, {0x0, 0x0, 0x0, 0x0, @tick=0x9, {}, {}, @quote}], 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000340)=@ethtool_wolinfo={0x5, 0x2, 0xffffffd9, "1676e8f1be06"}}) socket$nl_route(0x10, 0x3, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x985, 0x12) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) 9.69380009s ago: executing program 6 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000005c0)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000380)={0x7162, r3}, 0x0) landlock_restrict_self(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r5) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r6, 0x701, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_QUERYBUF(r7, 0xc0585609, &(0x7f000002c5c0)=@multiplanar_mmap={0x34, 0xe, 0x4, 0x0, 0x48ed05e5, {}, {0x4, 0x8, 0x0, 0x9, 0x0, 0x0, "d77f0596"}, 0x2, 0x1, {0x0}, 0x5}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x2) 8.228966216s ago: executing program 6 (id=533): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setrlimit(0x0, &(0x7f0000000180)={0x1ff, 0x7bf}) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) getgid() r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 8.181915338s ago: executing program 5 (id=534): creat(&(0x7f0000000200)='./file0\x00', 0x17e) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = fanotify_init(0x4, 0x101000) fanotify_mark(r4, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fanotify_init(0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}}, 0x24}}, 0x0) 7.291490217s ago: executing program 6 (id=535): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x5) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = timerfd_create(0x8, 0x80000) close_range(r1, 0xffffffffffffffff, 0x6) prlimit64(r0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbef7, 0x8031, 0xffffffffffffffff, 0x4000) r3 = syz_clone(0x8000, 0x0, 0xfe55, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) read$char_usb(r5, &(0x7f0000000340)=""/170, 0xaa) 6.082977435s ago: executing program 6 (id=536): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1}, @address_request={0x11, 0x2}}}}}, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) socket$kcm(0x10, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x6, &(0x7f0000000080)=0x45, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x40187013, &(0x7f0000000080)={0x1, 0x0, {0x0, 0x2}}) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r5, 0x3312, 0x7) socket$nl_route(0x10, 0x3, 0x0) 6.075715325s ago: executing program 0 (id=537): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x49c, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fchown(r4, 0x0, 0x0) 5.366000848s ago: executing program 5 (id=538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.00523236s ago: executing program 3 (id=539): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB='!\x00'/11], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x2c, r7, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181c42, 0x56) 4.889405963s ago: executing program 2 (id=540): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e457152031", 0xae, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb8", 0x21, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5", 0x2d}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.593156733s ago: executing program 5 (id=541): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000240)=@abs, &(0x7f0000000500)=0x6e, 0x400) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) socket$netlink(0x10, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x3) socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) write$char_usb(r4, &(0x7f0000000000)='-0', 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000040)) syz_open_pts(r2, 0x3a5101) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="24fb3300", @ANYRES16=0x0, @ANYBLOB="01002abd7000ffdbdf252600000008000300", @ANYRES32=0x0, @ANYBLOB="0400340004002a00"], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0xc00) sendmsg$nl_generic(r6, 0x0, 0x8410) write$sysctl(0xffffffffffffffff, 0x0, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_GET_SCSI_ID(r7, 0x2276, &(0x7f0000000380)) syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.485982747s ago: executing program 0 (id=542): socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xffffffffffff57a7, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/profiling', 0x1, 0x1cc) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="392c000013000347", 0x8}], 0x1) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r6, 0x40045402, &(0x7f0000000440)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) write(r0, &(0x7f00000000c0), 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000080)={0xf0f046}) 3.244820496s ago: executing program 3 (id=543): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x20000000fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x20000000) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x6048800) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80086f53, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xffffffffffffffff, 0x0, 0x0, 0x1000001000, 0x46}, 0x0, &(0x7f0000000000)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) 2.027867035s ago: executing program 0 (id=544): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x3, 0xfffffffffffffffd) r5 = request_key(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, &(0x7f0000000500)='\xbc50\xf4\xc4Fv:\xc0\xe3\x97\x8cL\x85\xf0\x9bhq\xa9', 0x0) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f00000001c0)='bfs\x00', 0x8000, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r6, 0xc0040d07, &(0x7f0000000040)=0x122) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x884) recvmsg(r7, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 1.978566547s ago: executing program 5 (id=545): kexec_load(0x3, 0x3, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f42", 0x99, 0x5, 0xffffffff}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb8", 0x21, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}], 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c99", 0x3c}, {0x0}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea94917082d62230167", 0x9e}], 0x4}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe186347", 0x16}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.85374786s ago: executing program 3 (id=546): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r2, 0x0) recvmmsg(r2, &(0x7f0000002cc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0xf}], 0x1, 0x20, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x410d00, 0x10a) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000006b113200000000008510000002000000850000000500000095003300000000009500a50500000000d7d86929483a930f2c70e28b47c5a00beaff8cc04257c275f6febbffdda80963ef4d4723307ab70fec7e371be2f916497c74ba124e7c3d0d0ef2d9fae6916f283d9ff87d9a2dede5f1e1268044b539e00f3a7136acde92c31d5db96585f6369be77641f27ead6e878ed48108d92d7bb3670ef346f9450f2c3f9c1430b8ec2a767823a16c87e1ff53172a95c85d3491c0fc93e6e3893d2674bfefa957b16f5de52eec758cf56a16bac6daa02a7ec3e5f1e8bb27"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r4, 0x5421, &(0x7f0000000440)=0x6) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0xa) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x0) 1.614048188s ago: executing program 2 (id=547): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000240)=0x0) move_pages(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000ffc000/0x4000)=nil], 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r3, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x80000300, 0x80000330, 0x80000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB]}, 0x78) r5 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49d, &(0x7f0000000100)={0x0, 0x79af, 0x2, 0x8000, 0x400246}, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) io_setup(0x1, &(0x7f0000000000)=0x0) io_getevents(r6, 0xffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00') 1.56418723s ago: executing program 3 (id=548): creat(&(0x7f0000000200)='./file0\x00', 0x17e) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(r0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x8000000001, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='virtiofs\x00', 0x5, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = fanotify_init(0x4, 0x101000) fanotify_mark(r4, 0x1, 0x40001019, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006180)={0x2020}, 0x2020) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) fanotify_init(0x4, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}}}, 0x24}}, 0x0) 777.456335ms ago: executing program 3 (id=549): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20000, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x259fdc02, {0x0, 0x0, 0x0, r8, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x1ff, 0x20000000, 0x9, 0x77}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x2fc}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x2000c891}, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0xb}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) 532.375273ms ago: executing program 5 (id=550): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000080), &(0x7f0000000100)=0x4) 201.851283ms ago: executing program 5 (id=551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0x1, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 2 (id=552): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x21, 0x2, 0xa) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000024c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x49c, 0x0, 0x0, 0x0, 0xfffffffd}, @local, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008000}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) fchown(r4, 0x0, 0x0) kernel console output (not intermixed with test programs): y [ 56.008998][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.017693][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.027392][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.058585][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.067731][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.077198][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 56.086425][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 56.095119][ T4247] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.102213][ T4247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.111727][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.120271][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.128500][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 56.138960][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.154647][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.164315][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.173021][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.183089][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.203420][ T4197] device veth0_vlan entered promiscuous mode [ 56.213782][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.222774][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.232129][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.239729][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 56.249367][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 56.257804][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.264853][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.274207][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.283042][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.292377][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 56.301319][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 56.328081][ T4190] device veth0_vlan entered promiscuous mode [ 56.337391][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 56.346467][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 56.354967][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 56.360288][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 56.361337][ T4232] Bluetooth: hci1: command 0x041b tx timeout [ 56.369699][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 56.380586][ T4232] Bluetooth: hci0: command 0x041b tx timeout [ 56.386746][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 56.389099][ T4232] Bluetooth: hci2: command 0x041b tx timeout [ 56.398392][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 56.411633][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 56.419886][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 56.428496][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.436939][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.440366][ T4233] Bluetooth: hci4: command 0x041b tx timeout [ 56.448242][ T4202] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 56.475843][ T4197] device veth1_vlan entered promiscuous mode [ 56.485126][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.501593][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 56.509506][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.525361][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.558617][ T4190] device veth1_vlan entered promiscuous mode [ 56.576337][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 56.586420][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 56.602837][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 56.615253][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 56.660837][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.668318][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.689366][ T4197] device veth0_macvtap entered promiscuous mode [ 56.704114][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.715244][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.728784][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.743163][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.762497][ T4197] device veth1_macvtap entered promiscuous mode [ 56.788210][ T4202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.797281][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.805367][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 56.814749][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 56.823576][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 56.832659][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 56.841155][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 56.848532][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 56.858521][ T4190] device veth0_macvtap entered promiscuous mode [ 56.868466][ T4190] device veth1_macvtap entered promiscuous mode [ 56.880879][ T4189] device veth0_vlan entered promiscuous mode [ 56.891159][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 56.899695][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 56.908465][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 56.918624][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 56.949340][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.963690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 56.973812][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 56.988752][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.998404][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.009966][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.023279][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.032511][ T4189] device veth1_vlan entered promiscuous mode [ 57.041694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.052162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.060974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.069521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.079450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.088272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.097396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.108630][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.117719][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.126778][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.136217][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.166497][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.177103][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.188581][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.213859][ T4189] device veth0_macvtap entered promiscuous mode [ 57.221640][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 57.229732][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.239712][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.248384][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.257163][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.265956][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.277703][ T4197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.286563][ T4197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.295868][ T4197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.304616][ T4197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.330538][ T4189] device veth1_macvtap entered promiscuous mode [ 57.372972][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.382287][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 57.392898][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 57.418677][ T4196] device veth0_vlan entered promiscuous mode [ 57.444190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.455480][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.464125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 57.473969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 57.482976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.491497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.499220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 57.507027][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 57.515663][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.526741][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.536711][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.547516][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.559348][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.575060][ T4196] device veth1_vlan entered promiscuous mode [ 57.582051][ T4202] device veth0_vlan entered promiscuous mode [ 57.600253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 57.611033][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 57.619650][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 57.629361][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.642690][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.652781][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.663466][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.674650][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.686791][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.695674][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.704711][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.714413][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.732367][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 57.742777][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 57.745761][ T1529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.760616][ T1529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.765127][ T4202] device veth1_vlan entered promiscuous mode [ 57.799181][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.809077][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.821887][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.834331][ T4196] device veth0_macvtap entered promiscuous mode [ 57.847587][ T4196] device veth1_macvtap entered promiscuous mode [ 57.900579][ T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.909230][ T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.919860][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 57.932276][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 57.942300][ T701] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 57.952220][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.967110][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 57.976404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 57.985370][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.988707][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.004272][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.014325][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.025034][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.035092][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.045711][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.057539][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.078325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.087143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.096164][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.107104][ T4202] device veth0_macvtap entered promiscuous mode [ 58.121535][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.128965][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.144309][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.150344][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.164106][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.180586][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.197132][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.207896][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.218947][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.238269][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 58.247589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.256626][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.265370][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.281866][ T4202] device veth1_macvtap entered promiscuous mode [ 58.291871][ T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.299688][ T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.346152][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.374566][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.384017][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.392839][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.403248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 58.411869][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 58.425507][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.437380][ T4231] Bluetooth: hci2: command 0x040f tx timeout [ 58.443144][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.453772][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.465242][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.475197][ T4231] Bluetooth: hci0: command 0x040f tx timeout [ 58.475413][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.486538][ T4231] Bluetooth: hci1: command 0x040f tx timeout [ 58.493960][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.498240][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 58.507898][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.520697][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 58.525191][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.541387][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.550849][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 58.552225][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.568461][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.578596][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.589319][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.600110][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.610891][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.621010][ T4202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.631715][ T4202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.642930][ T4202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.660733][ T4202] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.669579][ T4202] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.680065][ T4202] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.688849][ T4202] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.700591][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 58.709201][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 58.724874][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 58.732001][ T4266] loop1: detected capacity change from 0 to 2048 [ 58.736688][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 58.774349][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.783157][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 58.826732][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 58.838049][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.873485][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 58.873523][ T4266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 58.983421][ T4264] infiniband syz1: set active [ 58.990372][ T4234] xfrm0 speed is unknown, defaulting to 1000 [ 58.996581][ T4264] infiniband syz1: added xfrm0 [ 59.031526][ T4266] Zero length message leads to an empty skb [ 59.036640][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.073309][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.106366][ T4264] RDS/IB: syz1: added [ 59.117022][ T4264] smc: adding ib device syz1 with port count 1 [ 59.122684][ T701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.130587][ T4264] smc: ib device syz1 port 1 has pnetid [ 59.137976][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.159449][ T701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.172534][ T4178] xfrm0 speed is unknown, defaulting to 1000 [ 59.645066][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 59.645139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 59.700489][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.730731][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.778364][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.813772][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.878142][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.918732][ T9] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 59.925790][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 59.968823][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 60.000272][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.000272][ T9] [ 60.019080][ T9] EXT4-fs (loop1): Total free blocks count 0 [ 60.025477][ T9] EXT4-fs (loop1): Free/Dirty block details [ 60.032663][ T9] EXT4-fs (loop1): free_blocks=4096 [ 60.038043][ T9] EXT4-fs (loop1): dirty_blocks=608 [ 60.043847][ T9] EXT4-fs (loop1): Block reservation details [ 60.069147][ T9] EXT4-fs (loop1): i_reserved_data_blocks=38 [ 60.109768][ T9] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 577 with error 28 [ 60.177881][ T9] EXT4-fs (loop1): This should not happen!! Data will be lost [ 60.177881][ T9] [ 62.059934][ C0] sched: RT throttling activated [ 62.067711][ T4270] Bluetooth: hci1: command 0x0419 tx timeout [ 62.078846][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 62.084961][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 62.254878][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 62.291688][ T4291] tipc: Started in network mode [ 62.296780][ T4291] tipc: Node identity ce20a7507e08, cluster identity 4711 [ 62.342849][ T4291] tipc: Enabled bearer , priority 0 [ 62.373837][ T4293] device syzkaller0 entered promiscuous mode [ 62.422457][ T4296] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 62.487542][ T4291] tipc: Resetting bearer [ 62.525633][ T4290] tipc: Resetting bearer [ 62.568875][ T4290] tipc: Disabling bearer [ 62.622189][ T4270] Bluetooth: hci4: command 0x0419 tx timeout [ 62.628342][ T4270] Bluetooth: hci3: command 0x0419 tx timeout [ 62.665419][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 62.811511][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 62.924852][ T4305] loop2: detected capacity change from 0 to 512 [ 63.053357][ T4264] xfrm0 speed is unknown, defaulting to 1000 [ 63.064329][ T4305] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 63.065717][ T4305] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 63.077742][ T4305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 63.079344][ T4305] EXT4-fs (loop2): orphan cleanup on readonly fs [ 63.081879][ T4305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.11: bg 0: block 361: padding at end of block bitmap is not set [ 63.084151][ T4305] EXT4-fs (loop2): Remounting filesystem read-only [ 63.084180][ T4305] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 63.084537][ T4305] EXT4-fs (loop2): Remounting filesystem read-only [ 63.084554][ T4305] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.11: attempt to clear invalid blocks 33619980 len 1 [ 63.084850][ T4305] EXT4-fs (loop2): Remounting filesystem read-only [ 63.086046][ T4305] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11: invalid indirect mapped block 1811939328 (level 0) [ 63.088104][ T4305] EXT4-fs (loop2): Remounting filesystem read-only [ 63.088205][ T4305] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.11: invalid indirect mapped block 2185560079 (level 1) [ 63.090510][ T4305] EXT4-fs (loop2): Remounting filesystem read-only [ 63.109889][ T4305] EXT4-fs (loop2): 1 truncate cleaned up [ 63.460607][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.468321][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.543065][ T4309] loop4: detected capacity change from 0 to 1024 [ 63.554018][ T4305] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 63.591488][ T4306] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 63.611100][ T4309] ======================================================= [ 63.611100][ T4309] WARNING: The mand mount option has been deprecated and [ 63.611100][ T4309] and is ignored by this kernel. Remove the mand [ 63.611100][ T4309] option from the mount to silence this warning. [ 63.611100][ T4309] ======================================================= [ 63.664708][ C0] vkms_vblank_simulate: vblank timer overrun [ 63.673436][ T4310] loop1: detected capacity change from 0 to 1024 [ 63.890277][ T4309] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 63.909667][ T4309] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.921603][ T4310] EXT4-fs (loop1): mounted filesystem without journal. Opts: nouid32,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000009,commit=0x0000000000000000,,errors=continue. Quota mode: none. [ 63.944812][ T4321] loop3: detected capacity change from 0 to 512 [ 63.995789][ T4322] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.11: dx entry: limit 0 != root limit 125 [ 64.007880][ T4322] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.11: Corrupt directory, running e2fsck is recommended [ 64.263957][ T4321] EXT4-fs (loop3): 1 truncate cleaned up [ 64.307181][ T4321] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 64.416520][ T4310] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.439959][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.449950][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.459951][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 64.579963][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.589947][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 64.731691][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 64.950075][ T4321] loop_set_status: loop3 () has still dirty pages (nrpages=64) [ 64.959964][ T25] audit: type=1326 audit(1780327202.143:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 64.983707][ C0] vkms_vblank_simulate: vblank timer overrun [ 65.070080][ T25] audit: type=1800 audit(1780327202.233:3): pid=4327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.12" name="file1" dev="loop3" ino=13 res=0 errno=0 [ 65.554256][ T4340] virtio-fs: tag not found [ 65.589966][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 65.949958][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.959953][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.969956][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 65.979955][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #18a!!! [ 66.440712][ T4270] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 66.472230][ T25] audit: type=1326 audit(1780327202.233:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.565217][ T25] audit: type=1326 audit(1780327202.233:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.591345][ T25] audit: type=1326 audit(1780327202.243:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.615073][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.622909][ T25] audit: type=1326 audit(1780327202.243:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.646661][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.688195][ T25] audit: type=1326 audit(1780327202.243:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.713049][ T25] audit: type=1326 audit(1780327202.243:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.736770][ C0] vkms_vblank_simulate: vblank timer overrun [ 66.743615][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.753441][ T25] audit: type=1326 audit(1780327202.243:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.798154][ T25] audit: type=1326 audit(1780327202.243:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4332 comm="syz.4.17" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f32235d5e59 code=0x7ffc0000 [ 66.944882][ T4270] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 67.010199][ T13] usb 1-1: Using ep0 maxpacket: 16 [ 67.024758][ T4270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.116802][ T4270] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.150703][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.206398][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 67.261898][ T4270] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 67.306246][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 67.357138][ T4270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.437475][ T13] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 67.490210][ T4334] loop4: detected capacity change from 0 to 512 [ 67.515069][ T4270] usb 2-1: config 0 descriptor?? [ 67.520936][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.551008][ T13] usb 1-1: config 0 descriptor?? [ 67.561407][ T4331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.706439][ T4356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22'. [ 67.734468][ T4334] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue. Quota mode: writeback. [ 67.750332][ T4334] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.937597][ T4234] usb 2-1: USB disconnect, device number 2 [ 68.000261][ T4270] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.036145][ T13] microsoft 0003:045E:07DA.0001: unbalanced collection at end of report description [ 68.066279][ T4366] loop3: detected capacity change from 0 to 1024 [ 68.074023][ T13] microsoft 0003:045E:07DA.0001: parse failed [ 68.081832][ T13] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 68.204793][ T4277] hfsplus: b-tree write err: -5, ino 25 [ 68.220584][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 68.228827][ T4277] hfsplus: b-tree write err: -5, ino 2 [ 68.235871][ T4277] hfsplus: b-tree write err: -5, ino 26 [ 68.266702][ T4234] usb 1-1: USB disconnect, device number 2 [ 68.329995][ T1324] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 68.338450][ T4368] loop3: detected capacity change from 0 to 512 [ 68.356908][ T4368] EXT4-fs error (device loop3): ext4_orphan_get:1406: inode #15: comm syz.3.28: inode has both inline data and extents flags [ 68.372823][ T4368] EXT4-fs error (device loop3): ext4_orphan_get:1411: comm syz.3.28: couldn't read orphan inode 15 (err -117) [ 68.385220][ T4368] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 68.410765][ T4270] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x7A, skipping [ 68.415738][ T4181] udevd[4181]: incorrect ext4 checksum on /dev/loop3 [ 68.421492][ T4270] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 68.486986][ T4371] loop1: detected capacity change from 0 to 16 [ 68.535566][ T4371] erofs: (device loop1): mounted with root inode @ nid 36. [ 68.552688][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 68.563698][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 68.572856][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 356351 of nid 36 [ 68.582916][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 68.592584][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 352255 of nid 36 [ 68.602659][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 68.611728][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 68.621788][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 68.630988][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 83 @ nid 36 [ 68.640084][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 339967 of nid 36 [ 68.650127][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 82 @ nid 36 [ 68.659163][ T4371] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 80 of nid 36 [ 68.668680][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 81 @ nid 36 [ 68.680366][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 331775 of nid 36 [ 68.691128][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 80 @ nid 36 [ 68.701013][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 78 @ nid 36 [ 68.710090][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 77 @ nid 36 [ 68.710417][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.719121][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 315391 of nid 36 [ 68.740051][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 76 @ nid 36 [ 68.749152][ T4371] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 72 of nid 36 [ 68.758606][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 73 @ nid 36 [ 68.767674][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 299007 of nid 36 [ 68.777706][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 72 @ nid 36 [ 68.786447][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 68.786782][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 71 @ nid 36 [ 68.805537][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 68.814896][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 70 @ nid 36 [ 68.823959][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 286719 of nid 36 [ 68.831948][ T1324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 68.834003][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 69 @ nid 36 [ 68.855904][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 68.865247][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 68 @ nid 36 [ 68.874324][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 67 @ nid 36 [ 68.883439][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 66 @ nid 36 [ 68.892522][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 65 @ nid 36 [ 68.901614][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 64 @ nid 36 [ 68.910767][ T4371] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 62 of nid 36 [ 68.920202][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 63 @ nid 36 [ 68.929239][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 258047 of nid 36 [ 68.934205][ T1324] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 68.939297][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 62 @ nid 36 [ 68.957345][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 253951 of nid 36 [ 68.967404][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 61 @ nid 36 [ 68.976483][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 68.983702][ T4380] loop3: detected capacity change from 0 to 16 [ 68.985823][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 60 @ nid 36 [ 69.001022][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 59 @ nid 36 [ 69.010148][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 57 @ nid 36 [ 69.019187][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 56 @ nid 36 [ 69.019994][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.028294][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 55 @ nid 36 [ 69.045327][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 225279 of nid 36 [ 69.055369][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 54 @ nid 36 [ 69.064438][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 69.073763][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 53 @ nid 36 [ 69.082827][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 217087 of nid 36 [ 69.092856][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 52 @ nid 36 [ 69.101920][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 51 @ nid 36 [ 69.110976][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 50 @ nid 36 [ 69.120025][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 49 @ nid 36 [ 69.129048][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 200703 of nid 36 [ 69.139057][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 48 @ nid 36 [ 69.148199][ T4371] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 69.157627][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 43 @ nid 36 [ 69.166691][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 176127 of nid 36 [ 69.176706][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 42 @ nid 36 [ 69.185777][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 172031 of nid 36 [ 69.195810][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 41 @ nid 36 [ 69.204916][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 39 @ nid 36 [ 69.213997][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 38 @ nid 36 [ 69.220207][ T4380] erofs: (device loop3): mounted with root inode @ nid 36. [ 69.223069][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 37 @ nid 36 [ 69.239238][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 69.248563][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 36 @ nid 36 [ 69.257638][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 35 @ nid 36 [ 69.266709][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 34 @ nid 36 [ 69.275774][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 33 @ nid 36 [ 69.284825][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 32 @ nid 36 [ 69.293875][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 31 @ nid 36 [ 69.302994][ T4371] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 28 of nid 36 [ 69.312395][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 29 @ nid 36 [ 69.321457][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 118783 of nid 36 [ 69.331470][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 28 @ nid 36 [ 69.340522][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 27 @ nid 36 [ 69.349557][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 110591 of nid 36 [ 69.359593][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 26 @ nid 36 [ 69.368653][ T4371] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 106495 of nid 36 [ 69.378651][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 25 @ nid 36 [ 69.387699][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 69.396998][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 69.406052][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 23 @ nid 36 [ 69.415101][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 22 @ nid 36 [ 69.424160][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 21 @ nid 36 [ 69.433212][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 69.442516][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 20 @ nid 36 [ 69.451568][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 19 @ nid 36 [ 69.460608][ T4371] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 69.469885][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 18 @ nid 36 [ 69.478935][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 17 @ nid 36 [ 69.487978][ T4371] erofs: (device loop1): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 69.497439][ T4371] attempt to access beyond end of device [ 69.497439][ T4371] loop1: rw=524288, want=13478624080, limit=16 [ 69.509213][ T4371] attempt to access beyond end of device [ 69.509213][ T4371] loop1: rw=524288, want=56, limit=16 [ 69.520156][ T4371] attempt to access beyond end of device [ 69.520156][ T4371] loop1: rw=524288, want=40, limit=16 [ 69.531079][ T4371] attempt to access beyond end of device [ 69.531079][ T4371] loop1: rw=524288, want=96, limit=16 [ 69.542039][ T4371] attempt to access beyond end of device [ 69.542039][ T4371] loop1: rw=524288, want=32, limit=16 [ 69.552989][ T4371] attempt to access beyond end of device [ 69.552989][ T4371] loop1: rw=524288, want=15495015312, limit=16 [ 69.564834][ T4371] attempt to access beyond end of device [ 69.564834][ T4371] loop1: rw=524288, want=15495015288, limit=16 [ 69.595435][ T4374] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36 [ 69.611279][ T1324] usb 5-1: config 0 descriptor?? [ 69.643017][ T4374] attempt to access beyond end of device [ 69.643017][ T4374] loop1: rw=0, want=64, limit=16 [ 69.736723][ T4270] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.751457][ T4270] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.759688][ T4270] usb 3-1: Product: syz [ 69.771886][ T4270] usb 3-1: Manufacturer: syz [ 69.774322][ T4374] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95] [ 69.779731][ T4270] usb 3-1: SerialNumber: syz [ 71.800811][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.807390][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.890096][ T4270] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 71.896495][ T4270] cdc_ncm 3-1:1.0: bind() failure [ 71.934732][ T4270] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 71.956594][ T1324] usbhid 5-1:0.0: can't add hid device: -71 [ 71.968608][ T1324] usbhid: probe of 5-1:0.0 failed with error -71 [ 71.976724][ T4270] cdc_ncm 3-1:1.1: bind() failure [ 72.167579][ T1324] usb 5-1: USB disconnect, device number 2 [ 74.158826][ T21] cfg80211: failed to load regulatory.db [ 74.204380][ T4417] device bridge1 entered promiscuous mode [ 74.306232][ T4270] usb 3-1: USB disconnect, device number 2 [ 76.724002][ T4443] loop1: detected capacity change from 0 to 128 [ 76.821004][ T4443] EXT4-fs (loop1): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 76.896544][ T4443] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.992295][ T4449] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.833735][ T4469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.58'. [ 80.412581][ T4474] virtio-fs: tag not found [ 81.197377][ T4477] loop1: detected capacity change from 0 to 1024 [ 81.423689][ T4483] loop1: detected capacity change from 0 to 512 [ 82.496369][ T4483] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.693639][ T4483] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 83.114343][ T4483] EXT4-fs (loop1): 1 truncate cleaned up [ 83.130098][ T4483] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 86.098480][ T4510] loop1: detected capacity change from 0 to 1024 [ 86.641722][ T4509] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.661702][ T4510] hfsplus: catalog name length corrupted [ 86.667564][ T4510] hfsplus: failed to load root directory [ 86.768527][ T4513] tipc: Enabled bearer , priority 0 [ 86.789856][ T4513] device syzkaller0 entered promiscuous mode [ 86.833209][ T4513] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 86.896167][ T4513] tipc: Resetting bearer [ 88.948583][ T4512] tipc: Resetting bearer [ 89.402704][ T4512] tipc: Disabling bearer [ 89.610283][ T2302] tipc: Node number set to 2955454288 [ 89.790596][ T13] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.140024][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 90.270283][ T13] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.293856][ T13] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.303600][ T4602] virtio-fs: tag not found [ 90.387939][ T4598] loop1: detected capacity change from 0 to 2048 [ 90.500232][ T13] usb 3-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 90.516690][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.527500][ T4598] UDF-fs: warning (device loop1): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 90.550333][ T13] usb 3-1: Product: syz [ 90.554547][ T13] usb 3-1: Manufacturer: syz [ 90.559148][ T13] usb 3-1: SerialNumber: syz [ 91.083196][ T13] usb 3-1: 0:1 : does not exist [ 91.102183][ T13] usb 3-1: BAAD MICROPHONE c_chmask mismatch [ 91.180062][ T4235] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.204406][ T13] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 91.251456][ T13] usb 3-1: USB disconnect, device number 3 [ 91.314500][ T4618] loop0: detected capacity change from 0 to 512 [ 91.429827][ T4618] loop0: detected capacity change from 0 to 2048 [ 91.440058][ T4235] usb 5-1: Using ep0 maxpacket: 16 [ 91.494194][ T4624] loop2: detected capacity change from 0 to 1024 [ 91.553775][ T4409] udevd[4409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.600288][ T4235] usb 5-1: unable to get BOS descriptor or descriptor too short [ 91.641538][ T4628] loop3: detected capacity change from 0 to 1024 [ 91.706557][ T4628] EXT4-fs (loop3): Unrecognized mount option "euid=00000000000000000000" or missing value [ 91.731219][ T4235] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 144, changing to 7 [ 91.771341][ T4624] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 91.907183][ T4633] EXT4-fs (loop2): resizing filesystem from 512 to 0 blocks [ 91.914868][ T4633] EXT4-fs warning (device loop2): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 92.220470][ T4235] usb 5-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice= 0.40 [ 92.254159][ T4235] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.284538][ T4235] usb 5-1: Product: syz [ 92.288830][ T4235] usb 5-1: Manufacturer: syz [ 92.293579][ T4235] usb 5-1: SerialNumber: syz [ 92.554525][ T4635] virtio-fs: tag not found [ 92.650219][ T4235] snd-usb-audio: probe of 5-1:1.0 failed with error -71 [ 92.690302][ T4235] snd-usb-audio: probe of 5-1:1.1 failed with error -71 [ 92.742752][ T4235] snd-usb-audio: probe of 5-1:1.2 failed with error -71 [ 92.789997][ T4235] usb 5-1: USB disconnect, device number 3 [ 93.511255][ T4640] loop2: detected capacity change from 0 to 2048 [ 93.556107][ T4640] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.673617][ T4640] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 93.707058][ T4640] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,mblk_io_submit,quota,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: writeback. [ 93.832603][ T4642] loop1: detected capacity change from 0 to 2048 [ 93.894796][ T4648] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.89: bg 0: block 234: padding at end of block bitmap is not set [ 93.951104][ T4650] loop4: detected capacity change from 0 to 256 [ 93.968476][ T4648] EXT4-fs (loop2): Remounting filesystem read-only [ 94.015627][ T4642] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 94.678130][ T4656] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 95.071341][ T4672] virtio-fs: tag not found [ 96.528986][ T4685] loop3: detected capacity change from 0 to 1024 [ 96.636078][ T4685] hfsplus: xattr search failed [ 97.017521][ T4696] syz.4.106 uses obsolete (PF_INET,SOCK_PACKET) [ 98.612653][ T4713] virtio-fs: tag not found [ 99.629532][ T4716] capability: warning: `syz.0.96' uses deprecated v2 capabilities in a way that may be insecure [ 100.601254][ T4710] syz.2.108 (4710) used greatest stack depth: 18512 bytes left [ 101.247534][ T4726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 102.912005][ T4750] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 103.097354][ T4752] loop2: detected capacity change from 0 to 512 [ 103.868283][ T4752] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 103.880434][ T4752] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.702584][ T4769] virtio-fs: tag not found [ 106.909304][ T4774] loop0: detected capacity change from 0 to 2048 [ 106.993015][ T4774] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 107.016903][ T4776] loop2: detected capacity change from 0 to 2048 [ 107.669801][ T4776] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 107.736780][ T4776] ext4 filesystem being mounted at /24/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 111.222675][ T4820] virtio-fs: tag not found [ 111.881737][ T4823] process 'syz.2.137' launched './file0' with NULL argv: empty string added [ 113.192549][ T4826] loop2: detected capacity change from 0 to 2048 [ 113.236575][ T4829] Can't find a SQUASHFS superblock on loop4 [ 113.262600][ T4826] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.720149][ T2302] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 114.919123][ T4178] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.510105][ T4178] usb 3-1: Using ep0 maxpacket: 8 [ 115.900214][ T4178] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 116.038074][ T4178] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 116.174364][ T4178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 116.232545][ T4178] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.305971][ T4178] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.335145][ T4178] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 116.340219][ T2302] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 116.344937][ T4178] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.366372][ T2302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.404368][ T2302] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.453461][ T2302] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 116.493643][ T2302] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.524994][ T2302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.559842][ T2302] usb 2-1: config 0 descriptor?? [ 116.760210][ T4178] usb 3-1: usb_control_msg returned -32 [ 116.768437][ T4178] usbtmc 3-1:16.0: can't read capabilities [ 117.480432][ T4870] udc-core: couldn't find an available UDC or it's busy [ 117.794706][ T2302] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 117.844692][ T2302] plantronics 0003:047F:FFFF.0002: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 117.860275][ T4870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.875298][ T4870] udc-core: couldn't find an available UDC or it's busy [ 117.885806][ T4870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 117.982931][ T4870] udc-core: couldn't find an available UDC or it's busy [ 117.995958][ T4870] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.532354][ T4877] virtio-fs: tag not found [ 119.138826][ T4876] loop4: detected capacity change from 0 to 512 [ 119.155154][ T4502] Bluetooth: hci0: command 0x0406 tx timeout [ 119.166214][ T4876] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 119.201671][ T4178] usb 2-1: USB disconnect, device number 3 [ 119.215501][ T4876] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 119.250309][ T4874] fido_id[4874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 119.281963][ T4876] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 119.296959][ T4876] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.314291][ T4876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.151: bg 0: block 361: padding at end of block bitmap is not set [ 119.332705][ T4876] EXT4-fs (loop4): Remounting filesystem read-only [ 119.339268][ T4876] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 119.350122][ T4876] EXT4-fs (loop4): Remounting filesystem read-only [ 119.359867][ T4876] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.151: attempt to clear invalid blocks 33619980 len 1 [ 119.380967][ T4876] EXT4-fs (loop4): Remounting filesystem read-only [ 119.388542][ T4876] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.151: invalid indirect mapped block 1811939328 (level 0) [ 119.408582][ T4876] EXT4-fs (loop4): Remounting filesystem read-only [ 119.415675][ T4876] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.151: invalid indirect mapped block 2185560079 (level 1) [ 119.436514][ T4876] EXT4-fs (loop4): Remounting filesystem read-only [ 119.443586][ T4876] EXT4-fs (loop4): 1 truncate cleaned up [ 119.449346][ T4876] EXT4-fs (loop4): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 119.729243][ T4890] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.151: dx entry: limit 0 != root limit 125 [ 119.741042][ T4890] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.151: Corrupt directory, running e2fsck is recommended [ 122.880680][ T4839] usbtmc 3-1:16.0: usb_control_msg returned -110 [ 122.903962][ T4914] loop3: detected capacity change from 0 to 512 [ 123.321637][ T4270] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 123.360709][ T2302] usb 3-1: USB disconnect, device number 4 [ 124.112493][ T4924] virtio-fs: tag not found [ 124.699567][ T4270] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 124.738266][ T4914] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,,errors=continue. Quota mode: writeback. [ 124.757401][ T4928] loop4: detected capacity change from 0 to 256 [ 124.800945][ T4270] usb 5-1: string descriptor 0 read error: -71 [ 124.811070][ T4270] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 124.829165][ T4270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.839241][ T4928] exfat: Bad value for 'gid' [ 124.895138][ T4270] usb 5-1: can't set config #2, error -71 [ 124.909344][ T4270] usb 5-1: USB disconnect, device number 4 [ 124.977640][ T4928] loop4: detected capacity change from 0 to 512 [ 125.027277][ T4928] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 125.082657][ T4928] EXT4-fs error (device loop4): ext4_orphan_get:1406: inode #15: comm syz.4.165: iget: bad extended attribute block 262144 [ 125.136386][ T4928] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.165: couldn't read orphan inode 15 (err -117) [ 125.230582][ T4928] EXT4-fs (loop4): mounted filesystem without journal. Opts: nolazytime,abort,jqfmt=vfsv0,inode_readahead_blks=0x0000000000000000,nomblk_io_submit,auto_da_alloc,nouid32,,errors=continue. Quota mode: none. [ 125.245006][ T4934] loop3: detected capacity change from 0 to 256 [ 125.829463][ T4934] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 125.845873][ T4934] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 125.874610][ T4934] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x7f95ea71, utbl_chksum : 0xe619d30d) [ 126.011587][ T4944] loop0: detected capacity change from 0 to 512 [ 126.028719][ T4944] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 126.039840][ T4944] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 126.081868][ T4944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 126.091323][ T4944] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.112608][ T4944] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.166: bg 0: block 361: padding at end of block bitmap is not set [ 126.151384][ T4944] EXT4-fs (loop0): Remounting filesystem read-only [ 126.161270][ T4944] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 126.175394][ T4944] EXT4-fs (loop0): Remounting filesystem read-only [ 126.186290][ T4944] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.166: attempt to clear invalid blocks 33619980 len 1 [ 126.215825][ T4944] EXT4-fs (loop0): Remounting filesystem read-only [ 126.256145][ T4944] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.166: invalid indirect mapped block 1811939328 (level 0) [ 126.274077][ T4944] EXT4-fs (loop0): Remounting filesystem read-only [ 126.293547][ T4944] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.166: invalid indirect mapped block 2185560079 (level 1) [ 126.319357][ T4944] EXT4-fs (loop0): Remounting filesystem read-only [ 126.334572][ T4944] EXT4-fs (loop0): 1 truncate cleaned up [ 126.354104][ T4944] EXT4-fs (loop0): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 126.780009][ T4962] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.166: dx entry: limit 0 != root limit 125 [ 126.791791][ T4962] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.166: Corrupt directory, running e2fsck is recommended [ 128.200033][ T4235] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 128.236859][ T4986] loop4: detected capacity change from 0 to 512 [ 128.570553][ T4986] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 128.582743][ T4986] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.703815][ T4997] unsupported nla_type 40 [ 128.720103][ T4235] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 128.910101][ T4235] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 128.919208][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.932249][ T5007] loop2: detected capacity change from 0 to 512 [ 128.950237][ T4235] usb 1-1: Product: syz [ 128.967762][ T5007] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 128.969985][ T4235] usb 1-1: Manufacturer: syz [ 128.986233][ T4235] usb 1-1: SerialNumber: syz [ 128.995634][ T5007] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 129.038876][ T5007] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 129.083835][ T5007] EXT4-fs (loop2): orphan cleanup on readonly fs [ 129.102753][ T5007] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.187: bg 0: block 361: padding at end of block bitmap is not set [ 129.130687][ T5007] EXT4-fs (loop2): Remounting filesystem read-only [ 129.145292][ T5007] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 129.174983][ T5007] EXT4-fs (loop2): Remounting filesystem read-only [ 129.197962][ T5007] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.187: attempt to clear invalid blocks 33619980 len 1 [ 129.236339][ T4975] udc-core: couldn't find an available UDC or it's busy [ 129.250401][ T5007] EXT4-fs (loop2): Remounting filesystem read-only [ 129.253694][ T4975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.267972][ T5007] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.187: invalid indirect mapped block 1811939328 (level 0) [ 129.284580][ T4975] udc-core: couldn't find an available UDC or it's busy [ 129.310513][ T4975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 129.332191][ T5007] EXT4-fs (loop2): Remounting filesystem read-only [ 129.338773][ T5007] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.187: invalid indirect mapped block 2185560079 (level 1) [ 129.353161][ T4235] usb 1-1: selecting invalid altsetting 1 [ 129.372611][ T5007] EXT4-fs (loop2): Remounting filesystem read-only [ 129.383460][ T5007] EXT4-fs (loop2): 1 truncate cleaned up [ 129.389129][ T5007] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 129.641483][ T4235] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 129.641572][ T4235] dvb_usb_lmedm04: probe of 1-1:2.0 failed with error -22 [ 129.740243][ T5013] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.187: dx entry: limit 0 != root limit 125 [ 129.752109][ T5013] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.187: Corrupt directory, running e2fsck is recommended [ 130.041200][ T5018] udc-core: couldn't find an available UDC or it's busy [ 130.048176][ T5018] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 131.483590][ T4229] usb 1-1: USB disconnect, device number 3 [ 132.672389][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.678754][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.791914][ T5055] loop4: detected capacity change from 0 to 512 [ 133.166884][ T5053] netlink: 'syz.2.200': attribute type 1 has an invalid length. [ 133.197904][ T5053] netlink: 11834 bytes leftover after parsing attributes in process `syz.2.200'. [ 133.494187][ T5053] netlink: 10216 bytes leftover after parsing attributes in process `syz.2.200'. [ 133.589320][ T5059] loop1: detected capacity change from 0 to 512 [ 133.635376][ T5055] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 133.648832][ T5055] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.667374][ T5059] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 133.730803][ T5059] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 133.830175][ T5059] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 133.859547][ T5059] EXT4-fs (loop1): orphan cleanup on readonly fs [ 133.867709][ T5059] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.201: bg 0: block 361: padding at end of block bitmap is not set [ 133.910452][ T5059] EXT4-fs (loop1): Remounting filesystem read-only [ 133.920166][ T4230] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 134.053072][ T5059] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 134.139520][ T5059] EXT4-fs (loop1): Remounting filesystem read-only [ 134.199768][ T5059] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.201: attempt to clear invalid blocks 33619980 len 1 [ 134.300707][ T4230] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 134.358569][ T5059] EXT4-fs (loop1): Remounting filesystem read-only [ 134.440899][ T5059] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.201: invalid indirect mapped block 1811939328 (level 0) [ 134.511012][ T4230] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 134.526991][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.554759][ T5059] EXT4-fs (loop1): Remounting filesystem read-only [ 134.567128][ T4230] usb 3-1: Product: syz [ 134.571818][ T5059] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.201: invalid indirect mapped block 2185560079 (level 1) [ 134.600060][ T4230] usb 3-1: Manufacturer: syz [ 134.604688][ T4230] usb 3-1: SerialNumber: syz [ 134.634312][ T5059] EXT4-fs (loop1): Remounting filesystem read-only [ 134.648318][ T5059] EXT4-fs (loop1): 1 truncate cleaned up [ 134.654945][ T5059] EXT4-fs (loop1): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000000,noblock_validity,discard,errors=remount-ro,mblk_io_submit. Quota mode: none. [ 134.970244][ T5081] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.201: dx entry: limit 0 != root limit 125 [ 134.981990][ T5081] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.201: Corrupt directory, running e2fsck is recommended [ 135.817690][ T5066] udc-core: couldn't find an available UDC or it's busy [ 135.826073][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.843252][ T5066] udc-core: couldn't find an available UDC or it's busy [ 135.850615][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 135.860126][ T4230] usb 3-1: selecting invalid altsetting 1 [ 136.056832][ T5091] tipc: Started in network mode [ 136.100442][ T5091] tipc: Node identity d6809ff9fffc, cluster identity 4711 [ 136.159065][ T5091] tipc: Enabled bearer , priority 0 [ 136.170750][ T4230] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 136.170790][ T4230] usb 3-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 136.181868][ T5097] device syzkaller0 entered promiscuous mode [ 136.193479][ T4230] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 136.207934][ T4230] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 136.217760][ T4230] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 136.229360][ T4230] usb 3-1: media controller created [ 136.236422][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.353841][ T5066] udc-core: couldn't find an available UDC or it's busy [ 136.385776][ T5066] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 136.421226][ T5097] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 136.964969][ T4230] DVB: Unable to find symbol m88rs2000_attach() [ 136.971597][ T4230] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 136.971638][ T4230] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 136.990661][ T5105] tipc: Resetting bearer [ 136.999342][ T5090] tipc: Resetting bearer [ 137.041046][ T5090] tipc: Disabling bearer [ 137.075085][ T4230] usb 3-1: USB disconnect, device number 5 [ 137.271931][ T5116] loop0: detected capacity change from 0 to 512 [ 137.628376][ T5116] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 137.640934][ T5116] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.065639][ T5128] loop2: detected capacity change from 0 to 1024 [ 138.307477][ T5128] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 138.469748][ T5128] EXT4-fs (loop2): inline encryption not supported [ 138.942901][ T5139] overlayfs: failed to clone upperpath [ 139.394418][ T5128] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=abort,init_itable,norecovery,mblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,inlinecrypt,grpquota,init_itable=0x0000000000000007,,errors=continue. Quota mode: writeback. [ 139.801223][ T5155] loop4: detected capacity change from 0 to 512 [ 140.578598][ T5157] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 140.848363][ T5170] loop0: detected capacity change from 0 to 512 [ 141.124155][ T5170] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 141.136702][ T5170] ext4 filesystem being mounted at /47/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.613511][ T5155] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.622264][ T5155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 141.731855][ T5155] EXT4-fs error (device loop4): ext4_orphan_get:1432: comm syz.4.227: bad orphan inode 131083 [ 141.746728][ T5155] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 143.630319][ T4230] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 143.773963][ T5195] ipt_CLUSTERIP: Please specify destination IP [ 143.991324][ T4230] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 144.007476][ T4230] usb 5-1: config 0 has no interface number 0 [ 144.029788][ T4230] usb 5-1: config 0 interface 255 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.065763][ T4230] usb 5-1: config 0 interface 255 altsetting 255 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 144.087688][ T4230] usb 5-1: config 0 interface 255 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 144.125315][ T4230] usb 5-1: config 0 interface 255 has no altsetting 0 [ 144.166205][ T4230] usb 5-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 144.216292][ T4230] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.281805][ T4230] usb 5-1: config 0 descriptor?? [ 144.940353][ T5192] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.515340][ T5214] tipc: Started in network mode [ 145.524439][ T5214] tipc: Node identity 3664cd4f9f99, cluster identity 4711 [ 145.544777][ T5214] tipc: Enabled bearer , priority 0 [ 145.555648][ T5214] device syzkaller0 entered promiscuous mode [ 145.572680][ T5214] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 145.592182][ T5214] tipc: Resetting bearer [ 145.602202][ T5213] tipc: Resetting bearer [ 145.623170][ T5213] tipc: Disabling bearer [ 145.677819][ T4230] usb 5-1: USB disconnect, device number 5 [ 145.782335][ T5218] loop1: detected capacity change from 0 to 512 [ 146.081027][ T5218] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 146.093537][ T5218] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.177244][ T5240] loop1: detected capacity change from 0 to 512 [ 148.247056][ T5240] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.553754][ T5240] EXT4-fs (loop1): 1 truncate cleaned up [ 148.633858][ T5240] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.022896][ T4197] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 149.080166][ T4230] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 149.287557][ T5254] tipc: Started in network mode [ 149.293129][ T5254] tipc: Node identity 4edf4a32a949, cluster identity 4711 [ 149.300786][ T5254] tipc: Enabled bearer , priority 0 [ 149.308914][ T5254] device syzkaller0 entered promiscuous mode [ 149.319998][ T5254] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 149.338529][ T5254] tipc: Resetting bearer [ 149.346232][ T5253] tipc: Resetting bearer [ 149.358365][ T5253] tipc: Disabling bearer [ 149.453524][ T5256] loop4: detected capacity change from 0 to 128 [ 149.460194][ T4230] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 149.488237][ T5256] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 149.517528][ T5256] ext4 filesystem being mounted at /46/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.608431][ T4565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.640426][ T4230] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 149.649497][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.663550][ T4230] usb 3-1: Product: syz [ 149.667744][ T4230] usb 3-1: Manufacturer: syz [ 149.751827][ T4230] usb 3-1: SerialNumber: syz [ 149.852537][ T4565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.275493][ T5243] udc-core: couldn't find an available UDC or it's busy [ 150.451284][ T5243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.487297][ T5243] udc-core: couldn't find an available UDC or it's busy [ 150.497665][ T5243] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 150.550540][ T4230] usb 3-1: selecting invalid altsetting 1 [ 150.586456][ T4565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.851474][ T4230] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 150.851552][ T4230] dvb_usb_lmedm04: probe of 3-1:2.0 failed with error -22 [ 150.874299][ T4565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.615965][ T5274] udc-core: couldn't find an available UDC or it's busy [ 151.810425][ T5274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.073537][ T5276] fuse: Bad value for 'fd' [ 152.141341][ T4234] usb 3-1: USB disconnect, device number 6 [ 153.029233][ T5295] binder: BINDER_SET_CONTEXT_MGR already set [ 153.090146][ T5295] binder: 5291:5295 ioctl 4018620d 200000000040 returned -16 [ 153.147124][ T4565] tipc: Left network mode [ 153.211847][ T5289] xfrm0 speed is unknown, defaulting to 1000 [ 153.312846][ T5306] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.456805][ T5306] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.585639][ T5312] sch_tbf: burst 12 is lower than device lo mtu (65550) ! [ 154.510039][ T4230] Bluetooth: hci3: command 0x0409 tx timeout [ 154.634571][ T5289] chnl_net:caif_netlink_parms(): no params data found [ 155.409277][ T5289] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.422719][ T5289] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.431297][ T5289] device bridge_slave_0 entered promiscuous mode [ 155.439756][ T5289] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.531399][ T5289] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.539653][ T5289] device bridge_slave_1 entered promiscuous mode [ 156.021710][ T5289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.590216][ T1108] Bluetooth: hci3: command 0x041b tx timeout [ 156.651291][ T5289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.616026][ T5289] team0: Port device team_slave_0 added [ 158.340257][ T5289] team0: Port device team_slave_1 added [ 158.463348][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.490650][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.516926][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.631113][ T5289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.670225][ T4230] Bluetooth: hci3: command 0x040f tx timeout [ 158.707826][ T5289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.730112][ T5289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.869012][ T5289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.089531][ T5289] device hsr_slave_0 entered promiscuous mode [ 159.128628][ T5289] device hsr_slave_1 entered promiscuous mode [ 159.149432][ T5289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.172254][ T5289] Cannot create hsr debugfs directory [ 159.364098][ T4565] device hsr_slave_0 left promiscuous mode [ 159.388550][ T4565] device hsr_slave_1 left promiscuous mode [ 159.405934][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.115365][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.178611][ T5394] loop4: detected capacity change from 0 to 40427 [ 160.195713][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.203717][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.212005][ T4565] device bridge_slave_1 left promiscuous mode [ 160.220095][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.282462][ T5394] F2FS-fs (loop4): Corrupted extension count (327717 + 1 > 64) [ 160.349389][ T5394] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 160.354107][ T4565] device bridge_slave_0 left promiscuous mode [ 160.382489][ T5394] F2FS-fs (loop4): invalid crc value [ 160.410246][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.756629][ T1108] Bluetooth: hci3: command 0x0419 tx timeout [ 160.793240][ T5394] F2FS-fs (loop4): Failed to start F2FS issue_checkpoint_thread (-12) [ 160.877993][ T4565] device veth1_macvtap left promiscuous mode [ 160.914872][ T4565] device veth0_macvtap left promiscuous mode [ 160.935231][ T4565] device veth1_vlan left promiscuous mode [ 160.972804][ T4565] device veth0_vlan left promiscuous mode [ 164.158691][ T5443] loop2: detected capacity change from 0 to 131072 [ 164.232306][ T5443] F2FS-fs (loop2): invalid crc value [ 164.269334][ T4565] team0 (unregistering): Port device team_slave_1 removed [ 164.278755][ T5443] F2FS-fs (loop2): Found nat_bits in checkpoint [ 164.327974][ T5443] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 164.378453][ T4565] team0 (unregistering): Port device team_slave_0 removed [ 164.475346][ T4565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.531718][ T4565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.703494][ T4565] bond0 (unregistering): Released all slaves [ 166.207829][ T5479] tipc: Enabling of bearer rejected, failed to enable media [ 166.302139][ T5289] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.399631][ T5289] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.428332][ T5289] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 166.450339][ T1108] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 166.493102][ T5289] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 166.699994][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 166.715774][ T5289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.796774][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.809554][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.830167][ T1108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.843164][ T5289] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.863446][ T1108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 166.881465][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.899187][ T1108] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 166.919526][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.960783][ T1108] usb 1-1: config 0 descriptor?? [ 166.966637][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.026219][ T4580] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.033398][ T4580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.108334][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.116645][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.230719][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.280484][ T4580] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.287579][ T4580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.630526][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.653619][ T1108] HID 045e:07da: Invalid code 65791 type 1 [ 168.716397][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.725153][ T1108] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0004/input/input5 [ 168.778265][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.059380][ T5518] loop2: detected capacity change from 0 to 131072 [ 169.063010][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.075995][ T1108] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 169.400539][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.435050][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.598425][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.612969][ T5518] F2FS-fs (loop2): invalid crc value [ 169.624496][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.650802][ T1108] usb 1-1: USB disconnect, device number 4 [ 169.937399][ T5518] F2FS-fs (loop2): Found nat_bits in checkpoint [ 170.132950][ T5289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.156655][ T5289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 170.225340][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 170.247786][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 170.293061][ T5533] fido_id[5533]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 170.330312][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 171.272371][ T5549] tipc: Enabling of bearer rejected, failed to enable media [ 172.517472][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 172.560869][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 172.577706][ T5289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.624133][ T5584] loop4: detected capacity change from 0 to 131072 [ 174.152562][ T5584] F2FS-fs (loop4): invalid crc value [ 174.181447][ T5584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.376201][ T5584] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.586171][ T5606] xfrm0 speed is unknown, defaulting to 1000 [ 175.970824][ T4178] Bluetooth: hci1: command 0x0406 tx timeout [ 175.981001][ T4178] Bluetooth: hci2: command 0x0406 tx timeout [ 176.120755][ T4178] Bluetooth: hci0: command 0x0406 tx timeout [ 176.126865][ T4178] Bluetooth: hci4: command 0x0406 tx timeout [ 176.461831][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.492809][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.586829][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.625903][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.692578][ T5289] device veth0_vlan entered promiscuous mode [ 176.717911][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.823208][ T4576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.857931][ T5289] device veth1_vlan entered promiscuous mode [ 176.976880][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 177.002928][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 177.076406][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 177.135606][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 177.208081][ T5289] device veth0_macvtap entered promiscuous mode [ 177.218658][ T5620] overlayfs: failed to resolve './bus': -2 [ 177.248097][ T5289] device veth1_macvtap entered promiscuous mode [ 177.335437][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.401887][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.457794][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.503209][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.544085][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.600101][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.644721][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.700011][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.761368][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.769675][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 177.793232][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 177.850961][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.910783][ T4580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 178.070538][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.253583][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.476469][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.663429][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.820908][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.897217][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.962819][ T5289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.023315][ T5289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.070645][ T5289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.143671][ T5289] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.183198][ T5289] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.220053][ T5289] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.324650][ T5289] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.388814][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.408839][ T4287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.097633][ T4557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.118871][ T5671] capability: warning: `syz.4.342' uses 32-bit capabilities (legacy support in use) [ 180.140724][ T4557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.640205][ T5669] virtio-fs: tag not found [ 180.816441][ T4561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.840619][ T4561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.841014][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.039481][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.052049][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.059543][ T5682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.393389][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 183.677122][ T5710] loop0: detected capacity change from 0 to 131072 [ 184.000198][ T5710] F2FS-fs (loop0): invalid crc value [ 184.019632][ T5710] F2FS-fs (loop0): Found nat_bits in checkpoint [ 184.102178][ T5710] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 184.164194][ T5723] loop2: detected capacity change from 0 to 512 [ 184.356620][ T5723] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 184.409750][ T5725] tipc: Started in network mode [ 184.440017][ T5725] tipc: Node identity c21abf2c166e, cluster identity 4711 [ 184.447268][ T5725] tipc: Enabled bearer , priority 0 [ 184.521279][ T5723] EXT4-fs (loop2): 1 truncate cleaned up [ 184.526966][ T5723] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,mb_optimize_scan=0x0000000000000001,lazytime,noload,resgid=0x0000000000000000,auto_da_alloc,,errors=continue. Quota mode: none. [ 184.718858][ T5728] device syzkaller0 entered promiscuous mode [ 184.744722][ T5725] tipc: Resetting bearer [ 184.790143][ T5724] tipc: Resetting bearer [ 184.837203][ T5724] tipc: Disabling bearer [ 187.360414][ T25] kauditd_printk_skb: 60 callbacks suppressed [ 187.360429][ T25] audit: type=1326 audit(1780327324.483:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 187.390413][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.258020][ T25] audit: type=1326 audit(1780327324.483:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 188.283192][ T25] audit: type=1326 audit(1780327324.493:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 188.307070][ C1] vkms_vblank_simulate: vblank timer overrun [ 188.542671][ T5784] tipc: Enabled bearer , priority 0 [ 188.547604][ T25] audit: type=1326 audit(1780327324.493:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 188.595419][ T5784] device syzkaller0 entered promiscuous mode [ 188.709518][ T25] audit: type=1326 audit(1780327324.493:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 188.758697][ T5784] tipc: Resetting bearer [ 188.786831][ T5783] tipc: Resetting bearer [ 189.277993][ T5783] tipc: Disabling bearer [ 189.550134][ T25] audit: type=1326 audit(1780327324.493:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 190.891634][ T5814] /dev/sg0: Can't open blockdev [ 190.978445][ T25] audit: type=1326 audit(1780327324.493:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 191.622379][ T5822] loop5: detected capacity change from 0 to 131072 [ 191.685546][ T5822] F2FS-fs (loop5): invalid crc value [ 191.821569][ T5822] F2FS-fs (loop5): Found nat_bits in checkpoint [ 191.980556][ T25] audit: type=1326 audit(1780327324.493:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 192.005791][ T5822] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 192.113979][ T5831] xfrm0 speed is unknown, defaulting to 1000 [ 193.245098][ T25] audit: type=1326 audit(1780327324.493:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5755 comm="syz.2.357" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8a80552e59 code=0x7ffc0000 [ 193.269873][ T4235] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 193.323191][ T4235] Bluetooth: hci3: Injecting HCI hardware error event [ 193.363618][ T4191] Bluetooth: hci3: hardware error 0x00 [ 194.114279][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.121321][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.680406][ T4178] libceph: connect (1)[c::]:6789 error -101 [ 194.687142][ T4178] libceph: mon0 (1)[c::]:6789 connect error [ 195.128750][ T5869] loop4: detected capacity change from 0 to 512 [ 195.145777][ T5857] ceph: No mds server is up or the cluster is laggy [ 195.171078][ T4178] libceph: connect (1)[c::]:6789 error -101 [ 195.325287][ T4178] libceph: mon0 (1)[c::]:6789 connect error [ 195.471922][ T5869] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 195.484386][ T5869] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.699839][ C0] vcan0: j1939_tp_rxtimer: 0xffff888060d2c800: rx timeout, send abort [ 195.720675][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888060d2c800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 196.077600][ T5885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 196.224662][ T5885] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 196.750702][ T4178] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 198.350232][ T4178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.390046][ T4178] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.548644][ T4178] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 199.077251][ T4178] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.119280][ T4178] usb 5-1: config 0 descriptor?? [ 199.610305][ T4178] usb 5-1: can't set config #0, error -71 [ 199.631593][ T4178] usb 5-1: USB disconnect, device number 6 [ 199.985465][ T5925] loop4: detected capacity change from 0 to 512 [ 200.822030][ T5925] EXT4-fs (loop4): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 200.834339][ T5925] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.460158][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.148296][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 202.160906][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.189216][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 202.200724][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.228007][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 202.247255][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.310458][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 202.331255][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.387272][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 202.424166][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.486117][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 202.743826][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 202.835714][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 203.284909][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 203.417031][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 203.427697][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 203.539824][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 203.567397][ T4196] EXT4-fs error (device loop4): ext4_empty_dir:3136: inode #12: comm syz-executor: invalid size [ 203.617429][ T4196] EXT4-fs (loop4): Remounting filesystem read-only [ 205.922852][ T6002] netlink: 256 bytes leftover after parsing attributes in process `syz.0.415'. [ 205.932608][ T6002] netlink: 72 bytes leftover after parsing attributes in process `syz.0.415'. [ 206.144343][ T6006] loop5: detected capacity change from 0 to 2048 [ 206.221415][ T6006] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.373398][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.3.420'. [ 206.438521][ T6013] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.447128][ T6013] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.979720][ T6031] netlink: 12 bytes leftover after parsing attributes in process `syz.3.424'. [ 208.257333][ T6028] xfrm0 speed is unknown, defaulting to 1000 [ 209.077369][ T6054] loop0: detected capacity change from 0 to 512 [ 209.724507][ T6028] chnl_net:caif_netlink_parms(): no params data found [ 209.859113][ T6054] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 209.871440][ T6054] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.950130][ T26] Bluetooth: hci2: command 0x0409 tx timeout [ 210.392747][ T6028] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.743652][ T6028] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.113531][ T6028] device bridge_slave_0 entered promiscuous mode [ 211.158294][ T6028] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.197260][ T6028] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.251174][ T6028] device bridge_slave_1 entered promiscuous mode [ 211.363889][ T6028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.469685][ T6028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.630494][ T6116] loop0: detected capacity change from 0 to 512 [ 212.296409][ T26] Bluetooth: hci2: command 0x041b tx timeout [ 212.601203][ T6116] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 212.613328][ T6116] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.430251][ T4232] Bluetooth: hci2: command 0x040f tx timeout [ 216.520898][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 216.834221][ T6028] team0: Port device team_slave_0 added [ 217.134908][ T6028] team0: Port device team_slave_1 added [ 217.629613][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.874142][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.643533][ T4270] Bluetooth: hci2: command 0x0405 tx timeout [ 218.690377][ T6028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.728795][ T6028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.744922][ T6028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.097877][ T6028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.830523][ T6028] device hsr_slave_0 entered promiscuous mode [ 220.852005][ T6028] device hsr_slave_1 entered promiscuous mode [ 220.973460][ T6028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.073688][ T6028] Cannot create hsr debugfs directory [ 221.601325][ T6028] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 221.644487][ T6028] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 221.702296][ T6028] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 221.750967][ T6028] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 223.170711][ T6241] netlink: 52 bytes leftover after parsing attributes in process `syz.3.471'. [ 223.266989][ T6241] netlink: 48 bytes leftover after parsing attributes in process `syz.3.471'. [ 223.289537][ T6248] loop2: detected capacity change from 0 to 512 [ 224.004101][ T6028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.058190][ T6028] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.120089][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.136008][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.186929][ T6248] EXT4-fs (loop2): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 224.199884][ T6248] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.250868][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.284681][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.395893][ T4567] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.403131][ T4567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.551642][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.563877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.610082][ T4270] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 224.618688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.650039][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.657146][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.902056][ T4270] usb 6-1: Using ep0 maxpacket: 8 [ 224.970236][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 225.054256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 225.086148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.098084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.107022][ T4270] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.119077][ T4270] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.130760][ T4270] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.171765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.207064][ T4270] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.226372][ T4270] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.243162][ T6279] netlink: 'syz.3.477': attribute type 4 has an invalid length. [ 225.260486][ T4270] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.298009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.328836][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.381641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.398157][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.419003][ T6028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.444365][ T6028] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.467334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.484897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.830109][ T4270] usb 6-1: GET_CAPABILITIES returned 0 [ 225.835879][ T4270] usbtmc 6-1:16.0: can't read capabilities [ 226.940026][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.951944][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.961172][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.970289][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.983886][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 226.993091][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.002289][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.011410][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.020528][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.030047][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.035352][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 227.039225][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.056148][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.065273][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.074382][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.083502][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 227.091743][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 227.092593][ C1] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 227.109589][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.298514][ T6028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.688441][ T4270] usb 6-1: USB disconnect, device number 2 [ 230.737725][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 230.749222][ T1529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 230.803499][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 230.895853][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 231.089459][ T6028] device veth0_vlan entered promiscuous mode [ 231.441340][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 231.699556][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 232.062940][ T6028] device veth1_vlan entered promiscuous mode [ 234.343041][ T6028] device veth0_macvtap entered promiscuous mode [ 234.385457][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 234.442298][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 234.465619][ T6028] device veth1_macvtap entered promiscuous mode [ 234.549563][ T4565] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.862123][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 234.907299][ T4565] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.135653][ T4565] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.331667][ T4565] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.868049][ T4565] tipc: Left network mode [ 236.015722][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.026587][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.036716][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.047172][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.057262][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.089956][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.128334][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.166192][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.198342][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.224066][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.243036][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.257697][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 236.276825][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 236.339632][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.367147][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.427506][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.479526][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.517300][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.556777][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.586641][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.616386][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.677731][ T6028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.718943][ T6028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.804769][ T6028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.863280][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 236.940338][ T4559] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 237.021345][ T6028] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.047327][ T6028] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.109176][ T6028] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.122099][ T6028] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.659832][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.743648][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.811942][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 237.917309][ T4567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.955445][ T4567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.033612][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 238.146266][ T6437] loop0: detected capacity change from 0 to 512 [ 238.719863][ T6437] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 238.732455][ T6437] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.990701][ T6446] input: syz1 as /devices/virtual/input/input6 [ 242.384242][ T4565] device hsr_slave_0 left promiscuous mode [ 242.446481][ T25] audit: type=1326 audit(1780327379.633:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.6.418" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a99d28e59 code=0x0 [ 242.850657][ T4565] device hsr_slave_1 left promiscuous mode [ 242.861228][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.905388][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.954370][ T4565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.966894][ T4565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.983590][ T4565] device bridge_slave_1 left promiscuous mode [ 242.993568][ T4565] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.058821][ T4565] device bridge_slave_0 left promiscuous mode [ 243.093372][ T4565] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.240879][ T4565] device veth1_macvtap left promiscuous mode [ 243.248702][ T4565] device veth0_macvtap left promiscuous mode [ 243.257283][ T4565] device veth1_vlan left promiscuous mode [ 243.531306][ T4565] device veth0_vlan left promiscuous mode [ 245.669540][ T4565] team0 (unregistering): Port device team_slave_1 removed [ 245.696212][ T4565] team0 (unregistering): Port device team_slave_0 removed [ 245.714602][ T4565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.743241][ T4565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.856154][ T4565] bond0 (unregistering): Released all slaves [ 247.601775][ T6559] sg_write: data in/out 764/14 bytes for SCSI command 0x0-- guessing data in; [ 247.601775][ T6559] program syz.2.529 not setting count and/or reply_len properly [ 247.706388][ T6561] loop9: detected capacity change from 0 to 524287936 [ 248.160513][ T6544] ALSA: mixer_oss: invalid OSS volume 'a' [ 248.167621][ T6544] ALSA: mixer_oss: invalid OSS volume '—' [ 248.174253][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.181447][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.187395][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.193719][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.200098][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.206472][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.212401][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.218920][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.226709][ T6544] ALSA: mixer_oss: invalid OSS volume 'Ü' [ 248.234083][ T6544] ALSA: mixer_oss: invalid OSS volume ')' [ 248.240289][ T6544] ALSA: mixer_oss: invalid OSS volume 'n' [ 248.246286][ T6544] ALSA: mixer_oss: invalid OSS volume '9' [ 248.255740][ T6544] ALSA: mixer_oss: invalid OSS volume '~' [ 248.261797][ T6544] ALSA: mixer_oss: invalid OSS volume '' [ 248.322073][ T6559] block device autoloading is deprecated and will be removed. [ 249.815945][ T25] audit: type=1326 audit(1780327387.003:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 250.901526][ T25] audit: type=1326 audit(1780327387.003:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 252.310173][ T6584] virtio-fs: tag not found [ 252.664152][ T25] audit: type=1326 audit(1780327387.033:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 252.807362][ T6594] tipc: Enabled bearer , priority 0 [ 252.819486][ T6594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 253.150194][ T6594] tipc: Resetting bearer [ 253.216555][ T25] audit: type=1326 audit(1780327387.033:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 253.375354][ T6593] tipc: Disabling bearer [ 253.427312][ T25] audit: type=1326 audit(1780327387.033:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 253.573533][ T25] audit: type=1326 audit(1780327387.033:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 255.418943][ T6615] kernel profiling enabled (shift: 9) [ 256.051028][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.058861][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.133480][ T25] audit: type=1326 audit(1780327387.033:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 256.282313][ T25] audit: type=1326 audit(1780327387.033:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 256.491176][ T25] audit: type=1326 audit(1780327387.033:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 256.526494][ T25] audit: type=1326 audit(1780327387.033:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bd60496c7 code=0x7ffc0000 [ 257.160315][ T6631] virtio-fs: tag not found [ 257.334992][ T25] audit: type=1326 audit(1780327387.033:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 257.384877][ T25] audit: type=1326 audit(1780327387.033:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 257.410182][ C1] vkms_vblank_simulate: vblank timer overrun [ 257.739182][ T6638] trusted_key: encrypted_key: insufficient parameters specified [ 257.786661][ T25] audit: type=1326 audit(1780327387.043:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 257.819748][ T25] audit: type=1326 audit(1780327387.043:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bd6047e59 code=0x7ffc0000 [ 257.852420][ T6635] trusted_key: encrypted_key: insufficient parameters specified [ 257.853355][ T25] audit: type=1326 audit(1780327387.043:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bd60496c7 code=0x7ffc0000 [ 258.006983][ T6647] tipc: Enabled bearer , priority 0 [ 258.041210][ T25] audit: type=1326 audit(1780327387.043:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6549 comm="syz.3.528" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1bd600868e code=0x7ffc0000 [ 258.087279][ T6647] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 258.137928][ T6649] [ 258.140854][ T6649] ============================= [ 258.171366][ T6649] WARNING: suspicious RCU usage [ 258.190233][ T6649] syzkaller #0 Not tainted [ 258.212104][ T6649] ----------------------------- [ 258.431547][ T6649] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 258.482209][ T6649] [ 258.482209][ T6649] other info that might help us debug this: [ 258.482209][ T6649] [ 258.494777][ T6649] [ 258.494777][ T6649] rcu_scheduler_active = 2, debug_locks = 1 [ 258.504108][ T6649] 1 lock held by syz.6.536/6649: [ 258.510817][ T6649] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 258.525157][ T6649] [ 258.525157][ T6649] stack backtrace: [ 258.532870][ T6649] CPU: 1 PID: 6649 Comm: syz.6.536 Not tainted syzkaller #0 [ 258.540185][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 258.550962][ T6649] Call Trace: [ 258.550975][ T6649] [ 258.550983][ T6649] dump_stack_lvl+0x188/0x250 [ 258.551010][ T6649] ? load_image+0x400/0x400 [ 258.551029][ T6649] ? show_regs_print_info+0x20/0x20 [ 258.551054][ T6649] ? lockdep_rcu_suspicious+0x110/0x180 [ 258.578853][ T6649] ? local_bh_enable+0x20/0x20 [ 258.583791][ T6649] rhltable_lookup+0x7a9/0x7c0 [ 258.588751][ T6649] ? local_bh_enable+0x20/0x20 [ 258.588790][ T6649] ? mr_mfc_find_parent+0x190/0x190 [ 258.588815][ T6649] ? local_bh_enable+0x20/0x20 [ 258.588834][ T6649] ? mark_lock+0x94/0x320 [ 258.609909][ T6649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 258.615924][ T6649] ? lock_chain_count+0x20/0x20 [ 258.620812][ T6649] mr_mfc_find_any_parent+0xb6/0x1e0 [ 258.626302][ T6649] ? local_bh_enable+0x20/0x20 [ 258.631104][ T6649] ip_mr_forward+0x24c/0xf90 [ 258.635867][ T6649] ipmr_mfc_add+0x23cc/0x2d40 [ 258.640587][ T6649] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 258.646253][ T6649] ? __lock_acquire+0x7d10/0x7d10 [ 258.651625][ T6649] ip_mroute_setsockopt+0xeaf/0x1250 [ 258.656951][ T6649] ? ipmr_rule_default+0x70/0x70 [ 258.662307][ T6649] ? __might_sleep+0xf0/0xf0 [ 258.667014][ T6649] ip_setsockopt+0x568/0x3130 [ 258.672580][ T6649] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 258.677985][ T6649] ? aa_sk_perm+0x7dc/0x910 [ 258.682975][ T6649] ? aa_af_perm+0x340/0x340 [ 258.687497][ T6649] ? __fget_files+0x40f/0x480 [ 258.692621][ T6649] ? aa_sock_opt_perm+0x74/0x100 [ 258.702040][ T6649] ? sock_common_setsockopt+0x32/0xb0 [ 258.709177][ T6649] ? raw_setsockopt+0xc5/0x180 [ 258.713967][ T6649] ? sock_common_recvmsg+0x1c0/0x1c0 [ 258.719623][ T6649] __sys_setsockopt+0x2bf/0x3d0 [ 258.724498][ T6649] __x64_sys_setsockopt+0xb1/0xc0 [ 258.729549][ T6649] do_syscall_64+0x4c/0xa0 [ 258.733987][ T6649] ? clear_bhb_loop+0x30/0x80 [ 258.738682][ T6649] ? clear_bhb_loop+0x30/0x80 [ 258.743386][ T6649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 258.749429][ T6649] RIP: 0033:0x7f5a99d28e59 [ 258.754465][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.775742][ T6649] RSP: 002b:00007f5a97f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 258.784176][ T6649] RAX: ffffffffffffffda RBX: 00007f5a99fa1fa0 RCX: 00007f5a99d28e59 [ 258.793550][ T6649] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 258.801653][ T6649] RBP: 00007f5a99dbed6f R08: 000000000000003c R09: 0000000000000000 [ 258.809737][ T6649] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 258.817722][ T6649] R13: 00007f5a99fa2038 R14: 00007f5a99fa1fa0 R15: 00007ffc07658278 [ 258.825727][ T6649] [ 258.829194][ C1] vkms_vblank_simulate: vblank timer overrun [ 258.874212][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 258.881183][ T6649] [ 258.883826][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 258.897186][ T6649] ============================= [ 258.940036][ T6649] WARNING: suspicious RCU usage [ 258.978255][ T6649] syzkaller #0 Not tainted [ 259.034826][ T6649] ----------------------------- [ 259.065762][ T6649] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 259.075901][ T6649] [ 259.075901][ T6649] other info that might help us debug this: [ 259.075901][ T6649] [ 259.087377][ T6649] [ 259.087377][ T6649] rcu_scheduler_active = 2, debug_locks = 1 [ 259.096365][ T6649] 1 lock held by syz.6.536/6649: [ 259.101646][ T6649] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 259.113308][ T6649] [ 259.113308][ T6649] stack backtrace: [ 259.119747][ T6649] CPU: 1 PID: 6649 Comm: syz.6.536 Not tainted syzkaller #0 [ 259.127138][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.137328][ T6649] Call Trace: [ 259.140731][ T6649] [ 259.144909][ T6649] dump_stack_lvl+0x188/0x250 [ 259.150842][ T6649] ? load_image+0x400/0x400 [ 259.157921][ T6649] ? show_regs_print_info+0x20/0x20 [ 259.164118][ T6649] ? lockdep_rcu_suspicious+0x110/0x180 [ 259.169951][ T6649] ? local_bh_enable+0x20/0x20 [ 259.174914][ T6649] rhltable_lookup+0x52a/0x7c0 [ 259.179709][ T6649] ? local_bh_enable+0x20/0x20 [ 259.185612][ T6649] ? mr_mfc_find_parent+0x190/0x190 [ 259.192544][ T6649] ? local_bh_enable+0x20/0x20 [ 259.197525][ T6649] ? mark_lock+0x94/0x320 [ 259.201892][ T6649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 259.208332][ T6649] ? lock_chain_count+0x20/0x20 [ 259.213219][ T6649] mr_mfc_find_any_parent+0xb6/0x1e0 [ 259.218531][ T6649] ? local_bh_enable+0x20/0x20 [ 259.223386][ T6649] ip_mr_forward+0x24c/0xf90 [ 259.228034][ T6649] ipmr_mfc_add+0x23cc/0x2d40 [ 259.232779][ T6649] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 259.238250][ T6649] ? __lock_acquire+0x7d10/0x7d10 [ 259.243320][ T6649] ip_mroute_setsockopt+0xeaf/0x1250 [ 259.248729][ T6649] ? ipmr_rule_default+0x70/0x70 [ 259.253933][ T6649] ? __might_sleep+0xf0/0xf0 [ 259.258559][ T6649] ip_setsockopt+0x568/0x3130 [ 259.263271][ T6649] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 259.268888][ T6649] ? aa_sk_perm+0x7dc/0x910 [ 259.273422][ T6649] ? aa_af_perm+0x340/0x340 [ 259.278295][ T6649] ? __fget_files+0x40f/0x480 [ 259.283033][ T6649] ? aa_sock_opt_perm+0x74/0x100 [ 259.287999][ T6649] ? sock_common_setsockopt+0x32/0xb0 [ 259.293430][ T6649] ? raw_setsockopt+0xc5/0x180 [ 259.298219][ T6649] ? sock_common_recvmsg+0x1c0/0x1c0 [ 259.303531][ T6649] __sys_setsockopt+0x2bf/0x3d0 [ 259.308727][ T6649] __x64_sys_setsockopt+0xb1/0xc0 [ 259.313781][ T6649] do_syscall_64+0x4c/0xa0 [ 259.318207][ T6649] ? clear_bhb_loop+0x30/0x80 [ 259.322897][ T6649] ? clear_bhb_loop+0x30/0x80 [ 259.327616][ T6649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.329523][ T6664] ceph: No mds server is up or the cluster is laggy [ 259.333554][ T6649] RIP: 0033:0x7f5a99d28e59 [ 259.333592][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.333609][ T6649] RSP: 002b:00007f5a97f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 259.373837][ T6649] RAX: ffffffffffffffda RBX: 00007f5a99fa1fa0 RCX: 00007f5a99d28e59 [ 259.381923][ T6649] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 259.390602][ T6649] RBP: 00007f5a99dbed6f R08: 000000000000003c R09: 0000000000000000 [ 259.399114][ T6649] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 259.407193][ T6649] R13: 00007f5a99fa2038 R14: 00007f5a99fa1fa0 R15: 00007ffc07658278 [ 259.415197][ T6649] [ 259.418363][ C1] vkms_vblank_simulate: vblank timer overrun [ 259.433657][ T4235] libceph: connect (1)[c::]:6789 error -101 [ 259.439951][ T4235] libceph: mon0 (1)[c::]:6789 connect error [ 259.474922][ T6649] [ 259.477416][ T6649] ============================= [ 259.500431][ T6649] WARNING: suspicious RCU usage [ 259.516975][ T6649] syzkaller #0 Not tainted [ 259.567985][ T6649] ----------------------------- [ 259.592577][ T6649] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 259.631164][ T6649] [ 259.631164][ T6649] other info that might help us debug this: [ 259.631164][ T6649] [ 259.662582][ T6649] [ 259.662582][ T6649] rcu_scheduler_active = 2, debug_locks = 1 [ 259.692950][ T6649] 1 lock held by syz.6.536/6649: [ 259.713477][ T6649] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 259.745627][ T6649] [ 259.745627][ T6649] stack backtrace: [ 259.760004][ T6649] CPU: 0 PID: 6649 Comm: syz.6.536 Not tainted syzkaller #0 [ 259.768114][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 259.779132][ T6649] Call Trace: [ 259.782432][ T6649] [ 259.785992][ T6649] dump_stack_lvl+0x188/0x250 [ 259.791044][ T6649] ? load_image+0x400/0x400 [ 259.797899][ T6649] ? show_regs_print_info+0x20/0x20 [ 259.797935][ T6649] ? lockdep_rcu_suspicious+0x110/0x180 [ 259.810764][ T6649] ? local_bh_enable+0x20/0x20 [ 259.815558][ T6649] rhltable_lookup+0x61e/0x7c0 [ 259.820359][ T6649] ? local_bh_enable+0x20/0x20 [ 259.825423][ T6649] ? mr_mfc_find_parent+0x190/0x190 [ 259.830755][ T6649] ? local_bh_enable+0x20/0x20 [ 259.835672][ T6649] ? mark_lock+0x94/0x320 [ 259.841463][ T6649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 259.847483][ T6649] ? lock_chain_count+0x20/0x20 [ 259.852808][ T6649] mr_mfc_find_any_parent+0xb6/0x1e0 [ 259.858388][ T6649] ? local_bh_enable+0x20/0x20 [ 259.863186][ T6649] ip_mr_forward+0x24c/0xf90 [ 259.867812][ T6649] ipmr_mfc_add+0x23cc/0x2d40 [ 259.872908][ T6649] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 259.878072][ T6649] ? __lock_acquire+0x7d10/0x7d10 [ 259.883314][ T6649] ip_mroute_setsockopt+0xeaf/0x1250 [ 259.890208][ T6649] ? ipmr_rule_default+0x70/0x70 [ 259.895718][ T6649] ? __might_sleep+0xf0/0xf0 [ 259.900384][ T6649] ip_setsockopt+0x568/0x3130 [ 259.905638][ T6649] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 259.911475][ T6649] ? aa_sk_perm+0x7dc/0x910 [ 259.915998][ T6649] ? aa_af_perm+0x340/0x340 [ 259.920505][ T6649] ? __fget_files+0x40f/0x480 [ 259.925205][ T6649] ? aa_sock_opt_perm+0x74/0x100 [ 259.930173][ T6649] ? sock_common_setsockopt+0x32/0xb0 [ 259.936603][ T6649] ? raw_setsockopt+0xc5/0x180 [ 259.941480][ T6649] ? sock_common_recvmsg+0x1c0/0x1c0 [ 259.947045][ T6649] __sys_setsockopt+0x2bf/0x3d0 [ 259.951936][ T6649] __x64_sys_setsockopt+0xb1/0xc0 [ 259.956995][ T6649] do_syscall_64+0x4c/0xa0 [ 259.961435][ T6649] ? clear_bhb_loop+0x30/0x80 [ 259.966823][ T6649] ? clear_bhb_loop+0x30/0x80 [ 259.971619][ T6649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 259.977813][ T6649] RIP: 0033:0x7f5a99d28e59 [ 259.982422][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.004314][ T6649] RSP: 002b:00007f5a97f82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 260.013858][ T6649] RAX: ffffffffffffffda RBX: 00007f5a99fa1fa0 RCX: 00007f5a99d28e59 [ 260.022097][ T6649] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000006 [ 260.030083][ T6649] RBP: 00007f5a99dbed6f R08: 000000000000003c R09: 0000000000000000 [ 260.038154][ T6649] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 260.046126][ T6649] R13: 00007f5a99fa2038 R14: 00007f5a99fa1fa0 R15: 00007ffc07658278 [ 260.054311][ T6649] [ 260.066087][ T6658] tipc: Resetting bearer [ 260.082530][ T6646] tipc: Disabling bearer [ 260.106641][ T2302] tipc: Node number set to 3564420908