last executing test programs: 4m26.90161674s ago: executing program 4 (id=186): keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000440)='9p\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000480)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x5) ptrace$poke(0x4, r1, 0x0, 0x70c57bdf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000019600)=0x7) r4 = fsopen(&(0x7f0000019640)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) capget(&(0x7f0000000180)={0x20080522}, &(0x7f00000001c0)={0x3ff, 0x0, 0x4, 0x100, 0x5, 0x2}) 4m20.418024439s ago: executing program 4 (id=193): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0)}, 0x20) socket$inet6(0xa, 0xf, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x1bd, @loopback}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000500)={0xf0f01d, 0x5}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f0000000680)=""/154, 0x9a, 0x4) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CHANINFO(r6, 0x80306403, &(0x7f0000058c80)={0x1, 0x0, 0x0, &(0x7f0000030a80)}) 4m13.729691109s ago: executing program 4 (id=200): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0)}, 0x20) socket$inet6(0xa, 0xf, 0xffffffff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x1bd, @loopback}, 0x10) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000500)={0xf0f01d, 0x5}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000540)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f0000000680)=""/154, 0x9a, 0x4) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CHANINFO(r6, 0x80306403, &(0x7f0000058c80)={0x1, 0x0, 0x0, &(0x7f0000030a80)}) 4m12.872383617s ago: executing program 4 (id=202): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, r1, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x3, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x4, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r3, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfffa, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 4m10.590066753s ago: executing program 4 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x8) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./proc_mnt\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt/kcore\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000280)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r4, &(0x7f0000001340)=""/102400, 0x19000) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000340)=""/4096, 0xfdef}], 0x1, 0xe1, 0x5) 4m8.97019314s ago: executing program 4 (id=205): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r3, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x150) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000) socket$rxrpc(0x21, 0x2, 0x2) 3m53.841857971s ago: executing program 32 (id=205): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) fcntl$addseals(r3, 0x409, 0x7) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)=0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(r4, &(0x7f00000000c0)='./file0\x00', 0x150) recvmsg$kcm(r6, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x20000) socket$rxrpc(0x21, 0x2, 0x2) 22.639601644s ago: executing program 2 (id=548): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 20.293189756s ago: executing program 2 (id=553): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x11c0, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)='n', 0x1) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x20) splice(r0, 0x0, r3, 0x0, 0x8000, 0x0) 18.905607999s ago: executing program 0 (id=557): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xeffffffffffffffe, 0x0, 0x0, 0x0, 0x8000004, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@remote, 0xfffffffc, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, 0x0, 0x0, 0x2, 0x7, 0x200, 0x10000}}, 0xe8) sendmmsg(r1, &(0x7f0000000280), 0x2e9, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fallocate(r2, 0x0, 0x22004, 0x100007f) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, 0x0, 0x0) shutdown(r3, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="44010000160033060000000000000080e0000002b25523640800000000000000ff0200000000000000000000000000012d79e77100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb000000000000000000000000000004d232000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000400000000000c0000000000000000000000000000000500000000000000040000000000000000000000020000000200000002000418000000000000000048000200656362286369706865725f6e756c6c2900"/212], 0x144}}, 0x0) 17.260535289s ago: executing program 2 (id=558): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000001c40)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x40410, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) pwrite64(0xffffffffffffffff, &(0x7f0000000040)="01921dc787e1e2c6e392d42312a882a789eb2703522d73dac3f965884f6ae0294e3fef6b47709081b4a4221539885867f1d34c9b0abbf71da704222ee98e111d8fce52fa6e411262", 0x48, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x0}, 0x51) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1195, &(0x7f0000000180)={0x0, 0x24f9, 0xc000, 0x3, 0x23a}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x17, 0x0}, &(0x7f0000000480)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) io_uring_setup(0x66a, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000500)={0x8, 0x100008b}, 0x0) dup2(r2, r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000540)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x802, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141102) writev(r3, &(0x7f0000000600)=[{&(0x7f0000000640)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000680), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="180000001e1401"], 0x18}}, 0x2000481c) r7 = syz_open_procfs(0x0, &(0x7f00000007c0)='net/icmp6\x00') read$FUSE(r7, &(0x7f0000001f40)={0x2020}, 0x2020) socket$rds(0x15, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/connector\x00') 17.049418891s ago: executing program 0 (id=560): syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$vim2m(&(0x7f00000004c0), 0x5, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioctl$KVM_TDX_INIT_MEM_REGION(0xffffffffffffffff, 0xc008aeba, &(0x7f0000000500)={0x3, 0x1, 0x0}) syz_clone3(&(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x2}, 0xa0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000600), 0x80140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000640)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000680)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000006c0), 0x2, 0x143102) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000740)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000780)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000980)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "5b500028003a00000000000001000001000012670000000000000000000000001122334411223344"}}}, 0x0) nanosleep(&(0x7f00000009c0)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000a00)={@random="ffffffffffff", @random="aabbccddeeff", @void, {@generic={0x88ca, "40c000180000000000000000010000010000000000000000"}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) symlink(&(0x7f0000000b40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000c40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') shmctl$SHM_UNLOCK(0x0, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 13.27269359s ago: executing program 0 (id=562): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001dc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r3, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001ae80)=0x80000000000003) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) inotify_init1(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x402000784853bb, 0x0) 12.275249313s ago: executing program 2 (id=565): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000200)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000280)=@abs, 0x6e) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000600)='pim6reg\x00', 0x10) sendto$inet(r2, 0x0, 0x0, 0x804, 0x0, 0x0) setsockopt$inet_int(r2, 0x0, 0x12, &(0x7f0000000080)=0x3, 0x4) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f00000000c0)=0x323, 0x2) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x7ffff7ff}], 0x1, 0x40000100, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000001c0)=r3) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000004c0)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000500)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000540)=""/61, 0x60000}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000580)=0x1) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) ioctl$XFS_IOC_ERROR_INJECTION(0xffffffffffffffff, 0x40085874, &(0x7f00000005c0)={0xffffffffffffffff, 0x8}) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000300)=@abs, 0x6e) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='net/icmp\x00') preadv(r5, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/165, 0xa5}], 0x1, 0x180, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 10.132725914s ago: executing program 1 (id=567): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 10.121371466s ago: executing program 5 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x8, 0x7fffffffefffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000193c0)=0x410000002) syz_open_procfs(0x0, &(0x7f0000019400)='net/tcp6\x00') mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019440), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file1'}, 0x5b) mount(&(0x7f0000019500)=@filename='mtd0\x00', &(0x7f0000019540)='./file0\x00', &(0x7f0000019580)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000195c0)='./file0\x00') creat(&(0x7f0000019600)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000002c0)='./file2\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 9.851555353s ago: executing program 1 (id=569): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x11c0, 0x0) write$binfmt_misc(r1, &(0x7f0000000380)='n', 0x1) io_setup(0x1, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x4}]) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x20) splice(r0, 0x0, r3, 0x0, 0x8000, 0x0) 8.613990091s ago: executing program 0 (id=570): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps_rollup\x00') mremap(&(0x7f000000a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00000fc000/0x2000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000001c0)}, 0x20) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141102) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x1bd, @loopback}, 0x10) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000400), 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000004c0)='xfrm0\x00', 0x10) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000500)={0xf0f01d, 0x5}) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000540)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pread64(r0, &(0x7f0000000680)=""/154, 0x9a, 0x4) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_CHANINFO(r7, 0x80306403, &(0x7f0000058c80)={0x1, 0x0, 0x0, &(0x7f0000030a80)}) 8.437406209s ago: executing program 3 (id=571): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000640)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000680)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000700)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000007c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000800), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = syz_ublk_setup_io_uring(0x4f25, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x0, 0x1e5}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000480)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0, 0x40002102, 0x1, {0x3}}) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000540)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000005c0)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000600)) 8.411040462s ago: executing program 1 (id=572): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) recvmmsg$unix(r0, 0x0, 0x0, 0x121, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb47, 0x4, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) timer_create(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 7.476633758s ago: executing program 5 (id=573): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}}, 0x0) 7.229993664s ago: executing program 3 (id=574): socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={0x0, 0xb8}}, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f00000196c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) write(r0, &(0x7f0000019740)="1c0000001a009b8a14e5f4070009042400000000ff020000000000", 0x1b) recvmmsg$unix(r0, &(0x7f0000019780)=[{{0x0, 0x0, 0x0}}], 0x11, 0x10002, 0x0) syz_open_procfs(0x0, &(0x7f00000197c0)='oom_adj\x00') syz_clone(0x8280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 7.125886064s ago: executing program 5 (id=575): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000001c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000200), 0x10106, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0x100, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) bind$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0xfffffffffffffd81) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setresgid(0xee00, 0xee01, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="ffffffff45ffaaaaaaaaaabb86dd60122d9200103afffe800000cdf2000000000000000000bbff0200000000000000000000000000019300907800010004"], 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0xfffffe41) socket$nl_generic(0x10, 0x3, 0x10) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x10) shutdown(r3, 0x2) 7.106367137s ago: executing program 2 (id=576): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x2, 0x5, 0x5e8, 0x0, 0x448, 0xffffffff, 0xf0, 0x220, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote, @port=0x4e22, @gre_key=0xfffe}}}, {{@uncond, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[0x0, 0x0, 0xffffff00]}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x3, @ipv4=@local, @ipv4=@multicast2, @port=0x4e24, @gre_key=0x200}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x7f, [0x6, 0x8], 0x3, 0x8, 0x2, [@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @loopback, @empty, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x2f}, @dev={0xfe, 0x80, '\x00', 0x1c}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, @empty, @dev={0xfe, 0x80, '\x00', 0x12}, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1], 0x7}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x4, @ipv6=@empty, @ipv4=@private=0xa010101, @icmp_id=0x68, @port=0x4e22}}}, {{@ipv6={@remote, @mcast1, [0xff0000ff, 0xff000000, 0xff000000], [0xffffffff], 'veth1_macvtap\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r1, 0xf504, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r4 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r4, 0xffff) fcntl$addseals(r4, 0x409, 0x7) r5 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000000)={r4, 0x0, 0x4000, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r5, 0x40086200, &(0x7f0000000380)=0x2) close_range(r2, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, 0x0, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5c00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f8001d000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 7.105397537s ago: executing program 1 (id=577): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x9, 0x3831354f, 0x1, @stepwise={0xda, 0x100, 0x8000, 0x80000000, 0x0, 0x9}}) syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x14b102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000240), 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000009c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x16, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f0000000a80)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000ac0)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4, 0x3}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r4, &(0x7f0000000bc0), 0x2e9, 0x0) 5.345141968s ago: executing program 3 (id=578): r0 = socket(0xa, 0x3, 0xff) bind$inet(r0, &(0x7f00000005c0)={0x2, 0x4e23, @empty}, 0x10) 5.095866444s ago: executing program 5 (id=579): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) socket$netlink(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$kcm(0x10, 0x2, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, &(0x7f0000000000)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x9e\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xea\xd1L\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!\'\xc3\xf9\xa3\xd9\x85\xddI\x11\x8a\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3R\x92q.\x8d)\"\x8f\xb2\xc6$s^\xd1vU\x9cB\x00ao\xf1\'\x00', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000280), 0x2, 0x141102) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000080601080000000000000000010000010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40044}, 0x48040) 4.322705994s ago: executing program 0 (id=580): prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000480)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000005c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000600)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f00000001c0)={0x0, 0xbae1, 0x40, 0x3, 0x10000158}, &(0x7f0000000240)=0x0, 0x0, &(0x7f00000002c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, 0x0, r6, &(0x7f0000000300)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x1, 0x2d5, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x81}}}, &(0x7f0000019640)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000019680)={0x0, 0x0, 0x80, 0x3, 0x257}, &(0x7f0000019700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x80, 0x0, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffa, 0x2, 0x20008000, 0x327, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x1, 0x20}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x20, 0x1, 0x258}}], 0x1, &(0x7f0000019980)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, r7, '\x00', {0xfff9, 0x9, 0x0, 0x0}}, 0x0) 2.844025066s ago: executing program 2 (id=581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000001d40)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000001dc0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001e00)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000001e40), 0x0, 0x0) read$msr(r3, &(0x7f0000001e80)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f000001ae80)=0x80000000000003) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x2}]}, 0x14}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) inotify_init1(0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x402000784853bb, 0x0) 2.797154451s ago: executing program 0 (id=582): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/thread-self/fail-nth\x00', 0x202, 0x150) write(r0, &(0x7f00000002c0)='27', 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0214200011"], 0x88}}, 0x20000000) 2.795308642s ago: executing program 5 (id=583): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x178) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, 0x0, 0x441, 0x345) r1 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r1, &(0x7f0000f4c000/0x2000)=nil, 0x0) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) r2 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x1, 0x0, 0x7, &(0x7f0000000200)={0x0, "f4e1a230b44f44eaa65e405b747aa95df8c02c12eb4eaf00"}}) fallocate(r0, 0x8, 0x7fffffffefffffff, 0x3fff) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x200a7a) sched_setscheduler(r3, 0x2, &(0x7f0000000100)=0x4) r4 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r4, &(0x7f00000003c0)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f00000193c0)=0x410000002) syz_open_procfs(0x0, &(0x7f0000019400)='net/tcp6\x00') mount(0x0, 0x0, 0x0, 0x100054, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000019440), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000019480)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x3, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file1'}, 0x5b) mount(&(0x7f0000019500)=@filename='mtd0\x00', &(0x7f0000019540)='./file0\x00', &(0x7f0000019580)='jffs2\x00', 0x800040, 0x0) chdir(&(0x7f00000195c0)='./file0\x00') creat(&(0x7f0000019600)='./file0\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000019640)='./proc\x00', 0x1ff) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000240)=@o_path={&(0x7f00000002c0)='./file2\x00', 0xffffffffffffffff, 0x4000, r4}, 0x18) 2.674061134s ago: executing program 3 (id=584): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.093548944s ago: executing program 5 (id=585): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000440)={[], [{@pcr={'pcr', 0x3d, 0x34}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}]}, 0x3, 0x45f, &(0x7f0000000f40)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x800007, 0x401d031, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b80)=0x7) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fffc) close(0x4) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000bc0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000c40)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000cc0), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000d00), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000d40)=0x6) syz_mount_image$udf(&(0x7f0000000180), &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB=',volume=0000000000000006,\x00\x00\x00\x00\x00'], 0x1, 0x489, &(0x7f0000004080)="$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") r5 = open(&(0x7f0000004540)='.\x00', 0x0, 0x0) flock(r5, 0x6) symlinkat(&(0x7f0000004580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000046c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') semctl$IPC_RMID(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000d80)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007f9, &(0x7f0000000dc0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./mysys\x00', &(0x7f0000000e80)='jffs2\x00', 0x40000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) 1.717502753s ago: executing program 1 (id=586): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x800000000003ff]}, 0x8, 0x800) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x3, 0x4, 0x4, 0x9, 0x80, r0, 0x0, '\x00', 0x0, r0, 0x1}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000001c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r3, &(0x7f0000002380)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8, 0x2000007, 0x401d031, r0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f000001b3c0)=0xce, 0x4) connect$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f000001b440)=0x7e6, 0x4) sendmsg$inet(r1, &(0x7f000001b480)={0x0, 0x0, &(0x7f000001b4c0)=[{&(0x7f000001b500)=' ', 0x1}], 0x1}, 0x0) setgroups(0x0, 0x0) setregid(0x0, 0x0) r4 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x1) r5 = add_key$user(&(0x7f0000000100), &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)="49725528c88bc9e85ecf5a312e2e8d22845b0dd06363e30958754fa8a8ad2db13ea3a243ed63c33d248f6f6ad28621d5a5f4779de146cece7325262e289d15a160e0627996c996cc3f5f15e239569a02192ee319743c9d854c31982a579087132aafcd72c24f3e4b9cb21637c41b17fcbc11917d7d11d5998e49eda354f5d0f2b2", 0x81, 0xfffffffffffffffd) keyctl$describe(0x6, r5, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r4, 0x0, 0x0) fchdir(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="660a00002000000061114c0000000000850000001a0000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 1.669839388s ago: executing program 3 (id=587): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f00000007c0)="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", 0x265}], 0x1}, 0x80c0) r1 = syz_io_uring_setup(0x3ee8, &(0x7f0000000640)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0, &(0x7f0000000740)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a40)=@IORING_OP_BIND=@ipv6={0x38, 0x40, 0x0, 0xffffffffffffffff, 0x2d, 0x0}) io_uring_enter(r1, 0x7c65, 0xa334, 0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = syz_open_dev$sg(&(0x7f0000000b00), 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SG_IO(r5, 0x301, &(0x7f0000000b40)={0x53, 0xfffffffffffffffd, 0x0, 0xad, @buffer={0x0, 0x0, 0x0}, 0x0, 0x0, 0x2, 0x21, 0x2, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000bc0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000c00)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f0000000c80), 0x2, 0x141102) writev(r6, &(0x7f0000000cc0)=[{&(0x7f0000000d00)="94", 0xf000}, {0x0}], 0x2) socket$rds(0x15, 0x5, 0x0) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000d80)='./nfsd\x00', &(0x7f0000000dc0)='nfsd\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/portlist\x00', 0x1, 0x0) write(r7, &(0x7f0000000e40)='3', 0x1d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r8, &(0x7f0000000040)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r8, 0xa, 0x1, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x0, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], &(0x7f0000000380), 0x0}, 0x40) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000400)={0x3, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYRES32, @ANYBLOB="1d00000020200000800000e2", @ANYRES32=r11, @ANYRES64=r9], 0x20) signalfd(r0, &(0x7f0000000600)={[0x101]}, 0x8) 186.228091ms ago: executing program 1 (id=588): socket(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f00000000c0), 0x0) r0 = socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x6) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000019580)={0x0, 0x0, &(0x7f00000195c0)={0x0, 0xb8}}, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) r3 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r3, &(0x7f00000196c0)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) write(r0, &(0x7f0000019740)="1c0000001a009b8a14e5f4070009042400000000ff02000000000000", 0x1e5) recvmmsg$unix(r0, 0x0, 0x0, 0x10002, 0x0) syz_open_procfs(0x0, &(0x7f00000197c0)='oom_adj\x00') syz_clone(0x8280000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 0s ago: executing program 3 (id=589): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x142000) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x40010) r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000500)={0x0, 0x30b5, 0x0, 0x2, 0x377}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000840)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x6, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0xfffffffd, 0x32c}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1006, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ac7, 0x8000, 0x10000000, 0x548}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xfffffffc}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc9a5, 0x2000, 0x2, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x3, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 74.738725][ T4264] cgroup: Unknown subsys name 'net' [ 74.868356][ T4264] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.415772][ T4264] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.787253][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.795490][ T4292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.804465][ T4292] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.804880][ T4293] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.815820][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.826810][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.826999][ T4293] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.837625][ T4292] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.843234][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.849235][ T4292] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.856357][ T4293] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.863064][ T4292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.869970][ T4293] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.876893][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.884102][ T4293] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.893687][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.900344][ T4293] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.905979][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.912260][ T4293] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.919365][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.925421][ T4293] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.934654][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.941765][ T4293] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.952672][ T4293] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.960151][ T4293] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.993872][ T4282] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.001253][ T4282] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.048102][ T4293] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.056267][ T4295] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.063978][ T4295] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.117843][ T4279] rdma_rxe: rxe_register_device failed with error -23 [ 79.130462][ T4277] rdma_rxe: rxe_register_device failed with error -23 [ 79.133658][ T4288] rdma_rxe: rxe_register_device failed with error -23 [ 79.139921][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.152540][ T4279] rdma_rxe: failed to add rxe_eth0 [ 79.157966][ T4277] rdma_rxe: failed to add rxe_eth0 [ 79.163390][ T4288] rdma_rxe: failed to add rxe_eth0 [ 79.168761][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.203174][ T4281] rdma_rxe: rxe_register_device failed with error -23 [ 79.212408][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.212725][ T4281] rdma_rxe: failed to add rxe_eth0 [ 79.462158][ T2177] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.470014][ T4276] infiniband rxe0: set active [ 79.475657][ T4276] infiniband rxe0: added rxe_eth0 [ 79.574213][ T4276] RDS/IB: rxe0: added [ 79.578816][ T4276] smc: adding ib device rxe0 with port count 1 [ 79.585708][ T4276] smc: ib device rxe0 port 1 has pnetid [ 79.594049][ T26] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.628337][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.825301][ T4288] chnl_net:caif_netlink_parms(): no params data found [ 79.870788][ T4281] chnl_net:caif_netlink_parms(): no params data found [ 79.895631][ T4277] chnl_net:caif_netlink_parms(): no params data found [ 79.936539][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 79.950667][ T4279] chnl_net:caif_netlink_parms(): no params data found [ 80.174137][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.262541][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.270466][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.279522][ T4281] device bridge_slave_0 entered promiscuous mode [ 80.322601][ T4279] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.330720][ T4279] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.347149][ T4279] device bridge_slave_0 entered promiscuous mode [ 80.358797][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.367913][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.379892][ T4281] device bridge_slave_1 entered promiscuous mode [ 80.402179][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.409342][ T4277] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.425038][ T4277] device bridge_slave_0 entered promiscuous mode [ 80.437753][ T4279] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.445833][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.458617][ T4279] device bridge_slave_1 entered promiscuous mode [ 80.466217][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.498505][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.506480][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.519352][ T4288] device bridge_slave_0 entered promiscuous mode [ 80.528728][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.541136][ T4277] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.549649][ T4277] device bridge_slave_1 entered promiscuous mode [ 80.618217][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.636369][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.653215][ T4288] device bridge_slave_1 entered promiscuous mode [ 80.675410][ T4277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.696424][ T4279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.714247][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.726448][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.748569][ T4276] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.777434][ T4277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.796746][ T4279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.874553][ T4288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.936598][ T4281] team0: Port device team_slave_0 added [ 80.946991][ T4281] team0: Port device team_slave_1 added [ 80.969644][ T4288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.981606][ T4279] team0: Port device team_slave_0 added [ 81.002190][ T4277] team0: Port device team_slave_0 added [ 81.038712][ T4279] team0: Port device team_slave_1 added [ 81.044703][ T4295] Bluetooth: hci2: command 0x0409 tx timeout [ 81.044720][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 81.051043][ T4295] Bluetooth: hci4: command 0x0409 tx timeout [ 81.057406][ T4289] Bluetooth: hci1: command 0x0409 tx timeout [ 81.071566][ T4277] team0: Port device team_slave_1 added [ 81.090538][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.097789][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.124813][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 81.132231][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.169367][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.176552][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.203124][ T4279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.222268][ T4279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.229280][ T4279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.255626][ T4279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.275579][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.282991][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.309531][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.323250][ T4288] team0: Port device team_slave_0 added [ 81.345381][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.352513][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.378526][ T4277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.402603][ T4288] team0: Port device team_slave_1 added [ 81.426496][ T4277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.433736][ T4277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.459985][ T4277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.505366][ T4281] device hsr_slave_0 entered promiscuous mode [ 81.518106][ T4281] device hsr_slave_1 entered promiscuous mode [ 81.543265][ T4279] device hsr_slave_0 entered promiscuous mode [ 81.550538][ T4279] device hsr_slave_1 entered promiscuous mode [ 81.557863][ T4279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.566029][ T4279] Cannot create hsr debugfs directory [ 81.599796][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.607010][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.633042][ T4288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.663528][ T4277] device hsr_slave_0 entered promiscuous mode [ 81.670333][ T4277] device hsr_slave_1 entered promiscuous mode [ 81.677118][ T4277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.684990][ T4277] Cannot create hsr debugfs directory [ 81.704332][ T4288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.711324][ T4288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.738427][ T4288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.866113][ T4288] device hsr_slave_0 entered promiscuous mode [ 81.873533][ T4288] device hsr_slave_1 entered promiscuous mode [ 81.880242][ T4288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.887927][ T4288] Cannot create hsr debugfs directory [ 82.123043][ T4276] chnl_net:caif_netlink_parms(): no params data found [ 82.202094][ T4281] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.239057][ T4281] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.272906][ T4281] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.294966][ T4281] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.304760][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.313252][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.321461][ T4276] device bridge_slave_0 entered promiscuous mode [ 82.339207][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.348801][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.358407][ T4276] device bridge_slave_1 entered promiscuous mode [ 82.387448][ T4279] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.414639][ T4279] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.425951][ T4279] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.437486][ T4276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.447749][ T4279] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.462531][ T4276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.520844][ T4276] team0: Port device team_slave_0 added [ 82.572988][ T4276] team0: Port device team_slave_1 added [ 82.586275][ T4277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.619326][ T4277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.653434][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.660450][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.689779][ T4276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.701564][ T4277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.729365][ T4276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.736582][ T4276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.762822][ T4276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.782381][ T4277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.798810][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.856682][ T4276] device hsr_slave_0 entered promiscuous mode [ 82.866278][ T4276] device hsr_slave_1 entered promiscuous mode [ 82.873514][ T4276] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.881107][ T4276] Cannot create hsr debugfs directory [ 82.890032][ T4288] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.900642][ T4288] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.920239][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.930455][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.942670][ T4288] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.951639][ T4288] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.968773][ T4281] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.026704][ T4279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.053009][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.062863][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.072327][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.079635][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.105693][ T4279] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.122095][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 83.122683][ T4293] Bluetooth: hci0: command 0x041b tx timeout [ 83.128167][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 83.134645][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 83.152685][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.161777][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.170279][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.178555][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.188828][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.199524][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.206702][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.214742][ T4295] Bluetooth: hci3: command 0x041b tx timeout [ 83.255425][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.269866][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.279479][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.286652][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.299653][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.313247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.358822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.375168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.388625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.398699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.407742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.416745][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.423930][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.431602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.441608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.451247][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.460682][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.473510][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.488484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.544056][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.554203][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.563426][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.572939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.581530][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.590737][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.600027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.609141][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.635688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.647955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.656753][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.667933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.685622][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.697518][ T4279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.711430][ T4288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.725975][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.782534][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.796243][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.826130][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.842680][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.856524][ T4288] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.878004][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.914385][ T4276] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.934898][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.955741][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.972171][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.979407][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.017050][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.030526][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.056783][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.064007][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.103695][ T4276] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.125351][ T4276] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.139079][ T4276] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.149326][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.177865][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.188489][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.207830][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.225537][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.232748][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.252700][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.261803][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.313040][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.331220][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.368408][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.388150][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.413193][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.420373][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.432652][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.441703][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.451054][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.462784][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.471469][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.480968][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.490677][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.536763][ T4279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.548991][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.558647][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.568992][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.579183][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.589157][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.598018][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.607016][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.614888][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.626747][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.663531][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.676183][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.685999][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.694301][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.719759][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.731567][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.742085][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.759332][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.769175][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.782676][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.791119][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.824861][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.843686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.853391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.874223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.892573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.929885][ T4279] device veth0_vlan entered promiscuous mode [ 84.990009][ T4276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.012853][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.022233][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.034823][ T4279] device veth1_vlan entered promiscuous mode [ 85.094245][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.114417][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.150793][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.159086][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.167373][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.176107][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.185253][ T4281] device veth0_vlan entered promiscuous mode [ 85.200366][ T4276] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.207362][ T4295] Bluetooth: hci2: command 0x040f tx timeout [ 85.207399][ T4295] Bluetooth: hci4: command 0x040f tx timeout [ 85.212499][ T4293] Bluetooth: hci1: command 0x040f tx timeout [ 85.227581][ T4295] Bluetooth: hci0: command 0x040f tx timeout [ 85.248672][ T4281] device veth1_vlan entered promiscuous mode [ 85.270211][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.282890][ T4293] Bluetooth: hci3: command 0x040f tx timeout [ 85.299139][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.322797][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.331769][ T4356] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.339003][ T4356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.348146][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.357176][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.366854][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.391181][ T4279] device veth0_macvtap entered promiscuous mode [ 85.430857][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.444947][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.463091][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.482188][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.499929][ T4356] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.507125][ T4356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.515641][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.547509][ T4279] device veth1_macvtap entered promiscuous mode [ 85.593329][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.605994][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.625347][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.651352][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.663396][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.673109][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.683849][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.693861][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.702631][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.712584][ T4281] device veth0_macvtap entered promiscuous mode [ 85.725387][ T4281] device veth1_macvtap entered promiscuous mode [ 85.736327][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.745030][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.754352][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.766496][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.795500][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.817480][ T4276] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.835312][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.854672][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.863974][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.873350][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.883427][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.891733][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.899504][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.913718][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.924067][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.933984][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.954794][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.964489][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.973964][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.986495][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.007197][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.025268][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.041285][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.054211][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.061777][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.080113][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.100402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.114804][ T4288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.144831][ T4281] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.162137][ T4281] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.184647][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.196250][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.213730][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.230140][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.245217][ T4281] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.255867][ T4281] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.265401][ T4281] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.274789][ T4281] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.379556][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.393491][ T1124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.453383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.473668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.504068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.519751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.589078][ T4288] device veth0_vlan entered promiscuous mode [ 86.651578][ T4288] device veth1_vlan entered promiscuous mode [ 86.691272][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.712113][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.727507][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.768501][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.785948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.813594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.822081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.830127][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.854336][ T4288] device veth0_macvtap entered promiscuous mode [ 86.878516][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.895622][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.913400][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.939920][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.956305][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.967626][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.997954][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 87.019357][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 87.055291][ T4288] device veth1_macvtap entered promiscuous mode [ 87.086112][ T4276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.120057][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.131227][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.162055][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.172128][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.202426][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.221940][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.245243][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.264765][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.292326][ T4293] Bluetooth: hci1: command 0x0419 tx timeout [ 87.298428][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 87.304549][ T4295] Bluetooth: hci4: command 0x0419 tx timeout [ 87.310585][ T4295] Bluetooth: hci2: command 0x0419 tx timeout [ 87.318015][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.328746][ T4288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.351896][ T4288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.362916][ T4295] Bluetooth: hci3: command 0x0419 tx timeout [ 87.377577][ T4288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.392525][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.414104][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.456826][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.499701][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.518357][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.578780][ T4288] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.607729][ T4288] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.642187][ T4288] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.651151][ T4288] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.723934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.821726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.381902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.457477][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.554153][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.574804][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.586457][ T4392] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.678173][ T4276] device veth0_vlan entered promiscuous mode [ 88.701891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.711884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.721888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.731885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.741887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.751897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 88.761889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 88.841897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 88.851883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 90.989802][ T4276] device veth1_vlan entered promiscuous mode [ 91.016420][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.025968][ T4393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.049208][ T4393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.091449][ T4393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.177043][ T27] audit: type=1800 audit(1793421039.847:2): pid=4407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 91.696773][ T958] cfg80211: failed to load regulatory.db [ 92.021066][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.083215][ T2177] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.105001][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.116501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.149310][ T4276] device veth0_macvtap entered promiscuous mode [ 92.193452][ T4277] device veth0_vlan entered promiscuous mode [ 92.200286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.214796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.240388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.280577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.289646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.329751][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.351608][ T4276] device veth1_macvtap entered promiscuous mode [ 92.359616][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.380858][ T4277] device veth1_vlan entered promiscuous mode [ 92.415335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.426124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.441268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.477727][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.505765][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.523025][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.538249][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.549705][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.577597][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.605075][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.626102][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.647945][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.667543][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.884314][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.918364][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.958766][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.991922][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.011684][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.032706][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.067565][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.087010][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.100672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.138533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.156671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.168344][ T4277] device veth0_macvtap entered promiscuous mode [ 94.312780][ T4276] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.321742][ T4276] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.330934][ T4276] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.350380][ T4276] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.386024][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 94.411237][ T4277] device veth1_macvtap entered promiscuous mode [ 95.151713][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.230572][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.242253][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.253638][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.272008][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.291257][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.302056][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.316158][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.328266][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.339145][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.899285][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.962578][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.991880][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.001802][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.042102][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.073861][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.221251][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.271972][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.295033][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.333400][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.391931][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 98.412776][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.463647][ T4277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.484386][ T4277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.547783][ T4277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.577407][ T4277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.691059][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.716011][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.769805][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.817861][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.861986][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.886955][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.922787][ T4440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.930658][ T4440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.982612][ T4440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.008570][ T4440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.031475][ T4440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.041698][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.121993][ T4481] Zero length message leads to an empty skb [ 103.559097][ T4504] netlink: 76 bytes leftover after parsing attributes in process `syz.2.23'. [ 110.042242][ T4348] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 110.671741][ T4348] usb 5-1: Using ep0 maxpacket: 16 [ 112.599838][ T4348] usb 5-1: device descriptor read/all, error -71 [ 114.841357][ T4571] netlink: 76 bytes leftover after parsing attributes in process `syz.2.40'. [ 115.790142][ T4595] loop3: detected capacity change from 0 to 512 [ 116.404385][ T4595] ext2: Unknown parameter 'pcr' [ 116.610682][ T4593] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.152072][ T958] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.393585][ T958] usb 3-1: Using ep0 maxpacket: 16 [ 117.450125][ T958] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.506326][ T4612] loop3: detected capacity change from 0 to 128 [ 117.521980][ T958] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 117.542848][ T4593] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 117.569865][ T958] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 117.615373][ T958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.710249][ T958] usb 3-1: config 0 descriptor?? [ 117.744320][ T958] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 117.791183][ T4612] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 117.841308][ T4612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.996349][ T4607] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 119.677309][ T4628] loop0: detected capacity change from 0 to 512 [ 119.709196][ T4628] ext2: Unknown parameter 'pcr' [ 119.974911][ T4374] usb 3-1: USB disconnect, device number 2 [ 120.238243][ T4634] loop0: detected capacity change from 0 to 128 [ 120.298706][ T4634] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 120.323503][ T4634] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.904993][ T4661] ip_tables: iptables: counters copy to user failed while replacing table [ 131.240048][ T4698] ip_tables: iptables: counters copy to user failed while replacing table [ 132.645476][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.652196][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.184432][ T4731] loop4: detected capacity change from 0 to 512 [ 135.211030][ T4731] ext2: Unknown parameter 'pcr' [ 135.278931][ T4732] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 135.835040][ T4740] loop4: detected capacity change from 0 to 128 [ 135.958594][ T4745] ip_tables: iptables: counters copy to user failed while replacing table [ 136.037407][ T4740] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 136.496227][ T4740] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.684020][ T4788] ip_tables: iptables: counters copy to user failed while replacing table [ 143.940518][ T27] audit: type=1800 audit(1793421092.587:3): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.107" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 147.007490][ T4826] syz.3.102 (4826): /proc/4821/oom_adj is deprecated, please use /proc/4821/oom_score_adj instead. [ 147.074202][ T4826] loop3: detected capacity change from 0 to 512 [ 147.081381][ T4826] ======================================================= [ 147.081381][ T4826] WARNING: The mand mount option has been deprecated and [ 147.081381][ T4826] and is ignored by this kernel. Remove the mand [ 147.081381][ T4826] option from the mount to silence this warning. [ 147.081381][ T4826] ======================================================= [ 147.207450][ T4826] EXT4-fs error (device loop3): ext4_get_journal_inode:5769: comm syz.3.102: inode #2147418112: comm syz.3.102: iget: illegal inode # [ 147.250509][ T4826] EXT4-fs (loop3): no journal found [ 147.255866][ T4826] EXT4-fs (loop3): can't get journal size [ 147.281583][ T4826] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 147.378270][ T4826] EXT4-fs (loop3): Errors on filesystem, clearing orphan list. [ 147.387197][ T4826] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.465708][ T4388] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.654218][ T4388] usb 2-1: Using ep0 maxpacket: 32 [ 147.667322][ T4388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.732291][ T155] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.739996][ T4388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.791993][ T4388] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 147.839247][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.962045][ T155] usb 3-1: Using ep0 maxpacket: 16 [ 148.019685][ T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 148.084106][ T4388] usb 2-1: config 0 descriptor?? [ 148.222468][ T155] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 148.349886][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.483000][ T155] usb 3-1: Product: syz [ 148.529571][ T155] usb 3-1: Manufacturer: syz [ 148.596116][ T155] usb 3-1: SerialNumber: syz [ 148.806995][ T155] usb 3-1: config 0 descriptor?? [ 148.823576][ T4388] usbhid 2-1:0.0: can't add hid device: -71 [ 148.838405][ T4388] usbhid: probe of 2-1:0.0 failed with error -71 [ 148.864475][ T155] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 148.898523][ T4388] usb 2-1: USB disconnect, device number 2 [ 148.920628][ T155] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 149.229898][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 149.473292][ T155] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 154.401435][ T155] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 154.461584][ T155] em28xx 3-1:0.0: board has no eeprom [ 154.563997][ T155] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 154.588083][ T155] em28xx 3-1:0.0: dvb set to bulk mode. [ 154.645527][ T155] usb 3-1: USB disconnect, device number 3 [ 154.750181][ T129] em28xx 3-1:0.0: Binding DVB extension [ 154.768303][ T155] em28xx 3-1:0.0: Disconnecting em28xx [ 157.339983][ T129] em28xx 3-1:0.0: Registering input extension [ 157.365313][ T155] em28xx 3-1:0.0: Closing input extension [ 157.428270][ T155] em28xx 3-1:0.0: Freeing device [ 160.280263][ T4905] loop0: detected capacity change from 0 to 512 [ 162.025644][ T4905] ext2: Unknown parameter 'pcr' [ 162.978607][ T27] audit: type=1800 audit(1793421110.927:4): pid=4913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.136" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 165.023535][ T4921] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.292131][ T4935] loop1: detected capacity change from 0 to 512 [ 166.321181][ T4935] ext2: Unknown parameter 'pcr' [ 167.399585][ T4951] loop1: detected capacity change from 0 to 128 [ 167.422164][ T4951] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 167.434230][ T4951] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 176.001968][ T958] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 177.612088][ T958] usb 2-1: Using ep0 maxpacket: 16 [ 177.673997][ T958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 177.685646][ T958] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 177.694969][ T958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.941970][ T27] audit: type=1800 audit(1793421126.187:5): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.149" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 178.001232][ T958] usb 2-1: config 0 descriptor?? [ 178.014123][ T4984] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 181.166923][ T958] usbhid 2-1:0.0: can't add hid device: -71 [ 181.180874][ T958] usbhid: probe of 2-1:0.0 failed with error -71 [ 181.241491][ T958] usb 2-1: USB disconnect, device number 3 [ 181.334002][ T5011] loop1: detected capacity change from 0 to 512 [ 181.364391][ T5011] ext2: Unknown parameter 'pcr' [ 181.715473][ T5015] loop1: detected capacity change from 0 to 128 [ 181.763767][ T5015] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 181.894310][ T5015] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 183.763171][ T5031] netlink: 76 bytes leftover after parsing attributes in process `syz.1.170'. [ 184.712523][ T5038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 185.422679][ T27] audit: type=1800 audit(1793421134.107:6): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.172" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 187.874799][ T5061] ip_tables: iptables: counters copy to user failed while replacing table [ 190.442005][ T7] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 190.677373][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 190.709568][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 190.737089][ T7] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 190.766577][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.791006][ T7] usb 4-1: config 0 descriptor?? [ 190.805212][ T5066] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.750951][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 191.762094][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 191.778354][ T7] usb 4-1: USB disconnect, device number 2 [ 193.583468][ T5095] sched: RT throttling activated [ 195.240607][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.281111][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.722184][ T4374] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.111960][ T4374] usb 2-1: Using ep0 maxpacket: 16 [ 200.119075][ T4374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 200.842280][ T4374] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 200.851393][ T4374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.320514][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 202.327151][ T4292] Bluetooth: hci3: command 0x0406 tx timeout [ 202.342113][ T4292] Bluetooth: hci4: command 0x0406 tx timeout [ 202.348183][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 202.351996][ T4294] Bluetooth: hci2: command 0x0406 tx timeout [ 202.392530][ T4374] usb 2-1: config 0 descriptor?? [ 202.399255][ T5125] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.506986][ T4374] usbhid 2-1:0.0: can't add hid device: -71 [ 202.531918][ T4374] usbhid: probe of 2-1:0.0 failed with error -71 [ 202.597070][ T4374] usb 2-1: USB disconnect, device number 4 [ 205.168625][ T5155] jffs2: notice: (5155) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 211.319406][ T5189] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 214.251915][ T26] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 214.451970][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 214.460601][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 214.519283][ T26] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 214.550613][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.640392][ T26] usb 2-1: config 0 descriptor?? [ 214.674392][ T5216] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.371381][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 216.412536][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 216.435719][ T26] usb 2-1: USB disconnect, device number 5 [ 227.202615][ T4292] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 227.212830][ T4292] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 227.221923][ T4388] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 227.236065][ T4292] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 227.247469][ T4292] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 227.260607][ T4292] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 227.268386][ T4292] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 227.313827][ T9] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.456033][ T5292] rxe_eth0 speed is unknown, defaulting to 1000 [ 227.471899][ T4388] usb 2-1: Using ep0 maxpacket: 16 [ 227.478574][ T4388] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 227.535204][ T4388] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 227.580034][ T4388] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.633672][ T9] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.674043][ T4388] usb 2-1: config 0 descriptor?? [ 227.679811][ T5289] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 227.959129][ T9] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.024975][ T5302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 228.071211][ T5302] gadgetfs: bound to dummy_udc driver [ 228.194307][ T9] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.314074][ T4388] usbhid 2-1:0.0: can't add hid device: -71 [ 228.320118][ T4388] usbhid: probe of 2-1:0.0 failed with error -71 [ 228.352064][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 228.361375][ C0] gadgetfs: connected [ 228.383872][ T129] gadgetfs: disconnected [ 228.419914][ T4388] usb 2-1: USB disconnect, device number 6 [ 228.518393][ T5302] gadgetfs: suspended from state 2 [ 228.533880][ T5302] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 228.803712][ T129] usb 1-1: device not accepting address 2, error -71 [ 228.870354][ T5302] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 228.877103][ T5302] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 228.885797][ T5302] vhci_hcd vhci_hcd.0: Device attached [ 228.973291][ T5306] vhci_hcd: connection closed [ 228.980062][ T4554] vhci_hcd: stop threads [ 229.019092][ T4554] vhci_hcd: release socket [ 229.030424][ T4554] vhci_hcd: disconnect device [ 229.362062][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 230.374803][ T5322] ip_tables: iptables: counters copy to user failed while replacing table [ 231.375528][ T5292] chnl_net:caif_netlink_parms(): no params data found [ 231.442019][ T4295] Bluetooth: hci1: command 0x041b tx timeout [ 233.531911][ T4295] Bluetooth: hci1: command 0x040f tx timeout [ 234.103969][ T5292] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.111198][ T5292] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.119753][ T5292] device bridge_slave_0 entered promiscuous mode [ 234.144331][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.202129][ T5292] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.212207][ T5292] device bridge_slave_1 entered promiscuous mode [ 234.583579][ T5292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.714401][ T5292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.800399][ T5292] team0: Port device team_slave_0 added [ 234.811287][ T5292] team0: Port device team_slave_1 added [ 234.942871][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.997780][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.182022][ T5292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.395476][ T5292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.411922][ T5292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.595848][ T5292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.606660][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 235.802781][ T5368] ip_tables: iptables: counters copy to user failed while replacing table [ 236.687914][ T5292] device hsr_slave_0 entered promiscuous mode [ 236.791745][ T5292] device hsr_slave_1 entered promiscuous mode [ 236.852114][ T5292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 236.859825][ T5292] Cannot create hsr debugfs directory [ 237.915502][ T4374] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 237.994515][ T958] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.133551][ T4374] usb 3-1: unable to get BOS descriptor or descriptor too short [ 238.162533][ T4374] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.199961][ T4374] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.210129][ T958] usb 4-1: Using ep0 maxpacket: 16 [ 238.221036][ T958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 238.242372][ T958] usb 4-1: New USB device found, idVendor=0c70, idProduct=f00d, bcdDevice= 0.00 [ 238.261493][ T4374] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 238.271319][ T958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.289038][ T4374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.328159][ T4374] usb 3-1: Product: syz [ 238.334038][ T958] usb 4-1: config 0 descriptor?? [ 238.342381][ T4374] usb 3-1: Manufacturer: syz [ 238.347469][ T5374] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 238.355186][ T4374] usb 3-1: SerialNumber: syz [ 238.391309][ T4374] usb 3-1: selecting invalid altsetting 1 [ 238.411576][ T4374] usb 3-1: unit 6 not found! [ 239.701193][ T4374] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 239.789212][ T4374] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 239.898085][ T4374] usb 3-1: USB disconnect, device number 4 [ 239.916521][ T958] usbhid 4-1:0.0: can't add hid device: -71 [ 239.922640][ T958] usbhid: probe of 4-1:0.0 failed with error -71 [ 240.015578][ T958] usb 4-1: USB disconnect, device number 3 [ 240.143177][ T5292] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 240.215378][ T5292] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 240.279583][ T5292] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 240.293941][ T5365] udevd[5365]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.381736][ T9] device hsr_slave_0 left promiscuous mode [ 240.472047][ T9] device hsr_slave_1 left promiscuous mode [ 240.482980][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.500746][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.861913][ T14] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 241.949759][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.022949][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.102208][ T14] usb 3-1: Using ep0 maxpacket: 8 [ 242.127785][ T14] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 242.226409][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.487677][ T9] device bridge_slave_1 left promiscuous mode [ 242.508165][ T14] pvrusb2: Hardware description: Terratec Grabster AV400 [ 242.529438][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.603029][ T14] pvrusb2: ********** [ 242.657785][ T14] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 242.935468][ T14] pvrusb2: Important functionality might not be entirely working. [ 243.082621][ T14] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 243.226273][ T14] pvrusb2: ********** [ 243.303707][ T2318] pvrusb2: Invalid write control endpoint [ 243.544673][ T9] device bridge_slave_0 left promiscuous mode [ 243.584907][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.746738][ T5409] usb 3-1: USB disconnect, device number 5 [ 243.921058][ T2318] pvrusb2: Invalid write control endpoint [ 243.941183][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 244.466990][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 244.612826][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 244.627632][ T9] device veth1_macvtap left promiscuous mode [ 244.646537][ T9] device veth0_macvtap left promiscuous mode [ 244.688641][ T9] device veth1_vlan left promiscuous mode [ 244.712033][ T2318] pvrusb2: Device being rendered inoperable [ 244.722497][ T9] device veth0_vlan left promiscuous mode [ 244.773953][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 244.811906][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 244.888667][ T2318] pvrusb2: Attached sub-driver cx25840 [ 244.925211][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 245.035155][ T5421] ip_tables: iptables: counters copy to user failed while replacing table [ 245.830908][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 246.281921][ T5409] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 246.499897][ T5428] ip_tables: iptables: counters copy to user failed while replacing table [ 246.673046][ T5409] usb 3-1: config 0 interface 0 has no altsetting 0 [ 247.132310][ T5409] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 247.141869][ T5409] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.161232][ T5409] usb 3-1: config 0 descriptor?? [ 247.594942][ T5409] hid (null): unknown global tag 0xfd [ 247.653276][ T5409] waltop 0003:172F:0034.0001: unexpected long global item [ 247.682200][ T5409] waltop: probe of 0003:172F:0034.0001 failed with error -22 [ 250.418987][ T958] usb 3-1: USB disconnect, device number 6 [ 254.006300][ T9] team0 (unregistering): Port device team_slave_1 removed [ 254.185808][ T9] team0 (unregistering): Port device team_slave_0 removed [ 254.726536][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.252824][ T5461] ip_tables: iptables: counters copy to user failed while replacing table [ 255.525223][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.531597][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.652237][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.359845][ T27] audit: type=1800 audit(1793421207.037:7): pid=5475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name=08 dev="sda1" ino=2044 res=0 errno=0 [ 259.363946][ T5481] FAULT_INJECTION: forcing a failure. [ 259.363946][ T5481] name failslab, interval 1, probability 0, space 0, times 1 [ 259.422047][ T5481] CPU: 1 PID: 5481 Comm: syz.0.271 Not tainted syzkaller #0 [ 259.429421][ T5481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 259.439527][ T5481] Call Trace: [ 259.442846][ T5481] [ 259.445818][ T5481] dump_stack_lvl+0x188/0x24e [ 259.451047][ T5481] ? show_regs_print_info+0x12/0x12 [ 259.456394][ T5481] ? load_image+0x410/0x410 [ 259.460933][ T5481] ? __might_sleep+0xd0/0xd0 [ 259.465567][ T5481] ? __lock_acquire+0x7ea0/0x7ea0 [ 259.470629][ T5481] should_fail_ex+0x390/0x4c0 [ 259.475340][ T5481] should_failslab+0x5/0x20 [ 259.479883][ T5481] slab_pre_alloc_hook+0x59/0x300 [ 259.484942][ T5481] kmem_cache_alloc_node+0x5a/0x310 [ 259.490174][ T5481] ? kmem_cache_free+0xf7/0x2a0 [ 259.495051][ T5481] ? __alloc_skb+0xf9/0x7d0 [ 259.499623][ T5481] __alloc_skb+0xf9/0x7d0 [ 259.503986][ T5481] pfkey_sendmsg+0xd64/0x1140 [ 259.508698][ T5481] ? pfkey_release+0x340/0x340 [ 259.513496][ T5481] ? aa_sock_msg_perm+0x94/0x150 [ 259.518467][ T5481] ? apparmor_socket_sendmsg+0x16c/0x330 [ 259.524130][ T5481] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 259.529440][ T5481] ? security_socket_sendmsg+0x7c/0xa0 [ 259.534923][ T5481] ? pfkey_release+0x340/0x340 [ 259.539717][ T5481] ____sys_sendmsg+0x5ed/0x9a0 [ 259.544517][ T5481] ? __sys_sendmsg_sock+0x30/0x30 [ 259.549605][ T5481] ? __import_iovec+0x306/0x510 [ 259.554495][ T5481] ? import_iovec+0x6f/0xa0 [ 259.559030][ T5481] ___sys_sendmsg+0x2a2/0x360 [ 259.563747][ T5481] ? __sys_sendmsg+0x2a0/0x2a0 [ 259.568582][ T5481] __se_sys_sendmsg+0x1c3/0x2b0 [ 259.573466][ T5481] ? __x64_sys_sendmsg+0x80/0x80 [ 259.578465][ T5481] ? lockdep_hardirqs_on+0x94/0x140 [ 259.583695][ T5481] do_syscall_64+0x4c/0xa0 [ 259.588141][ T5481] ? clear_bhb_loop+0x60/0xb0 [ 259.592850][ T5481] ? clear_bhb_loop+0x60/0xb0 [ 259.597588][ T5481] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 259.603532][ T5481] RIP: 0033:0x7fc78cd9f559 [ 259.607986][ T5481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.627710][ T5481] RSP: 002b:00007fc78dd23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 259.636169][ T5481] RAX: ffffffffffffffda RBX: 00007fc78d025fa0 RCX: 00007fc78cd9f559 [ 259.644164][ T5481] RDX: 0000000020000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 259.652173][ T5481] RBP: 00007fc78ce36b20 R08: 0000000000000000 R09: 0000000000000000 [ 259.660180][ T5481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.668197][ T5481] R13: 00007fc78d026038 R14: 00007fc78d025fa0 R15: 00007ffd7371a5c8 [ 259.676224][ T5481] [ 259.815035][ T9] bond0 (unregistering): Released all slaves [ 259.919416][ T5292] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.381422][ T5492] ip_tables: iptables: counters copy to user failed while replacing table [ 261.084956][ T5292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.088944][ T5292] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.185769][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 262.199434][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.220637][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 262.257809][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 262.302499][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.309706][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.365828][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 262.404098][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 262.419103][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.426225][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.455472][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 262.554232][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.591246][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 262.648273][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 262.668271][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 262.702802][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 262.742536][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 262.799274][ T5292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.881918][ T5292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.932149][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 262.940899][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 262.993050][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 263.039692][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 263.082918][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 263.092755][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 263.956953][ T7] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 264.161554][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 264.200676][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 264.241253][ T7] usb 3-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 264.300706][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.422020][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 264.429532][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 264.469690][ T5292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.571920][ T7] pegasus: probe of 3-1:1.0 failed with error -32 [ 267.894004][ T7] usb 3-1: USB disconnect, device number 7 [ 268.202580][ T4347] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 268.391917][ T4347] usb 2-1: Using ep0 maxpacket: 16 [ 268.436986][ T4347] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.493485][ T4347] usb 2-1: config 9 has an invalid interface number: 57 but max is 0 [ 268.562925][ T4347] usb 2-1: config 9 has no interface number 0 [ 268.569084][ T4347] usb 2-1: config 9 interface 57 has no altsetting 0 [ 268.695196][ T4347] usb 2-1: string descriptor 0 read error: -22 [ 268.761492][ T4347] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=61.f7 [ 268.792122][ T4347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.745649][ T4347] video4linux radio48: keene_cmd_main failed (-71) [ 269.763241][ T5574] ip_tables: iptables: counters copy to user failed while replacing table [ 270.583568][ T4347] radio-keene 2-1:9.57: V4L2 device registered as radio48 [ 270.657890][ T5576] ip_tables: iptables: counters copy to user failed while replacing table [ 270.809368][ T4347] usb 2-1: USB disconnect, device number 7 [ 271.051065][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 271.118077][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 272.163393][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 272.229302][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 272.488470][ T5586] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 273.621960][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 273.646331][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 273.705858][ T5292] device veth0_vlan entered promiscuous mode [ 273.764764][ T5292] device veth1_vlan entered promiscuous mode [ 275.306208][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 276.998754][ T5123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.102738][ T5292] device veth0_macvtap entered promiscuous mode [ 277.171243][ T5292] device veth1_macvtap entered promiscuous mode [ 277.402691][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.432084][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.445612][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.456340][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.495308][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.525128][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.554436][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.581603][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.618195][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.660870][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 277.693000][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 277.714022][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.737587][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.752143][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.771962][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.792204][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.816018][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.897563][ T5292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.917382][ T5292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.969553][ T5292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.001216][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 278.018678][ T4467] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 278.063783][ T5292] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.086365][ T5292] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.123215][ T5292] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.145407][ T5292] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.836380][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.893040][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.014082][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.059866][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.096677][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.135714][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.240139][ T5618] ip_tables: iptables: counters copy to user failed while replacing table [ 285.596791][ T5636] overlayfs: unrecognized mount option "verity=off" or missing value [ 290.424707][ T5683] ip_tables: iptables: counters copy to user failed while replacing table [ 293.082579][ T5699] overlayfs: unrecognized mount option "verity=off" or missing value [ 293.778236][ T5708] ip_tables: iptables: counters copy to user failed while replacing table [ 295.768506][ T5726] loop0: detected capacity change from 0 to 512 [ 295.802544][ T5729] ip_tables: iptables: counters copy to user failed while replacing table [ 295.918263][ T5726] ext2: Unknown parameter 'pcr' [ 298.714646][ T5748] overlayfs: unrecognized mount option "verity=off" or missing value [ 303.962515][ T5774] ip_tables: iptables: counters copy to user failed while replacing table [ 305.424880][ T5789] ip_tables: iptables: counters copy to user failed while replacing table [ 307.097775][ T5801] overlayfs: unrecognized mount option "verity=off" or missing value [ 308.563145][ T5812] FAULT_INJECTION: forcing a failure. [ 308.563145][ T5812] name failslab, interval 1, probability 0, space 0, times 0 [ 308.596463][ T5812] CPU: 1 PID: 5812 Comm: syz.3.326 Not tainted syzkaller #0 [ 308.603828][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 308.613932][ T5812] Call Trace: [ 308.617257][ T5812] [ 308.620228][ T5812] dump_stack_lvl+0x188/0x24e [ 308.624980][ T5812] ? show_regs_print_info+0x12/0x12 [ 308.630237][ T5812] ? load_image+0x410/0x410 [ 308.634803][ T5812] ? __might_sleep+0xd0/0xd0 [ 308.639440][ T5812] ? __lock_acquire+0x7ea0/0x7ea0 [ 308.644542][ T5812] should_fail_ex+0x390/0x4c0 [ 308.649274][ T5812] should_failslab+0x5/0x20 [ 308.653805][ T5812] slab_pre_alloc_hook+0x59/0x300 [ 308.658869][ T5812] ? kvmalloc_node+0x6c/0x180 [ 308.663575][ T5812] __kmem_cache_alloc_node+0x4f/0x270 [ 308.668977][ T5812] ? kvmalloc_node+0x6c/0x180 [ 308.673685][ T5812] __kmalloc_node+0xa2/0x240 [ 308.678297][ T5812] ? bpf_lsm_capable+0x5/0x10 [ 308.683037][ T5812] ? security_capable+0x85/0xb0 [ 308.687955][ T5812] kvmalloc_node+0x6c/0x180 [ 308.692481][ T5812] bpf_check+0xc42/0x11060 [ 308.696953][ T5812] ? mark_lock+0x94/0x320 [ 308.701324][ T5812] ? __lock_acquire+0x1359/0x7ea0 [ 308.706395][ T5812] ? mark_lock+0x94/0x320 [ 308.710768][ T5812] ? bpf_get_btf_vmlinux+0x60/0x60 [ 308.715903][ T5812] ? __lock_acquire+0x142d/0x7ea0 [ 308.720958][ T5812] ? mark_lock+0x94/0x320 [ 308.725319][ T5812] ? __lock_acquire+0x1359/0x7ea0 [ 308.730383][ T5812] ? mark_lock+0x94/0x320 [ 308.734754][ T5812] ? __lock_acquire+0x142d/0x7ea0 [ 308.739833][ T5812] ? verify_lock_unused+0x140/0x140 [ 308.745069][ T5812] ? verify_lock_unused+0x140/0x140 [ 308.750297][ T5812] ? verify_lock_unused+0x140/0x140 [ 308.755520][ T5812] ? pcpu_memcg_post_alloc_hook+0xe6/0x490 [ 308.761374][ T5812] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 308.767384][ T5812] ? __lock_acquire+0x7ea0/0x7ea0 [ 308.772439][ T5812] ? lock_chain_count+0x20/0x20 [ 308.777332][ T5812] ? seqcount_lockdep_reader_access+0x127/0x1d0 [ 308.783603][ T5812] ? lockdep_hardirqs_on+0x94/0x140 [ 308.788827][ T5812] ? ktime_get_with_offset+0xff/0x320 [ 308.794253][ T5812] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 308.800516][ T5812] ? ktime_get_real_ts64+0x440/0x440 [ 308.805832][ T5812] ? do_raw_spin_unlock+0x11d/0x230 [ 308.811054][ T5812] ? __might_fault+0xc2/0x120 [ 308.815758][ T5812] ? memset+0x1e/0x40 [ 308.819761][ T5812] ? bpf_obj_name_cpy+0x190/0x1d0 [ 308.824867][ T5812] bpf_prog_load+0x100e/0x1530 [ 308.829682][ T5812] ? map_freeze+0x390/0x390 [ 308.834221][ T5812] ? __might_fault+0xa6/0x120 [ 308.838930][ T5812] ? __might_fault+0xa6/0x120 [ 308.843629][ T5812] ? __might_fault+0xc2/0x120 [ 308.848351][ T5812] ? __might_fault+0xa6/0x120 [ 308.853049][ T5812] ? bpf_lsm_bpf+0x5/0x10 [ 308.857405][ T5812] ? security_bpf+0x7a/0xa0 [ 308.861941][ T5812] __sys_bpf+0x5b8/0x780 [ 308.866216][ T5812] ? bpf_link_show_fdinfo+0x550/0x550 [ 308.871658][ T5812] ? lock_chain_count+0x20/0x20 [ 308.876554][ T5812] __x64_sys_bpf+0x78/0x90 [ 308.881007][ T5812] do_syscall_64+0x4c/0xa0 [ 308.885450][ T5812] ? clear_bhb_loop+0x60/0xb0 [ 308.890152][ T5812] ? clear_bhb_loop+0x60/0xb0 [ 308.894857][ T5812] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.900792][ T5812] RIP: 0033:0x7fca2a19f559 [ 308.905246][ T5812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.924893][ T5812] RSP: 002b:00007fca283f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 308.933335][ T5812] RAX: ffffffffffffffda RBX: 00007fca2a425fa0 RCX: 00007fca2a19f559 [ 308.941349][ T5812] RDX: 0000000000000094 RSI: 00002000000006c0 RDI: 0000000000000005 [ 308.949348][ T5812] RBP: 00007fca2a236b20 R08: 0000000000000000 R09: 0000000000000000 [ 308.957360][ T5812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.965353][ T5812] R13: 00007fca2a426038 R14: 00007fca2a425fa0 R15: 00007ffd050cb118 [ 308.973362][ T5812] [ 311.283340][ T5825] ip_tables: iptables: counters copy to user failed while replacing table [ 312.654455][ T5835] jffs2: notice: (5835) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 313.271655][ T5841] ip_tables: iptables: counters copy to user failed while replacing table [ 317.288198][ T5868] loop0: detected capacity change from 0 to 512 [ 317.341264][ T5868] EXT4-fs error (device loop0): ext4_get_journal_inode:5769: comm syz.0.350: inode #2147418112: comm syz.0.350: iget: illegal inode # [ 317.359740][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.370114][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.452765][ T5868] EXT4-fs (loop0): no journal found [ 317.458044][ T5868] EXT4-fs (loop0): can't get journal size [ 317.514230][ T5868] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 317.533142][ T5868] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 317.542870][ T5868] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 317.573558][ T5871] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 317.727731][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 318.201815][ T5885] jffs2: notice: (5885) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 320.171145][ T5898] ip_tables: iptables: counters copy to user failed while replacing table [ 325.218276][ T5922] overlayfs: unrecognized mount option "verity=off" or missing value [ 328.760221][ T5940] ip_tables: iptables: counters copy to user failed while replacing table [ 335.818730][ T5996] netlink: 44 bytes leftover after parsing attributes in process `syz.1.376'. [ 335.828085][ T5996] netlink: 59 bytes leftover after parsing attributes in process `syz.1.376'. [ 335.837043][ T5996] netlink: 59 bytes leftover after parsing attributes in process `syz.1.376'. [ 336.831488][ T5998] ip_tables: iptables: counters copy to user failed while replacing table [ 336.972275][ T6001] process 'syz.1.381' launched './file1' with NULL argv: empty string added [ 345.572141][ T6048] ip_tables: iptables: counters copy to user failed while replacing table [ 348.452781][ T4388] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 349.072442][ T4388] usb 2-1: Using ep0 maxpacket: 32 [ 349.091205][ T4388] usb 2-1: unable to get BOS descriptor or descriptor too short [ 349.219856][ T4388] usb 2-1: config 14 has an invalid interface number: 225 but max is 1 [ 349.246669][ T6073] overlayfs: unrecognized mount option "verity=off" or missing value [ 349.312001][ T4347] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 349.552794][ T4388] usb 2-1: config 14 has an invalid interface number: 113 but max is 1 [ 349.571537][ T4388] usb 2-1: config 14 has no interface number 0 [ 349.611917][ T4388] usb 2-1: config 14 has no interface number 1 [ 349.641897][ T4388] usb 2-1: config 14 interface 113 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 349.641946][ T4347] usb 6-1: Using ep0 maxpacket: 8 [ 349.681942][ T4388] usb 2-1: config 14 interface 113 altsetting 5 has an invalid endpoint with address 0xD1, skipping [ 349.698043][ T4347] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 349.701866][ T4388] usb 2-1: config 14 interface 113 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 349.727009][ T4347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.738960][ T4388] usb 2-1: config 14 interface 113 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.755553][ T4347] usb 6-1: Product: syz [ 349.759777][ T4347] usb 6-1: Manufacturer: syz [ 349.764924][ T4388] usb 2-1: config 14 interface 225 has no altsetting 0 [ 349.764947][ T4388] usb 2-1: config 14 interface 113 has no altsetting 0 [ 349.772801][ T4292] Bluetooth: hci1: command 0x0406 tx timeout [ 349.788303][ T4388] usb 2-1: New USB device found, idVendor=12d1, idProduct=1429, bcdDevice= 0.00 [ 349.798434][ T4388] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.808580][ T4388] usb 2-1: Product: syz [ 349.813080][ T4388] usb 2-1: Manufacturer: syz [ 349.817720][ T4388] usb 2-1: SerialNumber: syz [ 349.931099][ T4347] usb 6-1: SerialNumber: syz [ 349.982939][ T4347] usb 6-1: config 0 descriptor?? [ 350.003093][ T4347] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 350.011081][ T4347] pctv452e: pctv452e_power_ctrl: 1 [ 350.011081][ T4347] [ 350.021471][ T6086] loop2: detected capacity change from 0 to 512 [ 350.080021][ T6086] ext2: Unknown parameter 'pcr' [ 350.139858][ T4347] usb 6-1: selecting invalid altsetting 3 [ 350.174358][ T4347] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 350.174358][ T4347] [ 350.231028][ T4347] dvb-usb: bulk message failed: -22 (5/0) [ 350.261614][ T6075] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 350.297292][ T4347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 350.514679][ T4347] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 350.529508][ T4347] usb 6-1: media controller created [ 350.535723][ T4347] dvb-usb: bulk message failed: -22 (8/0) [ 350.542480][ T4347] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 350.551660][ T4347] dvb-usb: MAC address reading failed. [ 351.382536][ T4388] usb-storage 2-1:14.225: USB Mass Storage device detected [ 351.420703][ T4347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.486573][ T6096] loop2: detected capacity change from 0 to 128 [ 351.502137][ T6096] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 351.516050][ T6096] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 351.588053][ T4388] usb-storage 2-1:14.113: USB Mass Storage device detected [ 352.480306][ T4388] usb 2-1: USB disconnect, device number 8 [ 352.982262][ T6119] ip_tables: iptables: counters copy to user failed while replacing table [ 353.066023][ T4347] DVB: Unable to find symbol stb0899_attach() [ 354.534995][ T4347] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 354.910634][ T6135] tmpfs: Unknown parameter 'quota' [ 356.012004][ T4347] rc_core: IR keymap rc-tt-1500 not found [ 356.017878][ T4347] Registered IR keymap rc-empty [ 356.072348][ T4347] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 356.140830][ T4347] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input7 [ 356.230426][ T4347] dvb-usb: schedule remote query interval to 100 msecs. [ 356.258920][ T4347] pctv452e: pctv452e_power_ctrl: 0 [ 356.258920][ T4347] [ 356.305881][ T4347] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 356.383660][ T4347] usb 6-1: USB disconnect, device number 2 [ 357.293323][ T4347] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 357.452343][ T6152] netlink: 76 bytes leftover after parsing attributes in process `syz.3.415'. [ 359.144474][ T6162] overlayfs: unrecognized mount option "verity=off" or missing value [ 359.454076][ T6171] jffs2: notice: (6171) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 359.757506][ T6171] jffs2: fork failed for JFFS2 garbage collect thread: 4 [ 359.907919][ T6175] loop2: detected capacity change from 0 to 512 [ 359.972710][ T6175] ext2: Unknown parameter 'pcr' [ 361.144229][ T6181] ip_tables: iptables: counters copy to user failed while replacing table [ 361.421395][ T6188] loop0: detected capacity change from 0 to 512 [ 361.557781][ T6188] EXT4-fs error (device loop0): ext4_get_journal_inode:5769: comm syz.0.421: inode #2147418112: comm syz.0.421: iget: illegal inode # [ 361.574889][ T6188] EXT4-fs (loop0): no journal found [ 361.580252][ T6188] EXT4-fs (loop0): can't get journal size [ 361.718084][ T6188] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 361.768021][ T6188] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 361.776965][ T6188] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 362.073294][ T4276] EXT4-fs (loop0): unmounting filesystem. [ 362.541620][ T6208] loop2: detected capacity change from 0 to 128 [ 362.574952][ T6208] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 362.587002][ T6208] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 364.964866][ T6229] jffs2: notice: (6229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 366.118899][ T6232] overlayfs: unrecognized mount option "verity=off" or missing value [ 366.272818][ T6238] ip_tables: iptables: counters copy to user failed while replacing table [ 371.076494][ T6271] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 371.155712][ T6280] raw_sendmsg: syz.3.444 forgot to set AF_INET. Fix it! [ 372.553740][ T6285] ip_tables: iptables: counters copy to user failed while replacing table [ 374.791405][ T6303] ip_tables: iptables: counters copy to user failed while replacing table [ 378.779294][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.785822][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.332191][ T6340] ip_tables: iptables: counters copy to user failed while replacing table [ 380.494927][ T6350] ip_tables: iptables: counters copy to user failed while replacing table [ 385.869190][ T6382] ip_tables: iptables: counters copy to user failed while replacing table [ 387.018410][ T6395] ip_tables: iptables: counters copy to user failed while replacing table [ 393.736721][ T6434] tmpfs: Unknown parameter 'quota' [ 393.903917][ T6436] ip_tables: iptables: counters copy to user failed while replacing table [ 394.400248][ T6441] ip_tables: iptables: counters copy to user failed while replacing table [ 402.337018][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.492'. [ 402.429607][ T6485] ip_tables: iptables: counters copy to user failed while replacing table [ 409.287825][ T6526] ip_tables: iptables: counters copy to user failed while replacing table [ 417.957434][ T6589] tmpfs: Unknown parameter 'quota' [ 420.933354][ T6606] netlink: 76 bytes leftover after parsing attributes in process `syz.0.516'. [ 431.061036][ T6669] netlink: 76 bytes leftover after parsing attributes in process `syz.0.542'. [ 433.894876][ T6684] rt1719: probe of 0-0004 failed with error -5 [ 433.937756][ T6684] i2c i2c-0: new_device: Instantiated device rt1719 at 0x04 [ 434.167912][ T6695] loop1: detected capacity change from 0 to 512 [ 434.390794][ T6695] EXT4-fs error (device loop1): ext4_get_journal_inode:5769: comm syz.1.539: inode #2147418112: comm syz.1.539: iget: illegal inode # [ 434.406610][ T6695] EXT4-fs (loop1): no journal found [ 434.412062][ T6695] EXT4-fs (loop1): can't get journal size [ 434.442637][ T6695] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 434.472111][ T6695] EXT4-fs (loop1): Errors on filesystem, clearing orphan list. [ 434.481298][ T6695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 436.708751][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 438.992760][ T6728] ip_tables: iptables: counters copy to user failed while replacing table [ 439.846599][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.853037][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.863623][ T6732] netlink: 'syz.1.556': attribute type 15 has an invalid length. [ 439.884848][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 439.899043][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 439.910733][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 440.190352][ T6736] netlink: 76 bytes leftover after parsing attributes in process `syz.0.557'. [ 441.942297][ T958] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 442.693617][ T6752] tmpfs: Unknown parameter 'quota' [ 445.501780][ T958] usb 4-1: Using ep0 maxpacket: 16 [ 446.296004][ T958] usb 4-1: device descriptor read/all, error -71 [ 450.456973][ T6786] jffs2: notice: (6786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 456.233266][ T6828] jffs2: notice: (6828) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 456.876362][ T6836] loop5: detected capacity change from 0 to 512 [ 456.959990][ T6836] ext2: Unknown parameter 'pcr' [ 458.802607][ T4281] ================================================================== [ 458.810795][ T4281] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0 [ 458.818652][ T4281] Write of size 4 at addr ffff888054f33050 by task syz-executor/4281 [ 458.826809][ T4281] [ 458.829228][ T4281] CPU: 0 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 458.836861][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 458.846950][ T4281] Call Trace: [ 458.850324][ T4281] [ 458.853351][ T4281] dump_stack_lvl+0x188/0x24e [ 458.858188][ T4281] ? __lock_acquire+0x7ea0/0x7ea0 [ 458.863345][ T4281] ? show_regs_print_info+0x12/0x12 [ 458.868582][ T4281] ? load_image+0x410/0x410 [ 458.873143][ T4281] ? __virt_addr_valid+0x467/0x540 [ 458.878336][ T4281] ? nfsd_shutdown_threads+0x89/0x1a0 [ 458.883739][ T4281] print_report+0xa8/0x210 [ 458.888199][ T4281] kasan_report+0x10b/0x140 [ 458.892883][ T4281] ? nfsd_shutdown_threads+0x89/0x1a0 [ 458.898303][ T4281] kasan_check_range+0x235/0x290 [ 458.903403][ T4281] nfsd_shutdown_threads+0x89/0x1a0 [ 458.908651][ T4281] nfsd_umount+0x3e/0xc0 [ 458.912937][ T4281] deactivate_locked_super+0x93/0xf0 [ 458.918328][ T4281] cleanup_mnt+0x471/0x4f0 [ 458.922846][ T4281] task_work_run+0x1d0/0x260 [ 458.927528][ T4281] ? task_work_cancel+0x220/0x220 [ 458.932643][ T4281] ? exit_to_user_mode_loop+0x3b/0x110 [ 458.938220][ T4281] exit_to_user_mode_loop+0xe6/0x110 [ 458.943567][ T4281] exit_to_user_mode_prepare+0xee/0x180 [ 458.949163][ T4281] syscall_exit_to_user_mode+0x16/0x40 [ 458.954671][ T4281] do_syscall_64+0x58/0xa0 [ 458.959154][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 458.963982][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 458.968717][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.974668][ T4281] RIP: 0033:0x7fca2a1a0797 [ 458.979176][ T4281] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 458.998857][ T4281] RSP: 002b:00007ffd050ca388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 459.007366][ T4281] RAX: 0000000000000000 RBX: 00007fca2a235f63 RCX: 00007fca2a1a0797 [ 459.015373][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd050ca440 [ 459.023382][ T4281] RBP: 00007ffd050ca440 R08: 00007ffd050cb440 R09: 00000000ffffffff [ 459.031393][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd050cb4d0 [ 459.039406][ T4281] R13: 00007fca2a235f63 R14: 000000000006ff26 R15: 00007ffd050cb510 [ 459.047422][ T4281] [ 459.050470][ T4281] [ 459.052835][ T4281] Allocated by task 6844: [ 459.057262][ T4281] kasan_set_track+0x4b/0x70 [ 459.061897][ T4281] __kasan_kmalloc+0x8e/0xa0 [ 459.066538][ T4281] __svc_create+0x60/0x9d0 [ 459.071051][ T4281] svc_create_pooled+0x71f/0x8c0 [ 459.076035][ T4281] nfsd_create_serv+0x2f9/0x700 [ 459.080940][ T4281] write_ports+0x526/0xb80 [ 459.085412][ T4281] nfsctl_transaction_write+0x105/0x150 [ 459.091007][ T4281] vfs_write+0x2dc/0x9a0 [ 459.095293][ T4281] ksys_write+0x14d/0x260 [ 459.099659][ T4281] do_syscall_64+0x4c/0xa0 [ 459.104125][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.110067][ T4281] [ 459.112417][ T4281] Freed by task 6844: [ 459.116423][ T4281] kasan_set_track+0x4b/0x70 [ 459.121062][ T4281] kasan_save_free_info+0x27/0x40 [ 459.126121][ T4281] ____kasan_slab_free+0x126/0x1f0 [ 459.131292][ T4281] slab_free_freelist_hook+0x133/0x1b0 [ 459.136806][ T4281] __kmem_cache_free+0xb6/0x200 [ 459.141700][ T4281] write_ports+0x9ac/0xb80 [ 459.146160][ T4281] nfsctl_transaction_write+0x105/0x150 [ 459.151746][ T4281] vfs_write+0x2dc/0x9a0 [ 459.156021][ T4281] ksys_write+0x14d/0x260 [ 459.160385][ T4281] do_syscall_64+0x4c/0xa0 [ 459.164933][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.170872][ T4281] [ 459.173232][ T4281] The buggy address belongs to the object at ffff888054f33000 [ 459.173232][ T4281] which belongs to the cache kmalloc-512 of size 512 [ 459.187414][ T4281] The buggy address is located 80 bytes inside of [ 459.187414][ T4281] 512-byte region [ffff888054f33000, ffff888054f33200) [ 459.200654][ T4281] [ 459.203011][ T4281] The buggy address belongs to the physical page: [ 459.209519][ T4281] page:ffffea000153cc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54f30 [ 459.219697][ T4281] head:ffffea000153cc00 order:2 compound_mapcount:0 compound_pincount:0 [ 459.228058][ T4281] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 459.236101][ T4281] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888018441c80 [ 459.244726][ T4281] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 459.253352][ T4281] page dumped because: kasan: bad access detected [ 459.259801][ T4281] page_owner tracks the page as allocated [ 459.265562][ T4281] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4279, tgid 4279 (syz-executor), ts 84524625660, free_ts 25375921847 [ 459.286955][ T4281] post_alloc_hook+0x173/0x1a0 [ 459.291846][ T4281] get_page_from_freelist+0x206b/0x2180 [ 459.297470][ T4281] __alloc_pages+0x1ec/0x4f0 [ 459.302115][ T4281] alloc_slab_page+0x5d/0x180 [ 459.306841][ T4281] new_slab+0x87/0x2d0 [ 459.310954][ T4281] ___slab_alloc+0xbc5/0x1240 [ 459.315692][ T4281] __kmem_cache_alloc_node+0x126/0x270 [ 459.321183][ T4281] __kmalloc_node_track_caller+0xa0/0x240 [ 459.327007][ T4281] __alloc_skb+0x226/0x7d0 [ 459.331528][ T4281] netlink_sendmsg+0x654/0xbd0 [ 459.336402][ T4281] __sys_sendto+0x497/0x650 [ 459.340944][ T4281] __x64_sys_sendto+0xda/0xf0 [ 459.345663][ T4281] do_syscall_64+0x4c/0xa0 [ 459.350127][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 459.356116][ T4281] page last free stack trace: [ 459.360832][ T4281] free_unref_page_prepare+0x8e5/0x9e0 [ 459.366346][ T4281] free_unref_page+0x2e/0x3f0 [ 459.371068][ T4281] free_contig_range+0x9d/0x150 [ 459.376013][ T4281] destroy_args+0xef/0xa0e [ 459.380545][ T4281] debug_vm_pgtable+0x33c/0x38e [ 459.385453][ T4281] do_one_initcall+0x257/0x800 [ 459.390281][ T4281] do_initcall_level+0x13d/0x1ed [ 459.395274][ T4281] do_initcalls+0x4b/0x8a [ 459.399640][ T4281] kernel_init_freeable+0x401/0x5ab [ 459.404896][ T4281] kernel_init+0x19/0x1b0 [ 459.409270][ T4281] ret_from_fork+0x1f/0x30 [ 459.413749][ T4281] [ 459.416108][ T4281] Memory state around the buggy address: [ 459.421865][ T4281] ffff888054f32f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 459.429959][ T4281] ffff888054f32f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 459.438048][ T4281] >ffff888054f33000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 459.446141][ T4281] ^ [ 459.452854][ T4281] ffff888054f33080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 459.460944][ T4281] ffff888054f33100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 459.469031][ T4281] ================================================================== [ 459.856014][ T6836] loop5: detected capacity change from 0 to 128 [ 459.961312][ T6836] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 460.031562][ T6836] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.170125][ T4281] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 460.177449][ T4281] CPU: 1 PID: 4281 Comm: syz-executor Not tainted syzkaller #0 [ 460.184995][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 460.195157][ T4281] Call Trace: [ 460.198436][ T4281] [ 460.201385][ T4281] dump_stack_lvl+0x188/0x24e [ 460.206080][ T4281] ? memcpy+0x3c/0x60 [ 460.210072][ T4281] ? show_regs_print_info+0x12/0x12 [ 460.215281][ T4281] ? load_image+0x410/0x410 [ 460.219802][ T4281] panic+0x2d3/0x710 [ 460.223710][ T4281] ? bpf_jit_dump+0xd0/0xd0 [ 460.228229][ T4281] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 460.234216][ T4281] ? _raw_spin_unlock+0x40/0x40 [ 460.239070][ T4281] ? print_memory_metadata+0x314/0x400 [ 460.244540][ T4281] check_panic_on_warn+0x80/0xa0 [ 460.249569][ T4281] ? nfsd_shutdown_threads+0x89/0x1a0 [ 460.254960][ T4281] end_report+0x66/0x110 [ 460.259238][ T4281] kasan_report+0x118/0x140 [ 460.263760][ T4281] ? nfsd_shutdown_threads+0x89/0x1a0 [ 460.269145][ T4281] kasan_check_range+0x235/0x290 [ 460.274099][ T4281] nfsd_shutdown_threads+0x89/0x1a0 [ 460.279308][ T4281] nfsd_umount+0x3e/0xc0 [ 460.283571][ T4281] deactivate_locked_super+0x93/0xf0 [ 460.288872][ T4281] cleanup_mnt+0x471/0x4f0 [ 460.293312][ T4281] task_work_run+0x1d0/0x260 [ 460.297915][ T4281] ? task_work_cancel+0x220/0x220 [ 460.302955][ T4281] ? exit_to_user_mode_loop+0x3b/0x110 [ 460.308428][ T4281] exit_to_user_mode_loop+0xe6/0x110 [ 460.313729][ T4281] exit_to_user_mode_prepare+0xee/0x180 [ 460.319279][ T4281] syscall_exit_to_user_mode+0x16/0x40 [ 460.324761][ T4281] do_syscall_64+0x58/0xa0 [ 460.329187][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 460.333887][ T4281] ? clear_bhb_loop+0x60/0xb0 [ 460.338576][ T4281] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 460.344489][ T4281] RIP: 0033:0x7fca2a1a0797 [ 460.348908][ T4281] Code: a2 c7 05 5c 9f 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 460.368520][ T4281] RSP: 002b:00007ffd050ca388 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 460.376947][ T4281] RAX: 0000000000000000 RBX: 00007fca2a235f63 RCX: 00007fca2a1a0797 [ 460.384919][ T4281] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd050ca440 [ 460.392912][ T4281] RBP: 00007ffd050ca440 R08: 00007ffd050cb440 R09: 00000000ffffffff [ 460.400887][ T4281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd050cb4d0 [ 460.408874][ T4281] R13: 00007fca2a235f63 R14: 000000000006ff26 R15: 00007ffd050cb510 [ 460.416859][ T4281] [ 460.420499][ T4281] Kernel Offset: disabled [ 460.424835][ T4281] Rebooting in 86400 seconds..