last executing test programs: 28m12.654966399s ago: executing program 32 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003640)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x8, 0x20, 0x4, 0xa0, 0x6, 0x4, 0x0, 0x0, 0x4, 0x8d}}, 0x50) 27m38.68718051s ago: executing program 33 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000002100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002300)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 27m31.296801518s ago: executing program 34 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/drivers/vivid/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='vivid.0', 0x7) r1 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d89600001010203010902200001010080320904000002ffffff0007058102000200070502020002"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000002000)={0xc0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000500)={0x8, 0xc, 0x1}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) ioctl$VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000600)=0xc) 27m25.123131388s ago: executing program 35 (id=342): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000001700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 27m4.908721056s ago: executing program 36 (id=433): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RREADLINK(r1, &(0x7f0000000140)={0xe, 0x17, 0x1, {0x5, './bus'}}, 0xe) 19m53.116287134s ago: executing program 37 (id=2020): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) syz_emit_ethernet(0x4a, &(0x7f00000006c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) 19m37.231917338s ago: executing program 38 (id=2057): socket$inet6_tcp(0xa, 0x1, 0x0) fsopen(&(0x7f0000000040)='fusectl\x00', 0x1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000000c0)='./file2\x00', 0x20048a, &(0x7f0000000300), 0x12, 0x51a, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) close(0x4) socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) ioctl$TIOCSETD(r3, 0x5423, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x4040, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x294) r4 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0xffffffff, 0x2}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$team(&(0x7f0000000200), r4) 11m30.841331036s ago: executing program 39 (id=3676): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r1}, 0x0) 9m28.347377943s ago: executing program 40 (id=3948): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000001100"], 0x84}, 0x1, 0x0, 0x0, 0x4008010}, 0x840) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x20, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}}, 0x20}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x12, 0x4, 0x4, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 9m10.395002242s ago: executing program 2 (id=4008): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="d28a08d988a88d8bf2f08c828807", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m9.887663455s ago: executing program 2 (id=4011): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1b6bf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, 0x0}, 0x8000) 9m2.722506897s ago: executing program 2 (id=4019): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@noauto_da_alloc}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$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") 9m2.356749345s ago: executing program 2 (id=4023): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 9m1.038790927s ago: executing program 2 (id=4028): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xe, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) 8m59.843629635s ago: executing program 2 (id=4034): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@noauto_da_alloc}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$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") 8m58.755081192s ago: executing program 41 (id=4034): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@noauto_da_alloc}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$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") 8m31.378275428s ago: executing program 9 (id=4134): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000002140)=@svm={0x10d, 0x1, 0x1080, {0x2}, {"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"}}) 8m31.085365135s ago: executing program 9 (id=4137): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) 8m30.792134531s ago: executing program 9 (id=4138): syz_emit_ethernet(0x3a, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb08004600002c0003e00000059078ac1414ff0a", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0080009078dadf"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x3d0, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x7, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x190, 0x0, {}, [@common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0x0, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010100, [0xff, 0xff000000, 0x0, 0xffffff00], @ipv4=@local, [0xff000000, 0x0, 0xff], 0xffffffff, 0x3, 0x3b, 0x4e21, 0x4e23, 0x4e23, 0x4e21, 0x122, 0x300}, 0x1, 0x8f}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x430) connect$inet(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000740)=ANY=[@ANYBLOB="2400000600024088640000ff0303000100"/31], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x10) r7 = epoll_create1(0x0) ptrace(0x10, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) ptrace$getenv(0x4201, 0x0, 0x101, &(0x7f0000000140)) r8 = epoll_create1(0x80000) fcntl$dupfd(r7, 0x0, r7) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000002c0)='veno', 0x4) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r1, &(0x7f0000000100)={0x40000000}) 8m30.491698949s ago: executing program 9 (id=4139): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x20200ccc, &(0x7f0000002c00)=ANY=[], 0xfe, 0x1528, &(0x7f0000000140)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000100)='?', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x83) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) getdents64(r2, &(0x7f0000000540)=""/222, 0xde) 8m29.802190105s ago: executing program 9 (id=4144): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x104000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x89101) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) 8m28.395571879s ago: executing program 9 (id=4148): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000100)=0x3) 8m26.899997645s ago: executing program 42 (id=4148): ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x2284, &(0x7f0000000100)=0x3) 7m34.361404954s ago: executing program 3 (id=4281): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 7m33.983662763s ago: executing program 3 (id=4284): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x400001, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x4049004) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f00000001c0)="856549090746", 0x6}], 0x2}, 0x0) 7m32.188581206s ago: executing program 3 (id=4288): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x77, 0x4) bind$inet(r0, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0xb1}, 0x4081) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) write$binfmt_elf64(r1, &(0x7f0000000f80)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 7m31.080810432s ago: executing program 3 (id=4293): keyctl$reject(0x13, 0x0, 0x800000000004, 0x201, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000800), 0x10091, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x5, &(0x7f0000000740)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xca}}, {@noauto_da_alloc}, {@inlinecrypt}]}, 0x0, 0x59b, &(0x7f0000000bc0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', &(0x7f0000000280)={0x591002, 0x1, 0xc}, 0x18) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x300, 0x0) close(0x3) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) 7m27.860528499s ago: executing program 3 (id=4302): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(r1, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x67630000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_RESET(r4, 0x5514) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 7m26.383507485s ago: executing program 3 (id=4310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r2, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x0, 0x1, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 7m25.994767924s ago: executing program 43 (id=4310): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x7) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000340)={r0, r2, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@fallback=r2, 0x0, 0x1, 0xce2c, &(0x7f0000002100)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2m50.29865989s ago: executing program 4 (id=4999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) r4 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, &(0x7f0000000380)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000090, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000800)=""/163, 0xa3}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/157, 0x9d}, {0x0}, {&(0x7f00000008c0)=""/124, 0x7c}], 0x5}, 0xe}], 0x1, 0x10120, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, 0x0) syz_open_dev$vcsn(0x0, 0xd0f, 0x103000) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpgid(r0) syz_clone3(&(0x7f0000000340)={0xc6107700, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m49.193677396s ago: executing program 4 (id=5003): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x25dfdbfe, {0x6, 0x0, 0x8100, 0x0, {}, {0x0, 0x2}, {0xe, 0x10}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x3, 0x1, 0x7000000, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000880}, 0x0) 2m47.394720789s ago: executing program 4 (id=5008): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x14, r0, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x20040000) socket$inet6(0xa, 0x800000000000002, 0x0) syz_open_dev$vcsn(0x0, 0x101, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f0000000100), 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) 2m46.203758248s ago: executing program 4 (id=5012): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_procfs$pagemap(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x67630000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_RESET(r4, 0x5514) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) 2m45.115926294s ago: executing program 4 (id=5016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c00000f000000001800000000000000000000000000000095000000000000009500000000000000c41e7ab7af50e62cb326e987eb609b857ed3e10d958e9c8e57881fa92cb78469f5832c794c6a6873160bc81184ce413bf287c3e783e5f069815b832bac079d0b87d9639c0d2cd6fdfa22b4f300ed55e2efb9e26f58bc61210169fe90f3f3683263be61cc421824ed04cf89f47c751e28c0"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r2, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000011c0)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000240)) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000080)=[0x0]) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'devices'}]}, 0x9) 2m42.316770501s ago: executing program 4 (id=5021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000200"], 0x0, 0x46, 0x0, 0xa}, 0x28) 2m28.613617629s ago: executing program 7 (id=5058): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$clear(0x3, 0xfffffffffffffffd) listen(0xffffffffffffffff, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) getgroups(0x5, &(0x7f0000000280)=[0xffffffffffffffff, 0x0, r4, 0x0, 0x0]) keyctl$chown(0x4, r3, 0xee01, 0x0) 2m26.775812813s ago: executing program 44 (id=5021): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x3, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002c0000002c0000000200"], 0x0, 0x46, 0x0, 0xa}, 0x28) 2m25.569365602s ago: executing program 7 (id=5065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x7, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, &(0x7f00000006c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c00000f000000001800000000000000000000000000000095000000000000009500000000000000c41e7ab7af50e62cb326e987eb609b857ed3e10d958e9c8e57881fa92cb78469f5832c794c6a6873160bc81184ce413bf287c3e783e5f069815b832bac079d0b87d9639c0d2cd6fdfa22b4f300ed55e2efb9e26f58bc61210169fe90f3f3683263be61cc421824ed04cf89f47c751e28c0"], &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) r1 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='addr\x00', &(0x7f0000000100)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000140)='vers\x00', &(0x7f0000000180)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='local_lock\x00', &(0x7f0000000200)='all\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = semget$private(0x0, 0x3, 0x8) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000240)) semctl$SETALL(r3, 0x0, 0x11, &(0x7f0000000080)=[0x0]) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)={[{0x2d, 'devices'}]}, 0x9) 2m24.493735168s ago: executing program 7 (id=5066): r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14, 0x3e8, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x3ec, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000010}, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0001ffffcd8bff7549a8485410ff0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000002"], 0x50) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) 2m22.851165617s ago: executing program 7 (id=5071): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa0904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x4b83, 0x0) 2m19.511632147s ago: executing program 7 (id=5075): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file1\x00', 0x0, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@discard}, {@errors_remount}, {@mblk_io_submit}, {@discard}, {@mblk_io_submit}, {@user_xattr}, {@barrier_val}, {@nombcache}, {}]}, 0x45, 0x7b6, &(0x7f0000001140)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000001440)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x400) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x8) 2m17.344492109s ago: executing program 7 (id=5078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYRESDEC=r0], 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0100001000050000000000000000007f000001000000000000000000000000b11b748400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000008000000000"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5723516f567cce2d2495e51c086d32d9785857a426", 0x15}], 0x1}}], 0x3, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='espint', 0x6) 2m2.263900711s ago: executing program 45 (id=5078): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x90) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRESOCT], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r2, @ANYRES64=r4, @ANYRESDEC=r0], 0x50) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x5) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c0100001000050000000000000000007f000001000000000000000000000000b11b748400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000001234320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000008000000000"], 0x16c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x20, @loopback, 0x1}, 0x1c) sendmmsg$sock(r6, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="5723516f567cce2d2495e51c086d32d9785857a426", 0x15}], 0x1}}], 0x3, 0x0) setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000100)='espint', 0x6) 1m51.980433077s ago: executing program 8 (id=5108): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x181) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0xfffffffffffffffe) 1m51.068288089s ago: executing program 8 (id=5111): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') 1m50.665374239s ago: executing program 8 (id=5114): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b7, &(0x7f0000000a40)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000005000000000000000a20000000000a03400000000000000000010000000900010073797a300000000040000000160a07000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000038000000160a09010000000000000000"], 0xc0}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180be7dce33e558413724c328fb0d50000000000000000000000000002000000000d0000ed0000000700000000000000000000000d00000000002e305f2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 1m50.064733403s ago: executing program 8 (id=5116): mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) readv(r0, &(0x7f0000004540)=[{&(0x7f0000000000)=""/36, 0x24}, {0x0}], 0x2) 1m49.632213134s ago: executing program 8 (id=5119): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x8922, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$fuse(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x0, 0x0) 1m48.127242439s ago: executing program 8 (id=5122): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000102010100004ef20000000000000a00000044fb00802c00018014000300ff010000ff010000000000000000000114000400000000000000000000000000000000010c000280050001000000000006000340000300007965941aa666f15477a175cc"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m31.148391036s ago: executing program 46 (id=5122): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000000102010100004ef20000000000000a00000044fb00802c00018014000300ff010000ff010000000000000000000114000400000000000000000000000000000000010c000280050001000000000006000340000300007965941aa666f15477a175cc"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.828500943s ago: executing program 5 (id=5205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0xffffffffffffffff, 0x3, 0x50, 0x14, 0x4, 0x9, 0x7, 0x4000000000000000, 0x40, 0x8000, 0x0, 0x7, 0x5, 0x9e3], 0x60000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m15.309204056s ago: executing program 0 (id=5207): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x67630000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_RESET(r5, 0x5514) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000a40)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x5, 0x8fd, 0x63, 0x0, 0x9}, {0xffffffff, 0x4, 0x9, 0xa, 0x0, 0xf800000000000000}], ['\x00', '\x00', '\x00', '\x00']}) 1m14.326272109s ago: executing program 5 (id=5208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x500, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m13.87175049s ago: executing program 5 (id=5209): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc) 1m13.629538686s ago: executing program 5 (id=5210): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x181) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0xfffffffffffffffe) 1m12.967740012s ago: executing program 5 (id=5213): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, 0x0}, 0x40002002) 1m12.338589857s ago: executing program 5 (id=5215): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) 1m10.802741634s ago: executing program 0 (id=5218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x500, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.391876813s ago: executing program 0 (id=5221): mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x181) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, 0xfffffffffffffffe) 1m9.146371463s ago: executing program 0 (id=5222): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) getgroups(0x2, &(0x7f0000000700)=[0x0, 0xee01]) sendmmsg$unix(r0, &(0x7f00000083c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r3}}}], 0x20, 0x48840}}], 0x1, 0x8800) 1m7.855724124s ago: executing program 0 (id=5224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0x1, 0x4) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) r2 = memfd_secret(0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PTP_PIN_SETFUNC2(r2, 0x40603d10, 0x0) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 1m7.655148589s ago: executing program 0 (id=5226): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x67630000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_RESET(r5, 0x5514) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000a40)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x5, 0x8fd, 0x63, 0x0, 0x9}, {0xffffffff, 0x4, 0x9, 0xa, 0x0, 0xf800000000000000}], ['\x00', '\x00', '\x00', '\x00']}) 56.723766191s ago: executing program 47 (id=5215): syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00'}) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xc00, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f02a, 0x105}) 51.624520823s ago: executing program 48 (id=5226): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000040)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000f70000/0x1000)=nil, 0x1000, 0x2, 0x20010, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000)=0x6, 0x4ffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) syz_open_procfs$pagemap(r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x67630000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, r1, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$USBDEVFS_RESET(r5, 0x5514) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r6, 0xc0c0583b, &(0x7f0000000a40)={0x0, 0x2904c, 0x4, 0x10003, '\x00', [{0x0, 0x5, 0x8fd, 0x63, 0x0, 0x9}, {0xffffffff, 0x4, 0x9, 0xa, 0x0, 0xf800000000000000}], ['\x00', '\x00', '\x00', '\x00']}) 5.956389318s ago: executing program 1 (id=5318): ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x40601) r4 = fsopen(&(0x7f00000000c0)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) read$char_usb(0xffffffffffffffff, &(0x7f0000000480)=""/244, 0xf4) r5 = fsmount(r4, 0x0, 0x6) r6 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r6, 0x0) ppoll(&(0x7f0000000040)=[{r6, 0x2}, {r6, 0x1}], 0x2, 0x0, 0x0, 0x0) fchdir(r5) chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff) syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000020000082505a5a4400000000101090244000101000000090400000302060000052406000005240000000d240f0100000000000000000009058103"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) 2.739639924s ago: executing program 6 (id=5322): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000140)="440f20c0350b000000440f22c0c4e1f91496001800006464440f2356460f233566baa100ed4e0fc7990c000080f3fbf33e410f001766baf80cb8607dbd84ef66bafc0cb0a8eec744240003010000c744240220cb39b4ff1c24", 0x59}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0xffffffffffffffff, 0x3, 0x50, 0x14, 0x4, 0x9, 0x7, 0x4000000000000000, 0x40, 0x8000, 0x0, 0x7, 0x5, 0x9e3], 0x60000}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.550072619s ago: executing program 6 (id=5323): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x9, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 1.720285328s ago: executing program 6 (id=5324): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x3a, 0x8, 0xffffffffffffffff}) mknodat$null(r1, &(0x7f0000000540)='./file0\x00', 0x2000, 0x103) 1.456627895s ago: executing program 6 (id=5325): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000000380)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0xfd, 0x56f, &(0x7f0000003780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8000020, 0xffffffffffffffff, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x800003a, 0xffffffffffffffff, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) 1.390056527s ago: executing program 1 (id=5326): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001040)=@newlink={0x44, 0x10, 0x503, 0x70bd28, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x440b0) 778.933751ms ago: executing program 1 (id=5327): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)="f8", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r0, 0x1) 509.935298ms ago: executing program 6 (id=5328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b70300000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x500, &(0x7f0000000180)="c9f7b98600"/14, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 431.16588ms ago: executing program 1 (id=5329): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/Loopback.0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/Loopback.0\x00') r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc) 294.154293ms ago: executing program 1 (id=5330): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x48, 0x0, 0x1}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200eb1025120212475400f6a13bb1000000080086dd4803", 0x10300, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 3.52417ms ago: executing program 6 (id=5331): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x9, 0x81, 0xfffff034}, {0x6, 0x0, 0x0, 0xfffffffe}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 0s ago: executing program 1 (id=5332): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) kernel console output (not intermixed with test programs): :50:50:50 [ 1411.057632][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1411.295238][T22762] binder_alloc: 22759: binder_alloc_buf size -208 failed, no address space [ 1411.428721][T22762] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 1411.515920][T22762] binder: 22759:22762 ioctl c0306201 200000000280 returned -14 [ 1411.648828][T22771] loop4: detected capacity change from 0 to 1024 [ 1411.720403][T22771] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1411.796456][T22771] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1411.848013][T22771] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #3: comm syz.4.4434: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1411.961845][T22771] EXT4-fs (loop4): no journal found [ 1412.000816][T22771] EXT4-fs (loop4): can't get journal size [ 1412.071374][T22771] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1412.334069][T22788] loop7: detected capacity change from 0 to 512 [ 1412.454487][T22052] EXT4-fs (loop4): unmounting filesystem. [ 1413.172951][T22788] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1413.265128][T22788] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1413.331072][T22801] tipc: Enabled bearer , priority 0 [ 1413.338731][T22801] device syzkaller0 entered promiscuous mode [ 1413.390296][T22801] tipc: Resetting bearer [ 1413.443622][T22799] tipc: Resetting bearer [ 1413.503460][T22794] loop8: detected capacity change from 0 to 512 [ 1413.579262][T22799] tipc: Disabling bearer [ 1413.801073][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1413.939909][T22794] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1413.978905][T22794] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1414.024314][T22794] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.4439: Failed to acquire dquot type 1 [ 1414.072945][T22794] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1414.112325][T22794] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1414.144041][T22794] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.4439: Failed to acquire dquot type 1 [ 1414.243659][T22794] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.4439: bg 0: block 248: padding at end of block bitmap is not set [ 1414.304556][T22794] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1414.342335][T22794] Quota error (device loop8): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 1414.372845][T22794] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0 [ 1414.402105][T22794] EXT4-fs error (device loop8): ext4_acquire_dquot:6841: comm syz.8.4439: Failed to acquire dquot type 1 [ 1414.457934][T22794] EXT4-fs (loop8): 1 orphan inode deleted [ 1414.476148][T22794] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1414.506883][T22794] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1414.945971][T22794] EXT4-fs (loop8): unmounting filesystem. [ 1415.073282][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.083107][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.090572][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.156414][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.168260][T22834] netlink: 'syz.0.4450': attribute type 1 has an invalid length. [ 1415.183084][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.206690][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.239476][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.292243][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.334267][T22834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1415.341934][T22838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4450'. [ 1415.368418][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.392121][T22841] bond1: (slave dummy0): making interface the new active one [ 1415.405277][T22841] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1415.412853][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.421332][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.463190][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.470925][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.502758][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.510274][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.532966][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.552453][ T4320] hid-generic 0006:0004:0009.0008: unknown main item tag 0x0 [ 1415.619843][ T4320] hid-generic 0006:0004:0009.0008: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 1415.863644][T22846] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4451'. [ 1415.887686][T22849] loop7: detected capacity change from 0 to 256 [ 1415.999446][T22849] exFAT-fs (loop7): failed to load upcase table (idx : 0x000100a3, chksum : 0x3e058258, utbl_chksum : 0xe619d30d) [ 1416.425952][T22844] fido_id[22844]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1417.968429][ T4316] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1418.019660][T22877] loop8: detected capacity change from 0 to 1024 [ 1418.162674][ T4316] usb 1-1: Using ep0 maxpacket: 32 [ 1418.170615][ T4316] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1418.190561][ T4316] usb 1-1: config 1 has an invalid interface number: 15 but max is 0 [ 1418.232640][ T4316] usb 1-1: config 1 has an invalid interface number: 164 but max is 0 [ 1418.260744][ T4316] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1418.284004][ T4316] usb 1-1: config 1 has no interface number 0 [ 1418.290176][ T4316] usb 1-1: config 1 has no interface number 1 [ 1418.352804][ T4316] usb 1-1: config 1 interface 15 altsetting 2 endpoint 0xA has an invalid bInterval 128, changing to 7 [ 1418.392690][ T4316] usb 1-1: config 1 interface 15 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1418.451012][ T4316] usb 1-1: too many endpoints for config 1 interface 164 altsetting 181: 72, using maximum allowed: 30 [ 1418.481838][T22885] netlink: 'syz.4.4461': attribute type 1 has an invalid length. [ 1418.490158][ T4316] usb 1-1: config 1 interface 164 altsetting 181 has an invalid endpoint with address 0x80, skipping [ 1418.525264][T22885] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1418.542752][ T4316] usb 1-1: config 1 interface 164 altsetting 181 bulk endpoint 0x5 has invalid maxpacket 8 [ 1418.566222][ T4316] usb 1-1: config 1 interface 164 altsetting 181 has a duplicate endpoint with address 0xA, skipping [ 1418.602412][ T4316] usb 1-1: config 1 interface 164 altsetting 181 has 3 endpoint descriptors, different from the interface descriptor's value: 72 [ 1418.627154][ T4316] usb 1-1: config 1 interface 15 has no altsetting 0 [ 1418.652711][ T4316] usb 1-1: config 1 interface 164 has no altsetting 0 [ 1418.680769][ T4316] usb 1-1: New USB device found, idVendor=0cde, idProduct=001a, bcdDevice=72.98 [ 1418.721199][ T4316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1418.745173][ T4316] usb 1-1: Product: syz [ 1418.749600][ T4316] usb 1-1: Manufacturer: syz [ 1418.772782][ T4316] usb 1-1: SerialNumber: syz [ 1418.812496][T22889] device syzkaller0 entered promiscuous mode [ 1418.947510][T22897] loop4: detected capacity change from 0 to 512 [ 1419.018928][T22897] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1419.100004][ T4316] usb 1-1: USB disconnect, device number 9 [ 1419.136065][T22897] EXT4-fs (loop4): 1 truncate cleaned up [ 1419.141856][T22897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1419.278482][T22905] loop7: detected capacity change from 0 to 512 [ 1419.744210][T22905] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1420.102767][T22052] EXT4-fs (loop4): unmounting filesystem. [ 1420.245738][T22905] EXT4-fs (loop7): 1 truncate cleaned up [ 1420.296257][T22910] loop4: detected capacity change from 0 to 512 [ 1420.323714][T22905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1420.338108][T22912] loop0: detected capacity change from 0 to 256 [ 1420.415583][T22910] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1420.603150][T22910] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1422.007352][T22920] loop8: detected capacity change from 0 to 1024 [ 1422.124469][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1422.330691][T22052] EXT4-fs (loop4): unmounting filesystem. [ 1422.369846][T22932] loop0: detected capacity change from 0 to 256 [ 1422.448366][T22932] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1422.516485][T22932] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 1422.720099][T22944] loop4: detected capacity change from 0 to 128 [ 1422.777141][T22932] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1422.882815][T22944] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1423.007413][T22944] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1424.017543][T22052] EXT4-fs (loop4): unmounting filesystem. [ 1424.036028][ T7070] hfsplus: b-tree write err: -5, ino 3 [ 1424.080927][T20991] hfsplus: node 4:3 still has 2 user(s)! [ 1426.165700][T22982] loop4: detected capacity change from 0 to 128 [ 1426.523418][T22984] loop8: detected capacity change from 0 to 512 [ 1426.827299][T22984] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1426.960781][T22984] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1428.383582][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.865480][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1428.977433][T23025] device syzkaller0 entered promiscuous mode [ 1429.001155][T23027] loop0: detected capacity change from 0 to 256 [ 1429.510959][T23034] loop0: detected capacity change from 0 to 256 [ 1430.748526][T23054] loop0: detected capacity change from 0 to 256 [ 1430.784098][T23054] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1430.982870][T23054] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1431.344458][T23063] loop8: detected capacity change from 0 to 256 [ 1432.373240][T23063] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x241b98d9, utbl_chksum : 0xe619d30d) [ 1432.382181][T23069] loop0: detected capacity change from 0 to 512 [ 1432.555323][T23069] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1432.588583][T23069] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1434.271937][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1434.662112][T23115] netlink: 'syz.4.4521': attribute type 1 has an invalid length. [ 1434.776089][T23115] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4521'. [ 1434.874184][T23120] loop7: detected capacity change from 0 to 1024 [ 1436.522741][T23142] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4528'. [ 1436.636361][T23142] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4528'. [ 1438.118820][T23154] loop7: detected capacity change from 0 to 512 [ 1438.605088][T23154] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1438.682802][T23154] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1440.872642][T15810] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1441.336810][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1441.450430][T15810] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1441.461842][T15810] usb 1-1: can't read configurations, error -71 [ 1441.504347][T23187] loop8: detected capacity change from 0 to 256 [ 1441.601258][T23187] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 1441.967713][T23195] loop4: detected capacity change from 0 to 256 [ 1442.109477][T23195] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 1442.157209][T23203] loop8: detected capacity change from 0 to 128 [ 1442.362184][T23206] loop0: detected capacity change from 0 to 1024 [ 1442.404037][T23206] EXT4-fs: Ignoring removed bh option [ 1442.498961][T23206] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1442.738125][T23215] loop8: detected capacity change from 0 to 8 [ 1442.803516][T23215] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1442.836629][T23215] SQUASHFS error: Failed to read block 0x91: -5 [ 1442.869767][T23215] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1442.892320][T23215] SQUASHFS error: Unable to read inode 0x11f [ 1442.980931][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1443.151758][T23223] loop4: detected capacity change from 0 to 512 [ 1443.275349][T23223] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1443.302905][T23223] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1446.573265][T22052] EXT4-fs (loop4): unmounting filesystem. [ 1446.954898][T23258] netlink: 60 bytes leftover after parsing attributes in process `syz.8.4556'. [ 1455.121568][ T27] audit: type=1326 audit(1785375699.104:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23286 comm="syz.4.4565" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f910dd9df99 code=0x0 [ 1459.575961][T23337] loop7: detected capacity change from 0 to 512 [ 1459.665101][T23337] EXT4-fs: inline encryption not supported [ 1459.733347][T23337] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1459.841730][T23337] EXT4-fs (loop7): 1 truncate cleaned up [ 1459.875978][T23337] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1461.824793][T23337] EXT4-fs: Can't set or change test_dummy_encryption on remount [ 1462.083601][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1462.134994][ T27] audit: type=1326 audit(1785375707.444:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910dd9df99 code=0x7ffc0000 [ 1462.210300][T23349] lo speed is unknown, defaulting to 1000 [ 1462.262085][ T27] audit: type=1326 audit(1785375707.444:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f910dd9df99 code=0x7ffc0000 [ 1464.122918][ T27] audit: type=1326 audit(1785375707.444:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f910dd5a3ec code=0x7ffc0000 [ 1464.223122][ T27] audit: type=1326 audit(1785375707.444:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f910dd5a44e code=0x7ffc0000 [ 1464.335161][ T27] audit: type=1326 audit(1785375707.444:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f910dd9dc2b code=0x7ffc0000 [ 1464.472833][ T27] audit: type=1326 audit(1785375707.454:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f910dd9f807 code=0x7ffc0000 [ 1464.572828][ T27] audit: type=1326 audit(1785375707.454:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f910dd5e7ce code=0x7ffc0000 [ 1464.631875][ T27] audit: type=1326 audit(1785375707.454:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f910dd5e7ce code=0x7ffc0000 [ 1464.721699][ T27] audit: type=1326 audit(1785375707.454:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f910dd5e7ce code=0x7ffc0000 [ 1464.829475][ T27] audit: type=1326 audit(1785375707.454:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23348 comm="syz.4.4567" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f910dd5e7ce code=0x7ffc0000 [ 1465.193007][T23376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.200409][T23376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.373090][T23377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.380314][T23377] bridge0: port 2(bridge_slave_1) entered listening state [ 1465.387790][T23377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.395070][T23377] bridge0: port 1(bridge_slave_0) entered listening state [ 1465.835362][T23391] loop0: detected capacity change from 0 to 1024 [ 1467.168355][ T6407] hfsplus: b-tree write err: -5, ino 25 [ 1467.212832][ T6407] hfsplus: b-tree write err: -5, ino 4 [ 1467.249809][ T6407] hfsplus: b-tree write err: -5, ino 2 [ 1467.300230][ T6407] hfsplus: b-tree write err: -5, ino 26 [ 1469.185906][T23422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4594'. [ 1469.705239][T23429] loop0: detected capacity change from 0 to 8 [ 1469.778063][T23429] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1469.826488][T23429] SQUASHFS error: Failed to read block 0x91: -5 [ 1469.857515][T23429] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1469.879690][T23429] SQUASHFS error: Unable to read inode 0x11f [ 1470.864372][T23442] loop7: detected capacity change from 0 to 1024 [ 1470.934948][T23442] EXT4-fs: Ignoring removed bh option [ 1471.179038][T23442] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1473.452879][T10745] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1473.469694][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1473.685540][T10745] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1473.947088][T10745] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.268581][T10745] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.492814][T10745] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1474.563603][T10745] usb 9-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 1474.612696][T10745] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1474.665440][T10745] usb 9-1: config 0 descriptor?? [ 1474.891123][T10745] usbhid 9-1:0.0: can't add hid device: -71 [ 1474.984202][T10745] usbhid: probe of 9-1:0.0 failed with error -71 [ 1475.052033][T10745] usb 9-1: USB disconnect, device number 4 [ 1475.705181][T23476] "syz.8.4612" (23476) uses obsolete ecb(arc4) skcipher [ 1480.835938][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 1480.845777][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 1481.667419][T23537] loop7: detected capacity change from 0 to 128 [ 1481.746328][T23537] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1481.793841][T23537] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1486.388449][T23553] loop7: detected capacity change from 0 to 1024 [ 1486.453614][T23553] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1486.484633][T23553] EXT4-fs (loop7): unmounting filesystem. [ 1487.193598][T23562] loop7: detected capacity change from 0 to 1024 [ 1487.626562][T23554] loop8: detected capacity change from 0 to 1024 [ 1487.694088][T23554] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1487.713215][ T4282] Bluetooth: hci2: command 0x0406 tx timeout [ 1487.783495][T23554] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1487.848534][T23554] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 1487.912297][T23554] System zones: 0-1, 3-36 [ 1487.955195][T23554] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1488.188251][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1490.400258][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.442595][ T4282] Bluetooth: hci3: command 0x0406 tx timeout [ 1493.030115][T23611] loop0: detected capacity change from 0 to 1024 [ 1495.488092][T23633] 9pnet_fd: Insufficient options for proto=fd [ 1495.539954][T23634] loop7: detected capacity change from 0 to 512 [ 1495.590474][T23634] EXT4-fs: Ignoring removed nobh option [ 1495.622955][T23634] EXT4-fs: Ignoring removed nobh option [ 1495.671184][T23634] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1495.733318][T23634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 1495.745269][T23634] System zones: 1-12 [ 1495.784095][T23634] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1495.837887][T23634] EXT4-fs error (device loop7): __ext4_iget:5102: inode #11: block 1042: comm syz.7.4652: invalid block [ 1496.884983][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1496.892370][ C1] bridge0: topology change detected, propagating [ 1496.900039][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1496.907395][ C1] bridge0: topology change detected, propagating [ 1496.920665][ T4326] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1496.964021][T23634] EXT4-fs (loop7): Remounting filesystem read-only [ 1496.970713][T23634] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.4652: couldn't read orphan inode 11 (err -117) [ 1497.028183][T23634] EXT4-fs (loop7): Remounting filesystem read-only [ 1497.062712][T23634] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1497.074608][T23630] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 5: comm syz.7.4652: lblock 0 mapped to illegal pblock 5 (length 1) [ 1497.151388][T23630] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.4652: error -117 reading directory block [ 1498.864060][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1500.933208][T23667] loop0: detected capacity change from 0 to 1024 [ 1501.229140][T23675] loop8: detected capacity change from 0 to 512 [ 1501.566318][T23675] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1501.602821][T23675] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1501.766261][ T27] kauditd_printk_skb: 4 callbacks suppressed [ 1501.766278][ T27] audit: type=1804 audit(1785375747.074:153): pid=23675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.4660" name="/newroot/114/file1/file1" dev="loop8" ino=15 res=1 errno=0 [ 1502.008161][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1506.453516][T23719] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 1506.867855][T23725] loop0: detected capacity change from 0 to 512 [ 1506.944876][T23725] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4673: invalid indirect mapped block 256 (level 2) [ 1508.161404][T23725] EXT4-fs (loop0): Remounting filesystem read-only [ 1508.209520][T23725] EXT4-fs (loop0): 2 truncates cleaned up [ 1508.263816][T23725] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1508.672964][T23728] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 1508.949161][T23728] EXT4-fs (loop0): Remounting filesystem read-only [ 1509.445895][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1515.938322][T23785] loop0: detected capacity change from 0 to 1024 [ 1517.046690][T23794] loop4: detected capacity change from 0 to 4096 [ 1517.699427][T23799] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1517.708612][T23799] bond1: (slave dummy0): Releasing active interface [ 1517.719241][T23799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1517.727103][T23799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1517.737041][T23799] device bridge_slave_0 left promiscuous mode [ 1517.743373][T23799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.822017][T23799] device bridge_slave_1 left promiscuous mode [ 1517.828425][T23799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.841782][T23799] bond0: (slave bond_slave_0): Releasing backup interface [ 1517.893390][T23799] bond0: (slave bond_slave_1): Releasing backup interface [ 1518.695954][T23799] team0: Port device team_slave_0 removed [ 1518.765805][T23799] team0: Port device team_slave_1 removed [ 1518.772772][T23799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1518.780276][T23799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1518.863164][T23799] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1518.870798][T23799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1518.957473][T23802] team0: Mode changed to "loadbalance" [ 1520.782209][T23824] loop0: detected capacity change from 0 to 4096 [ 1521.042881][T23832] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1521.240648][T23824] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 1521.250782][T23836] loop8: detected capacity change from 0 to 1024 [ 1521.797503][T23844] "syz.4.4701" (23844) uses obsolete ecb(arc4) skcipher [ 1521.897949][T23848] loop0: detected capacity change from 0 to 512 [ 1522.477583][T23848] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.4702: invalid indirect mapped block 256 (level 2) [ 1522.610169][T23848] EXT4-fs (loop0): Remounting filesystem read-only [ 1522.681460][T23848] EXT4-fs (loop0): 2 truncates cleaned up [ 1522.711841][T23848] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1524.425660][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1524.857071][T23870] loop0: detected capacity change from 0 to 1024 [ 1524.933363][T23870] EXT4-fs: Ignoring removed bh option [ 1525.115463][T23870] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1525.876737][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1525.885403][T23884] loop4: detected capacity change from 0 to 1024 [ 1532.712032][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1532.728113][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1532.739821][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1532.752639][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1532.763725][T23922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4719'. [ 1533.503714][T23924] loop8: detected capacity change from 0 to 4096 [ 1533.511196][T23924] EXT4-fs: Ignoring removed i_version option [ 1533.518546][T23924] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 1533.902855][ T955] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1534.022802][T23932] loop8: detected capacity change from 0 to 1024 [ 1534.116963][ T955] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.155164][ T955] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1534.193342][ T955] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1534.255404][ T955] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1534.334285][ T955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.342398][ T955] usb 1-1: Product: syz [ 1534.407727][ T955] usb 1-1: Manufacturer: syz [ 1534.412424][ T955] usb 1-1: SerialNumber: syz [ 1534.636068][ T955] cdc_ncm 1-1:1.0: skipping garbage [ 1534.641376][ T955] cdc_ncm 1-1:1.0: skipping garbage [ 1534.647167][ T955] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1534.656233][ T955] cdc_ncm 1-1:1.0: bind() failure [ 1534.821245][ T4282] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 1534.833377][ T4282] CPU: 0 PID: 4282 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 1534.841007][ T4282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1534.851118][ T4282] Workqueue: hci1 hci_rx_work [ 1534.856067][ T4282] Call Trace: [ 1534.859393][ T4282] [ 1534.862363][ T4282] dump_stack_lvl+0x188/0x24e [ 1534.867101][ T4282] ? show_regs_print_info+0x12/0x12 [ 1534.872354][ T4282] ? load_image+0x410/0x410 [ 1534.876939][ T4282] sysfs_create_dir_ns+0x26a/0x290 [ 1534.882129][ T4282] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1534.887905][ T4282] ? sysfs_warn_dup+0xa0/0xa0 [ 1534.892667][ T4282] kobject_add_internal+0x617/0xca0 [ 1534.897983][ T4282] kobject_add+0x160/0x230 [ 1534.902473][ T4282] ? kobject_init+0x1c0/0x1c0 [ 1534.907212][ T4282] ? __raw_spin_lock_init+0x41/0x100 [ 1534.912564][ T4282] ? klist_children_get+0x50/0x50 [ 1534.917736][ T4282] ? get_device_parent+0x121/0x3e0 [ 1534.922908][ T4282] device_add+0x470/0x1050 [ 1534.927390][ T4282] hci_conn_add_sysfs+0xd1/0x1e0 [ 1534.932473][ T4282] le_conn_complete_evt+0xfac/0x15c0 [ 1534.937825][ T4282] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 1534.944127][ T4282] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1534.949823][ T4282] ? lockdep_hardirqs_on+0x94/0x140 [ 1534.955069][ T4282] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1534.960751][ T4282] ? hci_remote_host_features_evt+0x230/0x230 [ 1534.966876][ T4282] hci_le_conn_complete_evt+0x183/0x440 [ 1534.972505][ T4282] ? hci_remote_host_features_evt+0x230/0x230 [ 1534.978620][ T4282] hci_event_packet+0x7b3/0x1290 [ 1534.983625][ T4282] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1534.989314][ T4282] ? bis_list+0x280/0x280 [ 1534.993801][ T4282] ? kcov_remote_start+0x1b1/0x7e0 [ 1534.998986][ T4282] ? hci_send_to_monitor+0x9c/0x4a0 [ 1535.004335][ T4282] hci_rx_work+0x3eb/0xd40 [ 1535.008842][ T4282] ? _raw_spin_unlock+0x40/0x40 [ 1535.013783][ T4282] ? process_one_work+0x7b4/0x1160 [ 1535.019058][ T4282] process_one_work+0x8ab/0x1160 [ 1535.024071][ T4282] ? worker_detach_from_pool+0x240/0x240 [ 1535.029766][ T4282] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1535.034841][ T4282] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1535.040441][ T4282] ? wq_worker_running+0x97/0x190 [ 1535.045603][ T4282] worker_thread+0xaf5/0x12a0 [ 1535.050368][ T4282] kthread+0x29d/0x330 [ 1535.054486][ T4282] ? worker_clr_flags+0x1a0/0x1a0 [ 1535.059563][ T4282] ? kthread_blkcg+0xd0/0xd0 [ 1535.064199][ T4282] ret_from_fork+0x1f/0x30 [ 1535.068718][ T4282] [ 1535.078888][ T4282] kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1535.094192][ T4282] Bluetooth: hci1: failed to register connection device [ 1535.423577][T10745] usb 1-1: USB disconnect, device number 12 [ 1538.124919][T23962] loop4: detected capacity change from 0 to 8 [ 1538.835220][T23967] SQUASHFS error: xz decompression failed, data probably corrupt [ 1539.129860][T23967] SQUASHFS error: Failed to read block 0xa8: -5 [ 1539.732738][T23967] SQUASHFS error: xz decompression failed, data probably corrupt [ 1539.740696][T23967] SQUASHFS error: Failed to read block 0xa8: -5 [ 1539.818178][ T27] audit: type=1800 audit(1785375785.124:154): pid=23967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4729" name="file0" dev="loop4" ino=3 res=0 errno=0 [ 1539.974909][T23978] loop7: detected capacity change from 0 to 1024 [ 1540.009947][T23978] EXT4-fs: Ignoring removed bh option [ 1540.122270][T23978] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1540.423201][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1540.885613][T23999] futex_wake_op: syz.7.4737 tries to shift op by 144; fix this program [ 1540.956841][T23999] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4737'. [ 1544.984343][T24015] loop8: detected capacity change from 0 to 512 [ 1545.087910][T24015] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1545.105591][T24015] ext4 filesystem being mounted at /129/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1546.068569][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1546.453635][T24038] loop4: detected capacity change from 0 to 128 [ 1546.513365][T24038] befs: (loop4): No write support. Marking filesystem read-only [ 1546.596228][T24038] befs: (loop4): invalid magic header [ 1551.242867][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1554.124750][T24096] loop4: detected capacity change from 0 to 32768 [ 1554.345194][T24096] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop4 scanned by syz.4.4758 (24096) [ 1554.446248][T24096] BTRFS info (device loop4): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1554.523802][T24096] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 1554.591601][T24096] BTRFS info (device loop4): using free space tree [ 1554.802035][T24119] loop0: detected capacity change from 0 to 8 [ 1554.845052][T24119] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1554.877688][T24119] SQUASHFS error: Failed to read block 0x91: -5 [ 1554.888643][T24119] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1554.898058][T24119] SQUASHFS error: Unable to read inode 0x11f [ 1555.070467][T24096] BTRFS info (device loop4): enabling ssd optimizations [ 1555.266941][T22052] BTRFS info (device loop4): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 1555.618790][T24147] autofs4:pid:24147:autofs_fill_super: called with bogus options [ 1555.668444][T24147] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1555.694260][T24147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1555.706010][T24147] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1557.431821][T24163] overlayfs: failed to clone upperpath [ 1560.204843][T24179] loop7: detected capacity change from 0 to 512 [ 1560.717362][T24179] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 1560.750889][T24195] tipc: Enabled bearer , priority 0 [ 1560.758749][T24195] device syzkaller0 entered promiscuous mode [ 1560.805883][T24179] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1561.150181][T24189] tipc: Resetting bearer [ 1563.148027][T24189] tipc: Disabling bearer [ 1563.209716][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1563.237146][T16208] tipc: Node number set to 1910574236 [ 1570.446528][T24272] loop0: detected capacity change from 0 to 512 [ 1570.544211][T24272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1570.626474][T24272] ext4 filesystem being mounted at /165/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1572.631200][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1578.045614][T24342] loop8: detected capacity change from 0 to 512 [ 1578.215071][T24342] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1578.304856][T24342] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1579.901691][ T22] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1580.364822][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1580.405411][ T22] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1580.467670][ T22] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1580.487343][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.512682][ T22] usb 1-1: Product: syz [ 1580.532933][ T22] usb 1-1: Manufacturer: syz [ 1580.550039][ T22] usb 1-1: SerialNumber: syz [ 1580.769104][T24375] loop7: detected capacity change from 0 to 512 [ 1580.794290][T24160] usb 1-1: USB disconnect, device number 13 [ 1580.834913][T24375] EXT4-fs: Ignoring removed nobh option [ 1580.861129][T24375] EXT4-fs: Ignoring removed nobh option [ 1580.930818][T24375] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1580.981946][T24375] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 1580.991816][T24375] System zones: 1-12 [ 1581.024448][T24375] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1581.067146][T24375] EXT4-fs error (device loop7): __ext4_iget:5102: inode #11: block 1042: comm syz.7.4820: invalid block [ 1581.144306][T24375] EXT4-fs (loop7): Remounting filesystem read-only [ 1581.155032][T24375] EXT4-fs error (device loop7): ext4_orphan_get:1410: comm syz.7.4820: couldn't read orphan inode 11 (err -117) [ 1581.203155][T24375] EXT4-fs (loop7): Remounting filesystem read-only [ 1581.222610][T24375] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1581.305402][T24371] EXT4-fs error (device loop7): ext4_map_blocks:637: inode #2: block 5: comm syz.7.4820: lblock 0 mapped to illegal pblock 5 (length 1) [ 1581.323507][T24371] EXT4-fs warning (device loop7): dx_probe:823: inode #2: lblock 0: comm syz.7.4820: error -117 reading directory block [ 1581.475858][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1581.677831][T24388] netlink: 65047 bytes leftover after parsing attributes in process `syz.7.4824'. [ 1584.461302][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1587.238533][T24444] loop0: detected capacity change from 0 to 512 [ 1587.328497][T24444] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1587.348003][T24444] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1588.455077][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1592.218879][T24500] netlink: 'syz.4.4856': attribute type 4 has an invalid length. [ 1592.247492][T24500] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4856'. [ 1592.586818][T24505] loop8: detected capacity change from 0 to 512 [ 1592.714162][T24505] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 1592.772844][T24505] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1595.940872][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4866'. [ 1595.989613][T24548] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4866'. [ 1596.747329][T24567] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4873'. [ 1598.524577][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1604.674429][T24657] autofs4:pid:24657:autofs_fill_super: called with bogus options [ 1604.687511][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1604.695123][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1604.704446][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1604.712193][T24657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1605.413588][T24668] loop4: detected capacity change from 0 to 256 [ 1606.293747][T24668] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1606.353192][T24668] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 1606.415487][T24668] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1607.397386][T24691] netlink: 'syz.8.4907': attribute type 1 has an invalid length. [ 1607.516518][T24691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1607.550215][T24691] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4907'. [ 1607.657019][T24691] bond2: (slave dummy0): making interface the new active one [ 1607.795104][T24691] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 1608.079475][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 1611.907857][ T128] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1612.114886][ T128] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1612.155065][ T128] usb 9-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 1612.193014][ T128] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.231744][ T128] usb 9-1: Product: syz [ 1612.243318][ T128] usb 9-1: Manufacturer: syz [ 1612.255715][ T128] usb 9-1: SerialNumber: syz [ 1612.376511][ T128] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 1612.410856][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 87 [ 1612.442758][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 7 [ 1612.453880][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 81 [ 1612.461648][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 82 [ 1612.498642][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 1 [ 1612.678045][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.704742][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 1612.713079][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 85 [ 1612.720865][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 5 [ 1612.730200][ T128] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1612.742099][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 83 [ 1612.750021][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 1612.757896][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 3 [ 1612.766537][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 4 [ 1612.774285][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 86 [ 1612.782021][ T128] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 1613.514277][ T128] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1613.526148][ T128] usb 9-1: USB disconnect, device number 5 [ 1613.534977][ T128] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1613.560901][ T128] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1613.598443][ T128] keyspan 9-1:1.0: device disconnected [ 1616.538619][T24786] autofs4:pid:24786:autofs_fill_super: called with bogus options [ 1618.854264][T24811] "syz.7.4937" (24811) uses obsolete ecb(arc4) skcipher [ 1619.981460][T24819] loop0: detected capacity change from 0 to 512 [ 1620.030686][T24819] EXT4-fs: Ignoring removed nobh option [ 1620.060472][T24819] EXT4-fs: Ignoring removed nobh option [ 1620.107937][T24819] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1620.170057][T24819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 1620.230407][T24819] System zones: 1-12 [ 1620.298587][T24819] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1620.537853][T24819] EXT4-fs error (device loop0): __ext4_iget:5102: inode #11: block 1042: comm syz.0.4939: invalid block [ 1620.586951][T24819] EXT4-fs (loop0): Remounting filesystem read-only [ 1620.601879][T24819] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.4939: couldn't read orphan inode 11 (err -117) [ 1620.670370][T24819] EXT4-fs (loop0): Remounting filesystem read-only [ 1620.708481][T24819] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 1620.755466][T24813] EXT4-fs error (device loop0): ext4_map_blocks:637: inode #2: block 5: comm syz.0.4939: lblock 0 mapped to illegal pblock 5 (length 1) [ 1620.816501][T24813] EXT4-fs warning (device loop0): dx_probe:823: inode #2: lblock 0: comm syz.0.4939: error -117 reading directory block [ 1620.985248][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1624.400827][T24864] autofs4:pid:24864:autofs_fill_super: called with bogus options [ 1624.437584][T24864] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1624.451006][T24864] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1624.471927][T24864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1624.481428][T24864] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1627.072247][T24889] "syz.0.4951" (24889) uses obsolete ecb(arc4) skcipher [ 1630.332627][T24907] autofs4:pid:24907:autofs_fill_super: called with bogus options [ 1630.345830][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1630.353421][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1630.362565][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1630.370116][T24907] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1633.323096][T24952] "syz.4.4977" (24952) uses obsolete ecb(arc4) skcipher [ 1636.375595][T24997] "syz.6.4988" (24997) uses obsolete ecb(arc4) skcipher [ 1638.442364][T25023] futex_wake_op: syz.8.4993 tries to shift op by 144; fix this program [ 1642.697184][T25069] futex_wake_op: syz.4.5008 tries to shift op by 144; fix this program [ 1647.700881][T25111] netlink: 84 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1652.535829][T25155] netlink: 'syz.7.5036': attribute type 29 has an invalid length. [ 1652.808329][T25155] netlink: 'syz.7.5036': attribute type 29 has an invalid length. [ 1652.908715][T25156] netlink: 'syz.7.5036': attribute type 29 has an invalid length. [ 1653.051970][T25160] netlink: 'syz.6.5037': attribute type 29 has an invalid length. [ 1653.132277][T25160] netlink: 'syz.6.5037': attribute type 29 has an invalid length. [ 1653.199418][T25161] netlink: 'syz.6.5037': attribute type 29 has an invalid length. [ 1653.227645][T25163] netlink: 'syz.6.5037': attribute type 29 has an invalid length. [ 1653.427506][T25165] loop7: detected capacity change from 0 to 1024 [ 1653.490468][T25165] EXT4-fs: Ignoring removed bh option [ 1653.617651][T25165] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1653.863503][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1658.616705][T25207] autofs4:pid:25207:autofs_fill_super: called with bogus options [ 1658.630175][T25207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1658.640365][T25207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1658.648799][T25207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1659.510627][T25226] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5050'. [ 1664.116422][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1664.132336][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1664.146331][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1664.161262][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1664.172826][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1664.180346][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1665.155693][T25285] lo speed is unknown, defaulting to 1000 [ 1666.345350][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1666.377289][T25302] loop8: detected capacity change from 0 to 1024 [ 1666.827728][T25302] EXT4-fs: Ignoring removed bh option [ 1667.192923][T25302] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1667.753606][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1668.033793][T25285] chnl_net:caif_netlink_parms(): no params data found [ 1668.432576][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1669.044462][T25285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.051671][T25285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.144421][ T5227] smpboot: CPU 1 is now offline [ 1669.166424][T25285] device bridge_slave_0 entered promiscuous mode [ 1669.235489][T25285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.292906][T25285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.442836][T25285] device bridge_slave_1 entered promiscuous mode [ 1669.586198][T25285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.684005][T25285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.979698][T25285] team0: Port device team_slave_0 added [ 1670.077610][T25285] team0: Port device team_slave_1 added [ 1670.276430][T25285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.359269][T25344] loop7: detected capacity change from 0 to 2048 [ 1670.373483][T25285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.472358][T25344] EXT4-fs: Ignoring removed mblk_io_submit option [ 1670.513401][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 1670.550603][T25344] EXT4-fs: Ignoring removed mblk_io_submit option [ 1671.555505][T25349] "syz.0.5076" (25349) uses obsolete ecb(arc4) skcipher [ 1671.714041][T25344] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1671.733867][T25285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1671.880782][T25344] EXT4-fs error (device loop7): ext4_lookup:1858: inode #14: comm syz.7.5075: iget: bad extra_isize 1056 (inode size 256) [ 1671.985063][T25285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1672.040924][T25285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1672.110397][T25344] EXT4-fs (loop7): Remounting filesystem read-only [ 1672.271152][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1672.313401][T25285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1672.458301][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1672.516092][T25285] device hsr_slave_0 entered promiscuous mode [ 1672.533102][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1672.592845][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 1672.604146][T25285] device hsr_slave_1 entered promiscuous mode [ 1672.646976][T25285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1672.713175][T25285] Cannot create hsr debugfs directory [ 1672.734521][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1672.755940][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1672.815887][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1673.032804][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1673.066779][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1675.258049][T25353] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 1675.366514][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1675.450768][T25353] EXT4-fs (loop7): Remounting filesystem read-only [ 1675.524602][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1675.759824][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1675.786895][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1675.962828][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1676.039809][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1676.195383][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1676.277668][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1676.742166][T22110] EXT4-fs: 97 callbacks suppressed [ 1676.742184][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1676.862383][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1676.905577][T22110] EXT4-fs error: 98 callbacks suppressed [ 1676.905596][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1677.933471][T25390] "syz.0.5086" (25390) uses obsolete ecb(arc4) skcipher [ 1678.214557][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1678.292350][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1678.582852][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1680.028545][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1680.890365][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1680.944272][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1681.182797][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1681.220144][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1681.406066][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1681.448548][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1681.510727][T25410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5091'. [ 1681.732798][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1681.739758][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1685.919063][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1685.984812][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1686.171201][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1686.252200][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1686.487832][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1686.559916][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1686.768428][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1686.843896][T22110] EXT4-fs error (device loop7): ext4_readdir:263: inode #11: block 34: comm syz-executor: path /119/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1025, size=2048 fake=0 [ 1686.894274][T25285] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1687.056837][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1687.097377][T25285] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1687.134795][T22110] EXT4-fs error (device loop7): ext4_empty_dir:3177: inode #11: block 34: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=4096, inode=0, rec_len=1025, size=2048 fake=0 [ 1687.308169][T22110] EXT4-fs (loop7): Remounting filesystem read-only [ 1687.910367][T25285] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1688.335430][T25429] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5094'. [ 1688.346340][T25285] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1690.026877][T25438] "syz.8.5096" (25438) uses obsolete ecb(arc4) skcipher [ 1690.282298][T25285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.433683][T25285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1690.533587][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1690.541518][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1690.724166][T12065] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1690.735600][T12065] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1690.745627][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1690.757864][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1690.767602][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1690.777723][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1691.055114][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1691.132307][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1691.181722][T22110] EXT4-fs (loop7): unmounting filesystem. [ 1691.208544][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 1691.215827][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1691.340463][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1691.444930][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1691.493078][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 1691.500259][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1691.693907][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1691.753354][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1691.827044][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1693.752610][ T4282] Bluetooth: hci3: command 0x0409 tx timeout [ 1693.987733][T25443] lo speed is unknown, defaulting to 1000 [ 1694.336139][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1694.466960][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1694.532939][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1694.954322][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1695.534786][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1695.594418][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1695.713709][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1695.794308][ T4282] Bluetooth: hci3: command 0x041b tx timeout [ 1695.801632][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1695.893582][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1695.964066][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1696.013501][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1696.068176][T25285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1696.227367][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1696.311773][T25478] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1696.382214][T25478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1696.430596][T25478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1696.495787][T25478] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1696.796434][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1697.874038][ T4282] Bluetooth: hci3: command 0x040f tx timeout [ 1697.895581][T25495] loop8: detected capacity change from 0 to 128 [ 1698.064456][T25495] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 1698.167755][T25495] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1698.255599][T25443] chnl_net:caif_netlink_parms(): no params data found [ 1698.575180][T20991] EXT4-fs (loop8): unmounting filesystem. [ 1699.041137][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1699.078437][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1699.132940][T25519] loop8: detected capacity change from 0 to 256 [ 1699.320491][ T27] audit: type=1804 audit(1785375944.604:155): pid=25519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.5114" name="/newroot/208/file1/_.." dev="loop8" ino=1048698 res=1 errno=0 [ 1699.873360][T25285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1699.953923][ T4282] Bluetooth: hci3: command 0x0419 tx timeout [ 1701.199216][T25443] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.234212][T25443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.277653][T25443] device bridge_slave_0 entered promiscuous mode [ 1701.508008][T25443] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.539900][T25443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.599381][T25443] device bridge_slave_1 entered promiscuous mode [ 1703.092265][T25565] "syz.6.5125" (25565) uses obsolete ecb(arc4) skcipher [ 1703.210921][T25443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1703.794975][T25443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1703.968391][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1704.009140][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1704.106953][T25285] device veth0_vlan entered promiscuous mode [ 1704.899494][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1704.939233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1705.006092][T25443] team0: Port device team_slave_0 added [ 1705.040391][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1705.094147][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1705.138940][ T9] device hsr_slave_0 left promiscuous mode [ 1705.169381][ T9] device hsr_slave_1 left promiscuous mode [ 1705.194461][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.242797][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.271018][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.317316][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.370151][ T9] device bridge_slave_1 left promiscuous mode [ 1705.414596][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.683539][ T9] device bridge_slave_0 left promiscuous mode [ 1705.709046][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.840814][ T9] device veth1_macvtap left promiscuous mode [ 1705.863309][ T9] device veth0_macvtap left promiscuous mode [ 1705.879606][ T9] device veth1_vlan left promiscuous mode [ 1705.887671][ T9] device veth0_vlan left promiscuous mode [ 1707.936690][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1708.055189][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1708.166185][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.288793][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1709.204938][ T9] bond0 (unregistering): Released all slaves [ 1709.380755][T25443] team0: Port device team_slave_1 added [ 1709.392056][T25285] device veth1_vlan entered promiscuous mode [ 1709.448725][T25593] netlink: 'syz.6.5132': attribute type 1 has an invalid length. [ 1709.502696][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5132'. [ 1709.552361][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5132'. [ 1709.709199][T25443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1709.783938][T25443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1709.972310][T25443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1710.157486][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1710.193910][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1710.250680][T25285] device veth0_macvtap entered promiscuous mode [ 1710.298989][T25443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1710.347369][T25443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1710.579893][T25443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1710.670822][T25285] device veth1_macvtap entered promiscuous mode [ 1710.727901][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1710.774894][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1710.944169][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.006948][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.076416][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.147382][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.213131][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.289306][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.420352][T25285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.490143][T22981] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1711.529865][T22981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1711.595003][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.662659][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.732841][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.780429][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.852827][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1711.922888][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.983716][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.033109][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.093542][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.142322][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.206193][T25285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1712.262665][T25285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1712.343212][T25285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1712.356565][T25443] device hsr_slave_0 entered promiscuous mode [ 1712.423175][T25443] device hsr_slave_1 entered promiscuous mode [ 1712.443410][T25443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1712.481575][T25443] Cannot create hsr debugfs directory [ 1712.573041][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1712.609812][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1712.655301][T25285] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.703125][T25285] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.745587][T25285] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1712.782867][T25285] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1713.273928][ T7165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.281829][ T7165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.405703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1713.456791][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1713.506279][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1713.571260][ T7165] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1714.234998][T25652] autofs4:pid:25652:autofs_fill_super: called with bogus options [ 1714.445897][T25644] netlink: 'syz.6.5142': attribute type 1 has an invalid length. [ 1714.559107][T25644] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1714.602880][T25646] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5142'. [ 1714.654396][T25648] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5142'. [ 1714.696267][T25652] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1714.705769][T25652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1714.713825][T25652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1718.297828][T25675] lo speed is unknown, defaulting to 1000 [ 1720.111340][T25700] autofs4:pid:25700:autofs_fill_super: called with bogus options [ 1720.238187][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1720.252537][ T4280] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1720.262140][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1720.270251][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1720.284437][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1720.292165][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1720.534619][T25699] netlink: 'syz.6.5156': attribute type 1 has an invalid length. [ 1720.625670][T25699] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1720.661042][T25700] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1720.670964][T25700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1720.679028][T25700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1720.783168][T25701] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5156'. [ 1720.858266][T25703] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5156'. [ 1720.994508][T25702] lo speed is unknown, defaulting to 1000 [ 1721.924903][T25443] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1722.014255][T25443] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1722.102249][T25732] overlayfs: failed to clone upperpath [ 1722.120571][T25443] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1722.353347][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 1722.540855][T25702] chnl_net:caif_netlink_parms(): no params data found [ 1722.603492][T25737] netlink: 'syz.5.5166': attribute type 1 has an invalid length. [ 1722.643277][T25739] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5166'. [ 1722.700439][T25739] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1722.754248][T25740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5166'. [ 1722.792273][T25443] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1723.298051][T18744] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1723.706445][T18744] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.088687][T18744] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.386270][T18744] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1724.434109][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 1724.667174][T25702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1724.735756][T25702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1724.805170][T25702] device bridge_slave_0 entered promiscuous mode [ 1724.917366][T25702] bridge0: port 2(bridge_slave_1) entered blocking state [ 1724.964858][T25702] bridge0: port 2(bridge_slave_1) entered disabled state [ 1725.027390][T25702] device bridge_slave_1 entered promiscuous mode [ 1725.084462][T25782] netlink: 'syz.6.5177': attribute type 1 has an invalid length. [ 1725.227554][T25782] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1725.287674][T25443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1725.348743][T25784] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5177'. [ 1725.400894][T25786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5177'. [ 1725.599632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1725.710803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1725.775822][T25443] 8021q: adding VLAN 0 to HW filter on device team0 [ 1725.829896][T25702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1725.987385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1726.063413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1726.107574][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1726.114814][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1726.163020][ T4282] Bluetooth: Wrong link type (-22) [ 1726.314167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1726.361233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1726.424973][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1726.432532][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1726.513422][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 1726.603704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1726.699269][T25702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1726.805830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1726.863265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1727.084210][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1727.235580][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1727.318759][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1727.394906][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1727.437847][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1727.526811][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1727.596923][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1727.676154][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1727.880834][T25443] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1727.969104][T25818] netlink: 'syz.6.5187': attribute type 1 has an invalid length. [ 1728.055273][T25821] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1728.139330][T25824] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5187'. [ 1728.200550][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1728.308324][T25702] team0: Port device team_slave_0 added [ 1728.439804][T25702] team0: Port device team_slave_1 added [ 1728.592777][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 1728.660809][T25702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1728.753070][T25702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1729.051051][T25702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1729.764310][T25702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1729.817321][T25702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1730.068128][T25864] random: crng reseeded on system resumption [ 1731.859871][T25702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1732.826707][T25702] device hsr_slave_0 entered promiscuous mode [ 1732.916819][T25702] device hsr_slave_1 entered promiscuous mode [ 1732.968653][T25702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1733.036414][T25702] Cannot create hsr debugfs directory [ 1733.491876][T25887] netlink: 'syz.0.5202': attribute type 1 has an invalid length. [ 1733.613473][T25887] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1733.862033][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1733.906503][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1734.012196][T25892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1734.071458][T25895] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5202'. [ 1734.345474][T25443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1734.511167][T25907] loop0: detected capacity change from 0 to 512 [ 1734.657851][T25907] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1734.750558][T25907] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1735.009018][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1735.230659][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1735.556984][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1736.124584][T25929] loop5: detected capacity change from 0 to 128 [ 1736.233618][T25929] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1736.291894][T25929] ext4 filesystem being mounted at /22/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1736.352947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1736.381845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1736.487690][T25443] device veth0_vlan entered promiscuous mode [ 1736.536254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1736.594980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1736.656540][T25443] device veth1_vlan entered promiscuous mode [ 1736.703113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1736.716454][T25285] EXT4-fs (loop5): unmounting filesystem. [ 1737.682866][T18744] device hsr_slave_0 left promiscuous mode [ 1737.730455][T18744] device hsr_slave_1 left promiscuous mode [ 1738.387813][T18744] device veth1_macvtap left promiscuous mode [ 1738.435809][T18744] device veth0_macvtap left promiscuous mode [ 1738.472226][T18744] device veth1_vlan left promiscuous mode [ 1738.509369][T18744] device veth0_vlan left promiscuous mode [ 1738.833838][T20567] EXT4-fs (loop0): unmounting filesystem. [ 1742.075139][T25984] loop0: detected capacity change from 0 to 512 [ 1742.174243][T25984] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 1742.212346][T25984] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1743.012645][T18744] bond2 (unregistering): (slave dummy0): Releasing active interface [ 1743.059668][T18744] bond2 (unregistering): Released all slaves [ 1746.444181][T18744] bond1 (unregistering): Released all slaves [ 1749.692115][T26032] ffs_data_put(): freeing [ 1749.975046][ T4280] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1749.987968][ T4280] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1749.997723][ T4280] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1750.008897][ T4280] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1750.016822][ T4280] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1750.024936][ T4280] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1752.831845][ T4282] Bluetooth: hci5: command 0x0409 tx timeout [ 1753.739200][T12065] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1753.750876][T12065] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1753.761611][ T4280] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1753.770783][T12065] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1753.780758][T12065] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1753.788339][T12065] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1755.841882][T12065] Bluetooth: hci5: command 0x041b tx timeout [ 1756.381619][T12065] Bluetooth: hci6: command 0x0409 tx timeout [ 1757.662204][T18744] bond0 (unregistering): Released all slaves [ 1757.830956][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1757.842150][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1757.883101][T12065] Bluetooth: hci5: command 0x040f tx timeout [ 1758.468815][T12065] Bluetooth: hci6: command 0x041b tx timeout [ 1758.915730][T25984] EXT4-fs (loop0): unmounting filesystem. [ 1759.891924][T26035] lo speed is unknown, defaulting to 1000 [ 1759.952729][T12065] Bluetooth: hci5: command 0x0419 tx timeout [ 1760.050553][ T4282] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1760.066405][ T4282] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1760.077167][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1760.089431][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1760.098796][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1760.107607][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1760.513278][ T4282] Bluetooth: hci6: command 0x040f tx timeout [ 1760.706039][T26059] lo speed is unknown, defaulting to 1000 [ 1761.130039][T26087] lo speed is unknown, defaulting to 1000 [ 1762.193559][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 1762.526667][T26035] chnl_net:caif_netlink_parms(): no params data found [ 1762.592641][ T4282] Bluetooth: hci6: command 0x0419 tx timeout [ 1762.804933][T18744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.902196][T26087] chnl_net:caif_netlink_parms(): no params data found [ 1762.949116][T26059] chnl_net:caif_netlink_parms(): no params data found [ 1762.986944][T25702] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1763.145007][T18744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.219538][T25702] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1763.389990][T18744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.506410][T25702] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1763.683885][T18744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.780579][T25702] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1764.014806][T26035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.022040][T26035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.055830][T26035] device bridge_slave_0 entered promiscuous mode [ 1764.201078][T26035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.241162][T26035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.281027][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 1764.290702][T26035] device bridge_slave_1 entered promiscuous mode [ 1764.323128][T26087] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.343734][T26087] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.447188][ T4282] Bluetooth: hci2: command 0x040f tx timeout [ 1766.458174][T26087] device bridge_slave_0 entered promiscuous mode [ 1766.488515][T26059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.501256][T26059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.529790][T26059] device bridge_slave_0 entered promiscuous mode [ 1766.585187][T26087] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.654181][T26087] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.693182][T26087] device bridge_slave_1 entered promiscuous mode [ 1766.731838][T26059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.874724][T26059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.903500][T26059] device bridge_slave_1 entered promiscuous mode [ 1767.012114][T26035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.144280][T26035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.188730][T26087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.247603][T25702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1767.294737][T26059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1767.378212][T26087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.439091][T26059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.844640][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1767.887206][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1767.942342][T25702] 8021q: adding VLAN 0 to HW filter on device team0 [ 1768.007367][T26035] team0: Port device team_slave_0 added [ 1768.236948][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1768.277945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1768.330051][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1768.337261][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1768.421430][T26035] team0: Port device team_slave_1 added [ 1768.471669][T26087] team0: Port device team_slave_0 added [ 1768.512912][ T4282] Bluetooth: hci2: command 0x0419 tx timeout [ 1768.690480][T26059] team0: Port device team_slave_0 added [ 1768.738364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1768.771965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1768.819364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1768.875574][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1768.882766][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.971142][T26087] team0: Port device team_slave_1 added [ 1769.128039][T26059] team0: Port device team_slave_1 added [ 1769.181507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1769.231468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1769.345217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1769.416283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1769.475172][T26035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1769.495294][T26035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1769.615575][T26035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1769.723549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1769.745701][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1769.779364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1769.809718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1769.837191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1769.874728][T26035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1769.881718][T26035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.023124][T26035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.073814][T26087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.080815][T26087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.250411][T26087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.303537][T26059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1770.310569][T26059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.472504][T26059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1770.537082][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1770.562893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1770.675843][T26087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.715398][T26087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1770.832951][T26087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1770.874286][T25702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1770.895670][T26059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1770.920883][T26059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1771.009213][T26059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1771.194604][T26035] device hsr_slave_0 entered promiscuous mode [ 1771.231492][T26035] device hsr_slave_1 entered promiscuous mode [ 1771.265225][T26035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1771.302194][T26035] Cannot create hsr debugfs directory [ 1771.430490][T26059] device hsr_slave_0 entered promiscuous mode [ 1771.464377][T26059] device hsr_slave_1 entered promiscuous mode [ 1771.506379][T26059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1771.543448][T26059] Cannot create hsr debugfs directory [ 1771.574798][T26087] device hsr_slave_0 entered promiscuous mode [ 1771.603893][T26087] device hsr_slave_1 entered promiscuous mode [ 1771.626223][T26087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1771.668636][T26087] Cannot create hsr debugfs directory [ 1771.986017][T18744] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.254365][T18744] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.379687][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1772.402747][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1772.526640][T18744] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.635494][T25702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.869810][T18744] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.276121][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1773.308827][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1773.651097][T25702] device veth0_vlan entered promiscuous mode [ 1773.725388][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1773.753688][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1773.841791][T25702] device veth1_vlan entered promiscuous mode [ 1773.886601][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1773.919448][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1773.968432][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1774.189518][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1774.230329][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1774.270833][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1774.315810][T25702] device veth0_macvtap entered promiscuous mode [ 1774.452354][T25702] device veth1_macvtap entered promiscuous mode [ 1774.602131][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.657311][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.701171][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.787215][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.842712][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.902620][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1774.960951][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1774.995943][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.055924][T25702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1775.098489][T18744] tipc: Left network mode [ 1775.105398][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1775.143821][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1775.193696][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1775.258770][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.320590][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.372705][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.423090][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.476175][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1775.656947][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1775.961426][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.013400][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.046376][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.079729][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.119283][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.152014][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.283465][T25702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1776.326084][T25702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1776.376001][T25702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.744821][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1776.780575][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1776.825681][T25702] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.862885][T25702] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.892719][T25702] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1776.901477][T25702] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.537048][T26252] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5282'. [ 1777.750176][T26035] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1778.237894][T26035] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1778.656016][T26035] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1779.286125][T26035] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1779.803893][T12065] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1779.816330][T12065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1779.825611][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1779.833976][T12065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1779.843690][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1779.850977][ T4280] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1780.919461][T26272] lo speed is unknown, defaulting to 1000 [ 1781.873075][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 1782.643092][T26035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1782.899157][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1783.051512][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1783.446700][T26035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1783.536741][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1783.573007][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1783.612838][ T7440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1783.619995][ T7440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1783.962923][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 1784.132971][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1784.161302][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1784.223215][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1784.241321][ T7440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1784.248494][ T7440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1784.327623][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1784.383370][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1784.457876][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1784.523140][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1784.557654][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1784.630191][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1785.157635][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1785.203375][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1785.258872][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1785.323450][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1785.379039][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1785.440755][T26035] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1785.492054][T26272] chnl_net:caif_netlink_parms(): no params data found [ 1785.667102][T26059] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1786.033128][ T4282] Bluetooth: hci0: command 0x040f tx timeout [ 1786.141329][T26059] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1786.331731][T18744] device hsr_slave_0 left promiscuous mode [ 1786.402767][T18744] device hsr_slave_1 left promiscuous mode [ 1786.440113][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1786.468497][T18744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.513786][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1786.521506][T18744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.591930][T18744] device bridge_slave_1 left promiscuous mode [ 1786.643111][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.662910][T18744] device bridge_slave_0 left promiscuous mode [ 1786.669203][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.729474][T18744] device hsr_slave_0 left promiscuous mode [ 1786.775322][T18744] device hsr_slave_1 left promiscuous mode [ 1786.802892][T18744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1786.819488][T18744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1786.854131][T18744] device bridge_slave_1 left promiscuous mode [ 1786.860375][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1786.897014][T18744] device bridge_slave_0 left promiscuous mode [ 1786.923271][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1786.971007][T18744] device hsr_slave_0 left promiscuous mode [ 1786.994361][T18744] device hsr_slave_1 left promiscuous mode [ 1787.019173][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1787.037135][T18744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1787.075681][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1787.095878][T18744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1787.118892][T18744] device bridge_slave_1 left promiscuous mode [ 1787.139597][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.171010][T18744] device bridge_slave_0 left promiscuous mode [ 1787.194322][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1787.413459][T18744] device veth1_macvtap left promiscuous mode [ 1787.426779][T18744] device veth0_macvtap left promiscuous mode [ 1787.439558][T18744] device veth1_vlan left promiscuous mode [ 1787.449798][T18744] device veth0_vlan left promiscuous mode [ 1787.468342][T18744] device veth1_vlan left promiscuous mode [ 1787.480159][T18744] device veth0_vlan left promiscuous mode [ 1787.491087][T18744] device veth1_macvtap left promiscuous mode [ 1787.504656][T18744] device veth0_macvtap left promiscuous mode [ 1787.519064][T18744] device veth1_vlan left promiscuous mode [ 1787.529007][T18744] device veth0_vlan left promiscuous mode [ 1788.132430][ T4282] Bluetooth: hci0: command 0x0419 tx timeout [ 1788.517719][T18744] bond2 (unregistering): Released all slaves [ 1788.933388][T18744] bond1 (unregistering): (slave dummy0): Releasing active interface [ 1788.951185][T18744] bond1 (unregistering): Released all slaves [ 1790.277717][T18744] team0 (unregistering): Port device team_slave_1 removed [ 1790.399048][T18744] team0 (unregistering): Port device team_slave_0 removed [ 1790.521763][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.649647][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.594384][T18744] bond0 (unregistering): Released all slaves [ 1792.691579][T18744] team0 (unregistering): Port device team_slave_1 removed [ 1792.810365][T18744] team0 (unregistering): Port device team_slave_0 removed [ 1792.929673][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.054021][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.827436][T18744] bond0 (unregistering): Released all slaves [ 1795.263917][T18744] team0 (unregistering): Port device team_slave_1 removed [ 1795.380217][T18744] team0 (unregistering): Port device team_slave_0 removed [ 1795.499566][T18744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1795.619761][T18744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1796.555487][T18744] bond0 (unregistering): Released all slaves [ 1796.737129][T26059] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1796.819264][T26059] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1796.864478][T22981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1796.872027][T22981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1796.994841][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.022075][T26035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1797.187085][T26087] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1797.228366][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1797.261419][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1797.302913][T26272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1797.320271][T26272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1797.330580][T26272] device bridge_slave_0 entered promiscuous mode [ 1797.355044][T26087] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1797.400782][T26035] device veth0_vlan entered promiscuous mode [ 1797.484844][T26272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1797.513330][T26272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1797.536570][T26272] device bridge_slave_1 entered promiscuous mode [ 1797.564132][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1797.584626][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1797.621098][T26087] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1797.657832][T26035] device veth1_vlan entered promiscuous mode [ 1797.691336][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1797.737055][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1797.763206][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1797.841971][T26087] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1797.872826][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1797.922297][T26059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1797.984554][T26272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.053084][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1798.095856][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1798.136590][T26272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.201629][T26035] device veth0_macvtap entered promiscuous mode [ 1798.238284][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1798.261169][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1798.290481][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1798.321722][T26059] 8021q: adding VLAN 0 to HW filter on device team0 [ 1798.414889][T26035] device veth1_macvtap entered promiscuous mode [ 1798.434524][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1798.486787][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1798.519482][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1798.550047][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1798.557307][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1798.605507][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1798.633255][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1798.660476][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1798.667813][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1798.710971][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1798.799577][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.841026][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.880648][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.923744][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1798.960801][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1798.990435][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.025673][T26035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1799.101923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1799.121662][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1799.191333][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1799.230557][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1799.273083][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1799.326838][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1799.379038][T26272] team0: Port device team_slave_0 added [ 1799.424340][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1799.466279][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.496992][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1799.528702][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.562812][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1799.604290][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.630079][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1799.683886][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.704234][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1799.742550][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.770602][T26035] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1799.801919][T26035] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1799.843857][T26035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1799.881002][T26087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1799.917671][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1799.963404][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1800.023122][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1800.031649][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1800.089640][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1800.113468][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1800.142284][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1800.184923][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1800.220789][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1800.259939][T26272] team0: Port device team_slave_1 added [ 1800.285892][T26059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1800.315746][T26035] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.349302][T26035] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.382667][T26035] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.411798][T26035] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1800.458799][T26087] 8021q: adding VLAN 0 to HW filter on device team0 [ 1800.486875][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1800.524772][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1800.661666][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1800.714486][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1800.764422][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 1800.771577][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1800.893293][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1800.944542][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1801.014651][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1801.055549][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.062774][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.128561][T26272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1801.181066][T26272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.245688][T26272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1801.380511][T26272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1801.412338][T26272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1801.529466][T26272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.576106][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1801.621756][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1801.723032][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1801.772944][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1801.797481][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1801.840995][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1801.864195][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1801.899446][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1801.981570][T26059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.019846][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1802.061448][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1802.093428][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1802.153505][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1802.161087][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1802.208445][T26087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1802.301989][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.357507][T26272] device hsr_slave_0 entered promiscuous mode [ 1802.382607][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.452927][T26272] device hsr_slave_1 entered promiscuous mode [ 1802.488775][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1802.640287][ T7212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1802.708493][ T7212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1802.799028][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1803.115471][T26423] loop1: detected capacity change from 0 to 1024 [ 1803.178144][T26423] EXT4-fs: Ignoring removed bh option [ 1803.193657][T18744] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.253092][T26423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1803.607046][T18744] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.666713][T26035] EXT4-fs (loop1): unmounting filesystem. [ 1804.024768][T18744] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.125346][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1804.155255][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1804.229195][T26087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1804.371880][T18744] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1804.445032][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1804.483337][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1804.580482][T26059] device veth0_vlan entered promiscuous mode [ 1804.604447][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1804.644007][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1804.687323][T26059] device veth1_vlan entered promiscuous mode [ 1804.783961][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1804.818770][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1804.863885][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1804.906089][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1804.965859][ T7440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1805.033887][ T4320] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1805.170027][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1805.205184][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1805.254189][ T4320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.269903][T26087] device veth0_vlan entered promiscuous mode [ 1805.327257][ T4320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1805.360147][T26059] device veth0_macvtap entered promiscuous mode [ 1805.397962][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1805.416076][ T4320] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1805.443024][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1805.477130][ T4320] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1805.494758][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1805.546394][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1805.569591][ T4320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 1805.637240][T26059] device veth1_macvtap entered promiscuous mode [ 1805.656553][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1805.681174][T26087] device veth1_vlan entered promiscuous mode [ 1805.715490][ T4320] usb 2-1: SerialNumber: syz [ 1805.721029][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1805.762257][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1805.784574][ T4320] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 1805.824027][ T4320] usb-storage 2-1:1.0: USB Mass Storage device detected [ 1805.837002][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1805.854555][ T4320] usb-storage 2-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 1805.995870][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1806.050941][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1806.101278][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1806.150595][T26087] device veth0_macvtap entered promiscuous mode [ 1806.222867][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.283486][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.358032][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.423435][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.478949][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.544993][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.600842][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1806.663261][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1806.743991][T26059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1806.943106][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1806.976567][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1807.023390][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1807.068511][T26087] device veth1_macvtap entered promiscuous mode [ 1807.108532][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.153584][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.192255][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.229539][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.290067][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.362328][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.422480][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.462530][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.513972][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.576549][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.612490][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.666048][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.717621][T26059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1807.762524][T26059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1807.823985][T26059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1807.961629][T15810] usb 2-1: USB disconnect, device number 6 [ 1808.356918][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1808.386963][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1808.426876][ T7441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1808.492070][T26059] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.536214][T26059] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.572030][T26059] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.601545][T26059] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.846747][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.900251][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1808.940691][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1808.979290][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.022927][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.075249][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.150705][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.212515][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.262775][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1809.319919][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.380426][T26087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1809.533081][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1809.563400][ T6407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1809.651970][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.680125][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.725506][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.736981][T26472] rxrpc: Assertion failed - 5(0x5) == 11(0xb) is false [ 1809.755116][T26472] ------------[ cut here ]------------ [ 1809.760693][T26472] kernel BUG at net/rxrpc/call_object.c:689! SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1809.773811][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1809.810777][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1809.825596][T26472] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 1809.831831][T26472] CPU: 0 PID: 26472 Comm: syz.1.5332 Not tainted syzkaller #0 [ 1809.839299][T26472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1809.849379][T26472] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 1809.855298][T26472] Code: e8 e6 f3 21 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 c0 80 a1 8b 4c 89 f6 4c 89 f2 48 c7 c1 40 81 a1 8b e8 c1 a5 c4 00 <0f> 0b e8 ba f3 21 f8 48 c7 c7 a0 81 a1 8b e8 ae a5 c4 00 0f 0b 66 [ 1809.874924][T26472] RSP: 0018:ffffc90003a57778 EFLAGS: 00010246 [ 1809.881106][T26472] RAX: 0000000000000034 RBX: ffff888072a2ca80 RCX: 73b23a2221a8f800 [ 1809.889114][T26472] RDX: ffffc90005b29000 RSI: 0000000000006ba2 RDI: 0000000000006ba3 [ 1809.897134][T26472] RBP: ffff888072a2ca80 R08: ffffc90003a57487 R09: 1ffff9200074ae90 [ 1809.905126][T26472] R10: dffffc0000000000 R11: fffff5200074ae91 R12: ffff888072a2d1d8 [ 1809.913139][T26472] R13: dffffc0000000000 R14: 0000000000000005 R15: dffffc0000000000 [ 1809.921152][T26472] FS: 00007f28ffed66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1809.930130][T26472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1809.936741][T26472] CR2: 00007f28fefeb680 CR3: 0000000035986000 CR4: 00000000003506f0 [ 1809.944779][T26472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1809.952871][T26472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1809.960873][T26472] Call Trace: [ 1809.964161][T26472] [ 1809.967120][T26472] rxrpc_service_prealloc_one+0xa4c/0xff0 [ 1809.972873][T26472] ? rxrpc_user_charge_accept+0xb4/0xe0 [ 1809.978469][T26472] rxrpc_user_charge_accept+0xb4/0xe0 [ 1809.983954][T26472] rxrpc_do_sendmsg+0x7d3/0x10e0 [ 1809.988931][T26472] ? lock_chain_count+0x20/0x20 [ 1809.993816][T26472] ? rxrpc_look_up_server_security+0x530/0x530 [ 1810.000005][T26472] ? __local_bh_enable_ip+0x136/0x1c0 [ 1810.005435][T26472] ? _local_bh_enable+0xa0/0xa0 [ 1810.010325][T26472] ? rxrpc_sendmsg+0x36b/0x890 [ 1810.015121][T26472] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1810.020488][T26472] ? rxrpc_getsockopt+0x150/0x150 [ 1810.025531][T26472] ____sys_sendmsg+0x5ed/0x9a0 [ 1810.030435][T26472] ? __might_fault+0xa6/0x120 [ 1810.035188][T26472] ? __sys_sendmsg_sock+0x30/0x30 [ 1810.040238][T26472] ? __import_iovec+0x306/0x510 [ 1810.045193][T26472] ? import_iovec+0x6f/0xa0 [ 1810.049716][T26472] ___sys_sendmsg+0x2a2/0x360 [ 1810.054416][T26472] ? __sys_sendmsg+0x2a0/0x2a0 [ 1810.059264][T26472] __se_sys_sendmsg+0x1c3/0x2b0 [ 1810.064153][T26472] ? __x64_sys_sendmsg+0x80/0x80 [ 1810.069128][T26472] ? lockdep_hardirqs_on+0x94/0x140 [ 1810.074361][T26472] do_syscall_64+0x4c/0xa0 [ 1810.078799][T26472] ? clear_bhb_loop+0x60/0xb0 [ 1810.083596][T26472] ? clear_bhb_loop+0x60/0xb0 [ 1810.088298][T26472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1810.094206][T26472] RIP: 0033:0x7f28fef9df99 [ 1810.098647][T26472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.118284][T26472] RSP: 002b:00007f28ffed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1810.126740][T26472] RAX: ffffffffffffffda RBX: 00007f28ff225fa0 RCX: 00007f28fef9df99 [ 1810.134728][T26472] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1810.142739][T26472] RBP: 00007f28ff034ec4 R08: 0000000000000000 R09: 0000000000000000 [ 1810.150717][T26472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1810.158694][T26472] R13: 00007f28ff226038 R14: 00007f28ff225fa0 R15: 00007ffc62f80eb8 [ 1810.166700][T26472] [ 1810.169735][T26472] Modules linked in: [ 1810.277246][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.335016][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1810.345767][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.359077][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1810.369979][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.382764][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1810.399202][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.409930][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1810.423260][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.437334][T26087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1810.449215][T26087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1810.477377][T26087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1810.514796][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1810.548468][ T7212] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1811.478706][T18744] device hsr_slave_0 left promiscuous mode [ 1811.517920][T18744] device hsr_slave_1 left promiscuous mode [ 1811.542524][T26472] ---[ end trace 0000000000000000 ]--- [ 1811.548029][T26472] RIP: 0010:rxrpc_cleanup_call+0x1cf/0x1f0 [ 1811.570037][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1811.607095][T18744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1811.615894][T26472] Code: e8 e6 f3 21 f8 41 b8 0b 00 00 00 41 b9 0b 00 00 00 48 c7 c7 c0 80 a1 8b 4c 89 f6 4c 89 f2 48 c7 c1 40 81 a1 8b e8 c1 a5 c4 00 <0f> 0b e8 ba f3 21 f8 48 c7 c7 a0 81 a1 8b e8 ae a5 c4 00 0f 0b 66 [ 1811.685110][T18744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1811.703623][T26472] RSP: 0018:ffffc90003a57778 EFLAGS: 00010246 [ 1811.709864][T26472] RAX: 0000000000000034 RBX: ffff888072a2ca80 RCX: 73b23a2221a8f800 [ 1811.727077][T18744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1811.745277][T18744] device bridge_slave_1 left promiscuous mode [ 1811.751514][T18744] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.777581][T26472] RDX: ffffc90005b29000 RSI: 0000000000006ba2 RDI: 0000000000006ba3 [ 1811.788877][T18744] device bridge_slave_0 left promiscuous mode [ 1811.816927][T26472] RBP: ffff888072a2ca80 R08: ffffc90003a57487 R09: 1ffff9200074ae90 [ 1811.827527][T18744] bridge0: port 1(bridge_slave_0) entered disabled state [ 1811.839210][T26472] R10: dffffc0000000000 R11: fffff5200074ae91 R12: ffff888072a2d1d8 [ 1811.864737][T26472] R13: dffffc0000000000 R14: 0000000000000005 R15: dffffc0000000000 [ 1811.876139][T18744] device veth1_macvtap left promiscuous mode [ 1811.882282][T18744] device veth0_macvtap left promiscuous mode [ 1811.891465][T26472] FS: 00007f28ffed66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1811.900871][T26472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1811.910927][T18744] device veth1_vlan left promiscuous mode [ 1811.917086][T18744] device veth0_vlan left promiscuous mode [ 1811.925605][T26472] CR2: 000055c4585c3000 CR3: 0000000035986000 CR4: 00000000003506f0 [ 1811.939935][T26472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1811.962158][T26472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1811.985638][T26472] Kernel panic - not syncing: Fatal exception [ 1811.991840][T26472] Kernel Offset: disabled [ 1811.996202][T26472] Rebooting in 86400 seconds..