last executing test programs: 1m3.877933454s ago: executing program 2 (id=1317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0xfffffda9, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000006c0)={0x1, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000180)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff020000000000000000000000000001000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a00000000000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/256], 0x110) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b00)=ANY=[@ANYBLOB="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"/1313], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x61, 0x60000000}, 0x50) mkdir(&(0x7f0000000180)='./file0\x00', 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x17, &(0x7f0000000880)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m2.199193701s ago: executing program 2 (id=1318): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000e00)=""/4083, 0xff9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) unshare(0x2c060000) io_setup(0x7, &(0x7f0000000280)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg1\x00'}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffff", @ANYRES16=r0], 0x21c}}, 0x0) 1m1.082025756s ago: executing program 2 (id=1320): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={0x0}}, 0x4000) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000200)=0x5, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f030e03f007120006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xb318, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) 59.465041238s ago: executing program 2 (id=1322): bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) syz_emit_vhci(0x0, 0xa8) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r0 = syz_open_dev$usbfs(0x0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x88) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0xffffffffffffffb6) syz_emit_ethernet(0x86, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) 22.774826092s ago: executing program 3 (id=1375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5692db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8b03fe4798e5750d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a69151fccaefc6e9b770c9ac124da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb11803"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.216358534s ago: executing program 4 (id=1378): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x484101) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/162}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfffffffffffffd74, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffd62, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.270984565s ago: executing program 1 (id=1383): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x94, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x4}, @NLBL_CIPSOV4_A_MLSLVLLST={0x28, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3353a640}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a2cd9f}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0x44, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xded3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x24d3}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3c65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc44f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x497c1544}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd282}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x566a7ff5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x3, 0xffffffffffffffff}) close_range(r2, 0xffffffffffffffff, 0x2) r3 = syz_open_procfs$pagemap(0x0, &(0x7f00000000c0)) lseek(r3, 0x8, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000880)={'vxcan0\x00'}) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@bridge_delneigh={0x34, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x2}, [@NDA_LLADDR={0xa, 0x2, @remote}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x4}]}]}, 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'vxcan1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x81000000}]}}]}, 0x38}}, 0x0) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000200)={'bridge0\x00'}) 17.500100227s ago: executing program 0 (id=1384): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.34296897s ago: executing program 4 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5692db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8b03fe4798e5750d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a69151fccaefc6e9b770c9ac124da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb11803"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.298953613s ago: executing program 3 (id=1386): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB]) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x1c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x80108906, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x8906, 0x0) bind$inet6(r2, 0x0, 0x0) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xd, 0x5, 0x1fc00, 0x4012, 0xffffffffffffffff, 0x4000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x1, 0xe, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x0, 0x0, 0x0, 0xa, 0x4, 0xfffffffffffffffc}, @ldst={0x3, 0x3, 0x2, 0x6, 0x3, 0x2, 0xfffffffffffffffc}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8, @void, @value}, 0x94) 15.175203585s ago: executing program 1 (id=1387): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) 14.80970982s ago: executing program 1 (id=1388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x101641) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00') r6 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r6, r5, 0x0, 0x8000000d) 13.466808856s ago: executing program 0 (id=1389): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xf, 0x0, 0x2}, 0x20) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r6 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 12.186464376s ago: executing program 0 (id=1390): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x3ced, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80045510, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.110964283s ago: executing program 3 (id=1391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000180)=0x5, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) read$hiddev(r6, &(0x7f0000002080)=""/4096, 0x1000) getrusage(0x0, &(0x7f00000006c0)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 10.55049862s ago: executing program 0 (id=1392): syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, &(0x7f0000005080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x20008851) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14f0ffff0f000100007b8ba64b0000000000000a140000001000010000000000000000040000000a"], 0x28}}, 0x0) r2 = socket$inet(0x2, 0x3, 0x14) setsockopt$inet_msfilter(r2, 0x0, 0x21, &(0x7f00000000c0)=ANY=[], 0x1) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000014c0)={0x2, 0x0, 0x0}, 0x0) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14, 0x1000) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x7b) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000079109c000000000005000000000000009500000000000020ebeb5c4be7f470a9bc6858fa271210e07dfd01cec21f33c5d9a1d879bb396151b3e506a9a84b1c2b8bbaf5633d806326d00517474a1180732e3d1643f8e6022d7c8333090000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$vmci(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) signalfd(r6, &(0x7f0000000200)={[0x5]}, 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3", "cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d", "5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307", {"c7193f7edd1efc4742dc481e6f57f901", "948177bcc5dea4029ba4683a6bdcd7a1"}}}}}}}, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) r8 = openat$capi20(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$CAPI_NCCI_OPENCOUNT(r8, 0xc0104307, &(0x7f0000000080)=0x3) 9.831550467s ago: executing program 1 (id=1393): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000600)={@ptr={0x70742a85, 0x0, 0x0, 0x6000}, @ptr={0x70742a85, 0x0, 0x0}, @fda}, &(0x7f0000000240)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) 9.637817985s ago: executing program 4 (id=1394): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000700000030000000020000821300000000000006040b00ba470000000000000001000000000000000000000200"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) syz_emit_ethernet(0x6e, &(0x7f0000000200)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x38, 0x3a, 0x0, @empty, @mcast2, {[], @time_exceed={0xd, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '\x00', 0x0, 0x6c, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback={0x0, 0xffffac1414aa}, [], "a5f7c70c777fc9b9"}}}}}}}, 0x0) r0 = io_uring_setup(0x29e6, &(0x7f0000000480)={0x0, 0x0, 0x2}) pipe2$watch_queue(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000c90000007b8af8ff00000000b7080000000008007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000850000008b000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000280)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000000140)=""/57, 0x39}, {&(0x7f0000000180)=""/35, 0x23}, {&(0x7f0000000300)=""/137, 0x89}, {&(0x7f0000001500)=""/210, 0xd2}, {&(0x7f0000001600)=""/211, 0xd3}, {&(0x7f00000001c0)=""/9, 0x9}], 0x7) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) syz_io_uring_setup(0x4919, &(0x7f0000000080)={0x0, 0x8720, 0x2001, 0x0, 0x1d7, 0x0, r0}, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001440)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="5a00330080000000ffffffffffff080211000000505050505050000000000000000000006400024001010c040603000000000025030000002a01003c0400000000710700000000000000"], 0x78}}, 0x0) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010091", @ANYRES16=r10, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x40}, 0xc0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) 9.566562362s ago: executing program 0 (id=1395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"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"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9.411142566s ago: executing program 3 (id=1396): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000300), &(0x7f00000001c0)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x40384708, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) dup2(r6, r5) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000080)=r7, 0x4) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x541b, 0xfffffffffffffffe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x0) 8.315734479s ago: executing program 3 (id=1397): socket$inet6_sctp(0xa, 0x0, 0x84) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000200)=0x9, 0x4) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x0, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="180000000300000000000000a012544f95002b000000000093adffa82255f674412d020000000000005ab527ee3697f1ed4436dd1164b1b3f427f6ba6b34f98125f30e631d273683626e00dc254d570d4a6b78a5833488cfe410090000004aa900003d3cd62f00158e6eee8501000000520a0000151d010000000100bf000000003bbd424c6e6cafbe9309aba218812868a51d129e78f6ae170bf5a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b00f45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e460a000517ebc406e89dcbb7677e6528b0856e31eb9474c0106fc48e1f8c1a5f6945ac24cf609068f6ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bedf59ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e148bf56497e5d56d06c7551b870b2851c3f0a1aab71587a21c8f1b3369ebfcb4cb2946601b0f04edb256c604f068773f6db9d661bd7f0e2536f00000000000000005521458b7d1e341c6f864f983d745f5865aad41d29158ae7602a2d6cd41503f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121a96eb372713255012e00300000000000000b35faae176f98b745eda2967199cc93685bb537e8e487166737089df20618cd4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d0007ae4e1e347c0cff28235a6bb7aa3804b907a8f2880c5cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec64fa6c718bbd1aa591140cff0be4c6f8df08445e9734ae30aa9afdc7125f01ab03a9b1074407136b4506000f0916aada035df2e0452a9b39e73aeeb6eaf14652dda689e2051d9b7eb85f3f2d5aed65201cc2c51944da8d7391d5b6b9741aa3b76600cd1aa0afe5f8f46df4c5124caf673374b371867a79b31c6617fc3327191fbf514573f1e30d1fd2d763f3ee9218b15c1d60be2168fffcd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc97def5f07f2b77f05a4f81a9cf81109715b67ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c4407eca22debc99335583b00013c3130978fa069af8223b38ced735c2d90c6d84c30a0d87dc0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c534187738655d7a6240412c8f283cc0c1eba2866dc9580000000000000007fffffffff554b82d9c162f3556076b80552d961ca74f1ffdaccf0ea5f02e0219ccb9087e6c3b3917bb74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb01efada800e50000000000fdaf2f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433d866665b98ca2002c836e89feef904c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc8d0834fb8d124638fec58faeb4c16abb440df2a694f4cdcaa400d503d79906958102000000000000000000001ffff0ef89b2a68d2bb2dd163e863314e8449801b52bb93f6c9084659ce777dda8563c859656a357770289a61faa95a82b04cfb7f2f97252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b00110635376413c29f7c6f7b7e29b9f4bddd5e328661f4615e627a6f608ad53a4168fe8e5d7d934aa289b4bd2b870000000000000000000000000000bc4b4ff50000009b777883a02ffd92dfc4cb4114b9f9cf4ad155110cd3ace2b322ae31bfa27847c799c8869a1ea5b98e525e6383ad7fd9795170e7b11e247603000000001459c7f606d721d3979676bffb3049166ab84ac1061991bd57c2566c10c296352a5105b6164e3f2491e4793e590dcc71f110da96366c40dd44a2c9882d3aa0f8a797b8fea6efcfb5276b7679f15559cdaabf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22adef9546abb9b5fe7f30e4e0c13f60870fde1f88d830b11002135e8e7262f29b6d7923bfbe0bd2a8be179e56b3bff3792cee2fc37eee739c3008ce740d8804f8e705f0dc59d000021363e8df94ff175b48dc8c12def681a11647946595445bf1cb7d2778cd27a6b3b2966b011d193ba8075da1d1da9311a050000ab89524414cae922141f7baf17756c31559907a53581b6ebb790ad60bd03870c39d1ad12c750837e63f9880fd70259e35590afb4843cd4e9989398eaa89cefb3aa13cab8d015cbaf1561d95362decd73b8f8cbf8269cac091cfaaa3c7e46d6e79145fc0f1d1b383752ccb40515a772356d746914540216adf4c0f44f1cff3760afa252720ec6dad3a98671ecdaff46cddffb1f05a0c0976070d603a442d014822369fa3eacbb69bd1b0a074357acd5d02161fed146ad3aa15d2b8101b7bd1e091ada78ecd50181f4b35cae1b29aff91494c916323b61f815c4e0701657087ad11eef97952921365bc898ba2c76a9b6e0052f43b1ad2dfdf3f958fc1d32e692bc8846c78a956ada453c67c1c2cdc4f8b1c94e9adc106e85b31e030d955c5578e107a6e8ca0d4dd05344c3e2af25d9a3b0f7805624016aeab271a75f0bacb101a156ef8948064569154a7de08f80e4df4c339b69431b0a5671097d89212b465b0b32275deae10a77e334c9fc074d181bdeb5be80a6249d472e78e6be57a5ccd354cf0a74680bc9987d5aade221a2be926210b2690d09e4b7a3dea25403397439979c27d5613262de10bacecfff2d58437f422df4252c018795310c25e8fce18ed366ac2caade564ca869727a7dc26271e17d7aba48971835530311545273d3caadeb5d2017dcddab8f38f2068f68a4111ddd587b5df4b5d8f1ce00231a2092eb2e797c491a1e66f736c5867831c5d6eaa9ef1806fd95bbe00318000000000000259da51ff7517ace7361420a4669a97f7d0bf095c2787f00bdbfee19670d1e0ec5e6c3cb09972fa4d94993157b96d6695177c99d83716651129320924352cda7b8ead91c3301af620c1e8d703dd29ad77f54836779600bb0db3ecfad36fa8164999898e4aaa56324e1c03a74daf593f92a8ecc03f8c8e3af9ae07dc03780cc0d69da9e3528c1693fb51998731992ceb27dcc0be5be4decefe41b78bc1847bf54b087e095172f06cfa6d4bf958b1d4544947ff1230655199db4f475006047fe83caca97758dffa53cee764f85932eb20d54241b2d515c0826dfe1f0f40ae920455a4548fb35e2a345c05b1c252b7877bb3d834b0b3579a36249146f832ef258df5127318c7017ac1a996c4f902f82deb60fd113ccf812d55ffd625057bd4ff3960992b85bc8d32edfca386be16b1c549aec52e31e1405d86c7760282901750b732ec06b0db735222a731195633164704886a0c50a5db0d694028cdf61b9749d5d7bd79969a92114ca804a6365615ceb09ed22e4fc3a7d0e2ee4a5fc10f3d01346481e934e411d0e9d7a9fa515a2219b526d8f3e2b383ef694ff99257fc52c31a3503ce22e503214fa808301b489bb0cd8000000000000159c447fc6f1bf1137f6863aceb90d62dae497fe08f7e627727ad0919a62fe92a33f1e5d390000000000000000004135cb6dda469cd6622e6c36e9f005789e6b827c07b8f4f8d4f15695fe30d32ee6efe22cf8d299239eaa54e5c699a904a0344febb884d1cc94f552f48d84ee3431d817edc4bdb762d62778f30baee4aa428bba55f6cff1b5ba395d461db8ffe6fb89e1058a73bc8564c86497b92330b23cb3befb569cc67f15e349644a2c47924423e2983517074747680306eddd948e5211377575787cfa291ec8796dd7db6968791aea4f5e627b219e99bb9262493bbf04415b22ee398406ec88f6b758f6b240a87dc169f51d3a79fb512afae14fbc5e7808764b8550622c1e3080cdd6b21ce0f0324712343943f5e061df056b3b809c07e1318daf9ed1ebea0f95e302dab0b6bc52ed2aac8b950b448ca3a03d1bd21078c54f5cf86c5563b9bba2805a30574a4123e27d6f281f70ac769c62b49bf7cc73f0c9a2b84534d234d2eb136f8620d3e1147a7b7361618e0064cad6fe32685d143af0d378d54c0a5953c764ae8721bd23cba4701e9f0d7a6e1ba92c87b0384f8ee595d618f7cf5a80a0a2edc2541072e146c1e5a8f7b65c877af04e742cfdcac0641a11d51fd6dc88965691bce388005fbb071451bc260bcf7df8890d9c5c8ef47bc4ff5080a2a771f85b4f3d2a2259196a8423e7a992e9b320a40921f6f74d5b0e94be6c9c059e62ff53e5c2139806cca4545d88a7f7ff366e5d7f08a56609130931b64e3bb70000d38011b924ed9df6aa170c6d845f43c0bcbe3839cd1422944651a5908c76c3f3b4070aa1d896e4adc117698c452c9926442a000e128bb936a99536290f906c088cb10ee7bee50b7b013e4e1ff3481d77c7697738b46deebd9ac6e58b41341dcbfad161e3d529a504821549629ef63f8297bec881eb5edb07ed6c86640fb4128d7931e56bb89f0ce605"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x59032, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000962000/0x3000)=nil, &(0x7f0000582000/0x2000)=nil, 0x3000}) recvmmsg(r3, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) r5 = gettid() move_pages(r5, 0x6, &(0x7f0000000000)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000040)=[0x8, 0x1000], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) openat$procfs(0xffffffffffffff9c, &(0x7f0000000740)='/proc/keys\x00', 0x0, 0x0) 7.549452031s ago: executing program 4 (id=1398): creat(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x4e0c01) syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd600a8435001c0600000000000000000000a652ff00000000fe80000000aa000004"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r3, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000140)=ANY=[@ANYBLOB], 0x24, 0x0) 7.549124071s ago: executing program 2 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x400000, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x32f881, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0xffffffffffffffff) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5a090987f70e06d038e7ff7fc6e5539b5b43078b089b3b34396d090890e0878f0e1ac6e7049b3371959b719a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074c0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x3b3cc1e9e7df1ab7}}, 0x9b) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) fcntl$notify(r3, 0x402, 0x29) fcntl$notify(r3, 0x402, 0x5) 3.553601746s ago: executing program 1 (id=1399): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private0={0xfc, 0x0, '\x00', 0x1}, 0xf, 0x0, 0x2}, 0x20) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080), 0x0) r6 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r6, &(0x7f0000000600), 0xfec8) recvmmsg(r6, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/147, 0x93}], 0x1, 0x0, 0x0) 2.413347493s ago: executing program 4 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f15852323460608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000008000000095eba2b55b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x330, 0x1b8, 0x0, 0x148, 0x0, 0x148, 0x298, 0x240, 0x240, 0x298, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0x190, 0x1b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x390) mkdir(0x0, 0x0) syz_io_uring_setup(0x7b, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000001080)={0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, 0x0, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = dup(r6) write$FUSE_BMAP(r7, 0x0, 0x0) 2.155961877s ago: executing program 3 (id=1401): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000001f80)=ANY=[@ANYBLOB="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", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$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") ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="54010000100001000000000000000000ffffffff0000000000000000000000002001000000000000000000000000000200000000000300"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb00000000000000000000a1000000000000000000fe8000000000100000000000000000bb00000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e007f0000010000000000000000000000004800020063747228626c6f7766697368290000"], 0x154}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x8000040000000000, 0xffffffffffffffff}) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 2.084545654s ago: executing program 1 (id=1402): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x468, &(0x7f00000004c0)="$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") r0 = epoll_create1(0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x20002) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) socket$alg(0x26, 0x5, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000b40)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}, 0x45c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edaff0c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f00000000c0)={[{@nr_blocks={'nr_blocks', 0x3d, [0x0]}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, &(0x7f0000000040)={0x0, 0x3938700}, 0x0) 1.754821255s ago: executing program 0 (id=1403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000008c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r6, 0x4068aea3, &(0x7f0000000380)) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) chdir(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r7, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB]) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000100)={"b46474f815e8d5535f0887c44335cc824dc6121bc72a77f532ff5dad4d643a9cab29d2310e04be14eb26c0af4985fe45e3b3b0680b3ec92725d74b9716e0f7c3119a2c9a0ae65ff4772e2e12733cb013c4308fe40863480747c0a7ddb9361b1578015ca1bb2c1677ebae096f08345476f567443842946ed946434c75916d1db83fe305920de65bfaf9bd940672216846cb16b8ae67cd3affc61375381f91b3b9f1cc5e38cafe5239aee71dcd481fbe1ecd25479024a676b21b3adc5e463c9effbaad4469a74697c28fb9beefa6a5d736712a55eb9110c2cf7964062ba8cbc1c038e84f0f5db7fc7053118bf5221e3efa6fc3edb5d0ca3cde7054dd0751a332520aa8478b1775d552c5cc24d3c2df9eb333e5ca3aa06c1c2cf8526714f5caff2f55b41976fc20b64f1fc61d5b44f50953584db11b7f89ec68098eafa48cebd6882a1825d32130a31abfeafd1987317879e29ac51b93c9659e023fff3ddb5e39dd19cc3ef1d883c78b9e073d08a9197fb3717df238b9831831214b186693be9dd2568bb77272e80df5dfed03e8c467627bedfbd93359a9f79a3aa37e873dc1357b37b43d813ea85267b0dc8b1c4cc51bd985328833beb2679b7fb762555bbea2da936b36f8f1673fd5f606b2b6eb23b72bf947206e8dbfeb40ca6f265a3485c8446e0f0da652860b88328073d2282c14b48a7774e62754a968b60e92205e8fafcdd70a55c3c4d1a4821ff44e6e3681f15ae091262e3a3290a24d8ceae30ebbf9d24287bb8a5d73c608d47d287f9e716cf02b4796a83fb0c05e45b89de9ef8bce834e6d7a0be6e30d2c66cb6e640cb01898454ad361bc0701d8fe56f335e2373b2cde5692db04691cc4a689034272a8e086a32ce7061b4f79fa8afbb48a6ce4b62bdc44af013d78980457e1fa61eb9204818606f4c3b03c0f33cd2a841ac9bc2b73151a96e31ab99e6ec969b5f2c3edd5f9abc69845e487af992758ba445368da93dae1d44360d52a534a88276b8aaf349841d8a4788c60408618437c442308dbf70efeda2e54e9b9e4fe5f76997c9dcb945a26bd75748c85d19ca8b99264dce50580e8b03fe4798e5750d4dbda401dad7df31e9a7a6a3a83bfbdfb5394abd581ac0824fbcd75d2f5205c0b7c9188e6f26bfd97734d9a20433f6cdba9d14a5f32a4d97a57f4603b21146fd1aebf082e863d463c224ad623c17d8043d3bf083f0322408dd6ead6915ac6a4222ab51480eb6e11a8913348219515170d9df90d72d7363bbda3e327d19f98c0a856f98076380e788e602e8a2ae0a1930786874dc21a2e99abda15f35457cf1dcb440c4b41350d0eda352aad7f57a0adc8a69151fccaefc6e9b770c9ac124da06460635ed21c4c11cd1a8ec778064c9f62efba2927828b23f94b16619a5520731c2c40ab8583c9f2e73233d74b84f4877ce6b35bb11803"}) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 496.476054ms ago: executing program 4 (id=1404): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000002c0)='id_resolver\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2010000, &(0x7f0000000f40)=ANY=[@ANYBLOB="726f6469722c757365667265652c696f636861727365743d6370313235352c756e695f786c6174653d312c636f6465706167653d3933362c757466383d302c636865636b3d72656c617865642c73686f72746e616d653d6d697865642c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c636865636b3d7374726963742c73686f72746e616d653d77696e6e742c00ef4965db50a5729e7a3c888b967e9890d33d8e5f495b8deb12e975ae17fd608a3f7d4175910fff826925e0330c7a3ef5"], 0x25, 0x336, &(0x7f0000001200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='sched_switch\x00', r5, 0x0, 0xfbfffffffffffffd}, 0x18) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x80) process_vm_writev(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r6, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000e80)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=1405): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(0xffffffffffffffff, 0xc0884113, &(0x7f0000000240)={0x0, 0x0, 0xe51, 0x0, 0x0, 0x8000000000000000, 0x5, 0x0, 0x800, 0x6, 0x0, 0x4}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_FLAGS={0x8, 0x6, 0x1, 0x0, 0x22}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}}, 0x0) socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x5452, &(0x7f0000000000)) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) kernel console output (not intermixed with test programs): _CHANGE): veth1_to_team: link becomes ready [ 817.627783][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 817.637298][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 817.646170][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 817.657156][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 817.692113][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 817.712937][ T9619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 817.811234][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 817.819357][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 817.867630][ T5163] usb 4-1: USB disconnect, device number 33 [ 818.121598][ T9621] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 818.140325][ T9621] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 818.169598][ T9621] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 818.306324][ T9621] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 818.346193][ T5185] EXT4-fs (loop2): unmounting filesystem. [ 818.451528][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 818.459060][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 818.614856][ T9619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.614244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 820.704204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 821.174778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 821.186390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 821.199075][ T9619] device veth0_vlan entered promiscuous mode [ 821.235600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 821.277880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 821.331619][ T3680] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 821.332210][ T9619] device veth1_vlan entered promiscuous mode [ 821.464203][ T9621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.501616][ T9821] xt_HMARK: spi-set and port-set can't be combined [ 821.508372][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 821.523616][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 821.534238][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 821.548435][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 821.601262][ T3680] usb 4-1: Using ep0 maxpacket: 32 [ 821.656931][ T9821] netlink: 'syz.2.1127': attribute type 2 has an invalid length. [ 821.668093][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 821.678234][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 821.746074][ T3680] usb 4-1: config 0 has no interfaces? [ 821.765254][ T9619] device veth0_macvtap entered promiscuous mode [ 821.802661][ T9621] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.819144][ T9619] device veth1_macvtap entered promiscuous mode [ 821.849894][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 821.878784][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 821.909146][ T3718] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.916332][ T3718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.934465][ T9833] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1129'. [ 821.955135][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 822.043587][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 822.078760][ T3820] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 822.119392][ T3820] bridge0: port 2(bridge_slave_1) entered blocking state [ 822.126602][ T3820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.228847][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.283756][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.334461][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.365542][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.417058][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.447476][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.476219][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.507263][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.535824][ T9842] loop2: detected capacity change from 0 to 512 [ 822.561098][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 822.583629][ T9842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 822.631821][ T9842] EXT4-fs (loop2): Test dummy encryption mode enabled [ 822.641617][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.674966][ T9842] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz.2.1130: iget: bogus i_mode (0) [ 822.699145][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 822.711541][ T9842] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.1130: couldn't read orphan inode 17 (err -117) [ 822.738336][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.759950][ T9842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 822.773915][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.799026][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.865018][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.885528][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.900813][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.927480][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 822.939798][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.959040][ T9619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 823.050953][ T9619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.077183][ T9619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 823.616193][ T3680] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 823.625572][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.634064][ T3680] usb 4-1: Product: syz [ 823.638357][ T3680] usb 4-1: Manufacturer: syz [ 823.643076][ T3680] usb 4-1: SerialNumber: syz [ 823.651489][ T3680] usb 4-1: config 0 descriptor?? [ 823.680392][ T32] device hsr_slave_0 left promiscuous mode [ 823.702002][ T32] device hsr_slave_1 left promiscuous mode [ 823.787884][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 823.818444][ T9840] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 823.843558][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.853936][ T154] usb 4-1: USB disconnect, device number 34 [ 823.884954][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 823.910989][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.920080][ T5185] EXT4-fs (loop2): unmounting filesystem. [ 823.946820][ T32] device bridge_slave_1 left promiscuous mode [ 823.975803][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.019700][ T32] device bridge_slave_0 left promiscuous mode [ 824.031886][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.053318][ T9854] loop2: detected capacity change from 0 to 512 [ 824.084397][ T9854] EXT4-fs (loop2): bad block size 8192 [ 824.106938][ T32] device hsr_slave_0 left promiscuous mode [ 824.326581][ T32] device hsr_slave_1 left promiscuous mode [ 824.345366][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.363804][ T32] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.109652][ T32] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.235674][ T32] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.942409][ T32] device bridge_slave_1 left promiscuous mode [ 826.004998][ T32] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.169600][ T32] device bridge_slave_0 left promiscuous mode [ 826.194644][ T32] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.479497][ T32] device veth1_macvtap left promiscuous mode [ 826.486226][ T32] device veth0_macvtap left promiscuous mode [ 826.493136][ T32] device veth1_vlan left promiscuous mode [ 826.499071][ T32] device veth0_vlan left promiscuous mode [ 826.571515][ T32] device veth1_macvtap left promiscuous mode [ 826.969531][ T32] device veth0_macvtap left promiscuous mode [ 827.024961][ T32] device veth1_vlan left promiscuous mode [ 827.042054][ T32] device veth0_vlan left promiscuous mode [ 830.737212][ T22] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 831.174776][ T32] team0 (unregistering): Port device team_slave_1 removed [ 831.235600][ T32] team0 (unregistering): Port device team_slave_0 removed [ 831.286649][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 831.360239][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 831.621436][ T3682] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 831.907984][ T3682] usb 3-1: Using ep0 maxpacket: 32 [ 832.037871][ T32] bond0 (unregistering): Released all slaves [ 832.044536][ T3682] usb 3-1: config 0 has no interfaces? [ 832.201427][ T3682] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 832.219603][ T3682] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.228535][ T3682] usb 3-1: Product: syz [ 832.241626][ T3682] usb 3-1: Manufacturer: syz [ 832.246250][ T3682] usb 3-1: SerialNumber: syz [ 832.299849][ T3682] usb 3-1: config 0 descriptor?? [ 832.563655][ T3682] usb 3-1: USB disconnect, device number 40 [ 833.992104][ T32] team0 (unregistering): Port device team_slave_1 removed [ 834.199970][ T32] team0 (unregistering): Port device team_slave_0 removed [ 834.344951][ T32] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.545593][ T32] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 836.001084][ T22] usb 4-1: device descriptor read/64, error -110 [ 836.154753][ T9923] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1147'. [ 836.184389][ T32] bond0 (unregistering): Released all slaves [ 836.271736][ T22] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 836.436347][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 836.446483][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 836.457544][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 836.467553][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 836.471692][ T22] usb 4-1: device descriptor read/64, error -32 [ 836.487341][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 836.514902][ T9619] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.528477][ T9619] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.537771][ T9619] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.547191][ T9619] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 836.576414][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 836.587645][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 836.609850][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 836.615775][ T22] usb usb4-port1: attempt power cycle [ 836.627807][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 836.719815][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 836.743196][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 836.772592][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 836.785053][ T26] audit: type=1326 audit(1860933112.501:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 836.814525][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 836.883055][ T26] audit: type=1326 audit(1860933112.521:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 836.913198][ T9621] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 836.966095][ T9621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 836.974975][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 836.985023][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 836.993321][ T26] audit: type=1326 audit(1860933112.521:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 837.024147][ T9930] loop2: detected capacity change from 0 to 1024 [ 837.111960][ T26] audit: type=1326 audit(1860933112.521:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 837.141754][ T26] audit: type=1326 audit(1860933112.521:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 837.165785][ T3718] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 837.181241][ T3718] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 837.222895][ T26] audit: type=1326 audit(1860933112.521:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 837.738349][ T26] audit: type=1326 audit(1860933112.521:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 837.971433][ T3861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 838.006122][ T3861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 838.024089][ T3861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 838.044278][ T26] audit: type=1326 audit(1860933112.521:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 838.121595][ T9943] binder: BINDER_SET_CONTEXT_MGR already set [ 838.128327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 838.138452][ T26] audit: type=1326 audit(1860933112.521:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 838.148054][ T9943] binder: 9941:9943 ioctl 4018620d 20000040 returned -16 [ 838.172870][ T9946] hfsplus: xattr searching failed [ 838.187418][ T9930] hfsplus: catalog searching failed [ 838.204899][ T26] audit: type=1326 audit(1860933112.531:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9927 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x7ffc0000 [ 838.382979][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 838.412183][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 838.430331][ T9621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 838.450605][ T4571] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 838.461948][ T3881] hfsplus: b-tree write err: -5, ino 3 [ 838.622185][ T9954] ISOFS: Unable to identify CD-ROM format. [ 838.788906][ T5185] hfsplus: node 4:3 still has 1 user(s)! [ 838.821240][ T4571] usb 4-1: Using ep0 maxpacket: 8 [ 838.954056][ T4571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.073061][ T4571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.208301][ T4571] usb 4-1: New USB device found, idVendor=054c, idProduct=042f, bcdDevice= 0.00 [ 839.353540][ T4571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.606104][ T4571] usb 4-1: config 0 descriptor?? [ 839.826544][ T9961] loop0: detected capacity change from 0 to 256 [ 840.643661][ T9924] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 840.659148][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1154'. [ 840.663405][ T4571] sony 0003:054C:042F.0008: unknown main item tag 0x0 [ 840.698075][ T4571] sony 0003:054C:042F.0008: unknown main item tag 0x0 [ 840.869557][ T4571] sony 0003:054C:042F.0008: unknown main item tag 0x0 [ 840.877490][ T4571] sony 0003:054C:042F.0008: unknown main item tag 0x0 [ 840.923938][ T4571] sony 0003:054C:042F.0008: hidraw0: USB HID v0.00 Device [HID 054c:042f] on usb-dummy_hcd.3-1/input0 [ 840.940967][ T4571] sony 0003:054C:042F.0008: failed to claim input [ 841.195277][ T4571] usb 4-1: USB disconnect, device number 38 [ 841.752546][ T22] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 841.905088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 841.932079][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 841.987236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 842.001514][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 842.003381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 842.029516][ T9621] device veth0_vlan entered promiscuous mode [ 842.046802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 842.054889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 842.075049][ T9621] device veth1_vlan entered promiscuous mode [ 842.104210][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 842.120506][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 842.131627][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.149874][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 842.150891][ T22] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.165002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 842.181636][ T9621] device veth0_macvtap entered promiscuous mode [ 842.191239][ T22] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 842.199551][ T9621] device veth1_macvtap entered promiscuous mode [ 842.210722][ T22] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 842.230549][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.230891][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.247501][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.260957][ T3683] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 842.269643][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.276195][ T22] usb 1-1: config 0 descriptor?? [ 842.287312][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.310952][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.357262][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.391036][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 842.403156][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.415321][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 842.500990][ T3683] usb 3-1: Using ep0 maxpacket: 32 [ 842.517211][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.529447][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.552177][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.562891][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.574499][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.585463][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.597029][ T9621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 842.607612][ T9621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 842.619704][ T9621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 842.628156][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 842.636393][ T3683] usb 3-1: config 0 has no interfaces? [ 842.643759][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 842.681658][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 842.718646][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 842.742254][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 842.751389][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 842.765107][ T22] microsoft 0003:045E:07DA.0009: No inputs registered, leaving [ 842.783096][ T9621] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.801756][ T9621] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.804099][ T22] microsoft 0003:045E:07DA.0009: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 842.822788][ T3683] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 842.826082][ T9621] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.840994][ T3683] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.859676][ T3683] usb 3-1: Product: syz [ 842.863942][ T22] microsoft 0003:045E:07DA.0009: no inputs found [ 842.872087][ T9621] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 842.872929][ T3683] usb 3-1: Manufacturer: syz [ 842.890670][ T22] microsoft 0003:045E:07DA.0009: could not initialize ff, continuing anyway [ 842.907995][ T3683] usb 3-1: SerialNumber: syz [ 842.936897][ T3683] usb 3-1: config 0 descriptor?? [ 843.078208][ T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.106952][ T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.133134][ T22] usb 1-1: USB disconnect, device number 38 [ 843.139919][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 843.178303][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 843.179086][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 843.225459][ T3683] usb 3-1: USB disconnect, device number 41 [ 843.279637][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 844.426692][T10006] loop4: detected capacity change from 0 to 256 [ 845.217168][T10002] vcan0 speed is unknown, defaulting to 1000 [ 846.780145][T10019] loop4: detected capacity change from 0 to 1024 [ 846.816333][T10019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 847.435350][T10028] 9pnet_fd: Insufficient options for proto=fd [ 847.889035][ T9621] EXT4-fs (loop4): unmounting filesystem. [ 850.657031][T10045] loop4: detected capacity change from 0 to 256 [ 850.727207][T10045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 851.071352][ T4571] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 851.651126][ T4571] usb 5-1: Using ep0 maxpacket: 16 [ 851.771137][ T4571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 851.787430][ T4571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 851.799108][ T4571] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 851.812237][ T4571] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 851.828182][ T4571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.853400][ T4571] usb 5-1: config 0 descriptor?? [ 852.151215][T10060] loop3: detected capacity change from 0 to 256 [ 852.413710][T10060] FAT-fs (loop3): Directory bread(block 64) failed [ 852.475716][ T4571] microsoft 0003:045E:07DA.000A: No inputs registered, leaving [ 852.552196][T10060] FAT-fs (loop3): Directory bread(block 65) failed [ 852.623883][ T4571] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 852.674171][T10060] FAT-fs (loop3): Directory bread(block 66) failed [ 852.710141][T10060] FAT-fs (loop3): Directory bread(block 67) failed [ 852.720017][ T4571] microsoft 0003:045E:07DA.000A: no inputs found [ 852.754183][T10060] FAT-fs (loop3): Directory bread(block 68) failed [ 852.763743][ T4571] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway [ 852.801903][T10060] FAT-fs (loop3): Directory bread(block 69) failed [ 852.810107][T10060] FAT-fs (loop3): Directory bread(block 70) failed [ 852.827822][T10060] FAT-fs (loop3): Directory bread(block 71) failed [ 852.846277][T10060] FAT-fs (loop3): Directory bread(block 72) failed [ 852.930697][T10071] kvm [10068]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1f800000095, nop [ 852.962023][T10060] FAT-fs (loop3): Directory bread(block 73) failed [ 852.994362][T10071] kvm [10068]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2400000009b, nop [ 853.027715][ T4571] usb 5-1: USB disconnect, device number 33 [ 854.797739][T10086] loop0: detected capacity change from 0 to 512 [ 855.104406][T10086] EXT4-fs error (device loop0): __ext4_iget:5055: inode #14: block 1886221359: comm syz.0.1180: invalid block [ 855.357531][T10086] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1180: couldn't read orphan inode 14 (err -117) [ 855.417295][T10086] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 855.427481][T10086] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff) [ 855.614951][T10097] loop3: detected capacity change from 0 to 1024 [ 855.623871][T10097] EXT4-fs: Ignoring removed orlov option [ 855.701610][T10097] EXT4-fs (loop3): Test dummy encryption mode enabled [ 855.709345][T10097] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 855.720977][T10097] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 855.737783][T10097] EXT4-fs (loop3): invalid journal inode [ 855.743967][T10097] EXT4-fs (loop3): can't get journal size [ 855.958478][T10097] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 855.969143][T10086] __quota_error: 63 callbacks suppressed [ 855.969158][T10086] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 855.988492][T10086] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 856.531634][T10102] loop2: detected capacity change from 0 to 256 [ 856.541406][T10102] exfat: Deprecated parameter 'namecase' [ 856.547195][T10102] exfat: Deprecated parameter 'namecase' [ 856.570037][T10102] exFAT-fs (loop2): Invalid exboot-signature(sector = 7): 0xaa000000 [ 856.582894][T10102] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xdc19abad) [ 856.593591][T10102] exFAT-fs (loop2): invalid boot region [ 856.599184][T10102] exFAT-fs (loop2): failed to recognize exfat type [ 856.683748][T10100] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 856.721844][T10086] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1180: Failed to acquire dquot type 0 [ 856.734119][T10100] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 856.754751][T10100] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1180: Failed to acquire dquot type 0 [ 856.788383][ T8853] EXT4-fs (loop3): unmounting filesystem. [ 856.807592][ T9924] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 857.031612][ T9619] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 857.056173][T10116] loop3: detected capacity change from 0 to 512 [ 857.063324][T10116] EXT4-fs (loop3): unable to read superblock [ 857.091277][ T9619] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 857.141494][ T9619] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz-executor: Failed to acquire dquot type 0 [ 859.101303][ T9619] EXT4-fs (loop0): unmounting filesystem. [ 859.669109][ T3846] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.067530][ T3846] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.398816][T10142] loop2: detected capacity change from 0 to 256 [ 860.687653][T10140] kvm [10139]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x1f800000095, nop [ 860.711991][T10140] kvm [10139]: vcpu0, guest rIP: 0x1be vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x2400000009b, nop [ 860.867666][ T3846] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.939382][T10142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 861.031500][ T3652] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.051770][ T3652] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.060295][ T3652] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.070709][ T3640] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.079152][ T3640] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 861.088890][ T3652] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.118101][ T4571] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 861.174725][T10146] vcan0 speed is unknown, defaulting to 1000 [ 861.381288][ T4571] usb 3-1: Using ep0 maxpacket: 16 [ 861.492702][ T3846] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.503592][ T4571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.517212][ T4571] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.527952][ T4571] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 861.541199][ T4571] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 861.550249][ T4571] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.576471][ T4571] usb 3-1: config 0 descriptor?? [ 862.643460][ T4571] microsoft 0003:045E:07DA.000B: No inputs registered, leaving [ 862.684714][ T4571] microsoft 0003:045E:07DA.000B: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 862.707895][T10146] chnl_net:caif_netlink_parms(): no params data found [ 862.735233][ T4571] microsoft 0003:045E:07DA.000B: no inputs found [ 862.768375][ T4571] microsoft 0003:045E:07DA.000B: could not initialize ff, continuing anyway [ 863.490716][ T48] Bluetooth: hci3: command tx timeout [ 863.781935][ T6532] usb 3-1: USB disconnect, device number 42 [ 864.263652][T10146] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.276386][T10146] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.294076][T10146] device bridge_slave_0 entered promiscuous mode [ 864.323581][T10146] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.387550][T10146] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.522176][T10146] device bridge_slave_1 entered promiscuous mode [ 864.975368][T10194] loop2: detected capacity change from 0 to 512 [ 865.033420][T10146] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.097026][T10146] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.160232][T10194] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 865.183984][T10194] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038 (0x7fffffff) [ 865.300516][T10146] team0: Port device team_slave_0 added [ 865.318451][T10146] team0: Port device team_slave_1 added [ 865.435584][T10146] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.467222][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.494508][T10146] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 865.524498][T10146] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 865.533949][T10146] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 865.570517][T10209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1197'. [ 865.590556][ T48] Bluetooth: hci3: command tx timeout [ 865.828860][T10209] EXT4-fs error (device loop2): ext4_add_entry:2484: inode #2: comm syz.2.1197: Directory hole found for htree leaf block 0 [ 865.893185][T10146] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 865.954678][ T14] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 866.056464][T10146] device hsr_slave_0 entered promiscuous mode [ 866.070098][T10146] device hsr_slave_1 entered promiscuous mode [ 866.080100][T10146] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 866.094978][T10146] Cannot create hsr debugfs directory [ 866.201074][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 866.324408][ T14] usb 5-1: config 0 has no interfaces? [ 866.481869][ T14] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 866.501347][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.516926][ T14] usb 5-1: Product: syz [ 866.524908][ T14] usb 5-1: Manufacturer: syz [ 866.529546][ T14] usb 5-1: SerialNumber: syz [ 866.543418][ T14] usb 5-1: config 0 descriptor?? [ 866.731528][ T3846] device hsr_slave_0 left promiscuous mode [ 866.750323][ T3846] device hsr_slave_1 left promiscuous mode [ 866.765024][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 866.786726][ T14] usb 5-1: USB disconnect, device number 34 [ 866.793283][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 866.843925][ T3846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 866.861179][ T3846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 866.869469][ T3846] device bridge_slave_1 left promiscuous mode [ 866.881365][ T3846] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.890290][ T3846] device bridge_slave_0 left promiscuous mode [ 866.896901][ T3846] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.937459][ T3846] device veth1_macvtap left promiscuous mode [ 866.944036][ T3846] device veth0_macvtap left promiscuous mode [ 866.950151][ T3846] device veth1_vlan left promiscuous mode [ 866.971008][ T3846] device veth0_vlan left promiscuous mode [ 867.357865][ T48] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 867.367831][ T48] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 867.392392][ T48] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 867.405364][ T48] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 867.413122][ T48] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 867.435745][ T48] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 867.584389][T10245] loop4: detected capacity change from 0 to 2048 [ 867.617925][T10245] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 867.631404][ T48] Bluetooth: hci3: command tx timeout [ 867.907801][T10245] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #16: comm syz.4.1202: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 255(4), depth 0(0) [ 868.068023][ T9621] EXT4-fs (loop4): unmounting filesystem. [ 868.079480][ T5185] EXT4-fs (loop2): unmounting filesystem. [ 868.137790][ T3846] team0 (unregistering): Port device team_slave_1 removed [ 868.234899][ T3846] team0 (unregistering): Port device team_slave_0 removed [ 868.330661][ T3846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 868.412838][ T3846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 868.601362][T10258] ip6t_rpfilter: unknown options [ 869.471836][ T48] Bluetooth: hci6: command tx timeout [ 869.632937][ T3846] bond0 (unregistering): Released all slaves [ 869.711546][ T48] Bluetooth: hci3: command tx timeout [ 869.891718][T10240] vcan0 speed is unknown, defaulting to 1000 [ 870.146840][T10146] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 870.197186][T10146] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 870.249113][T10146] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 870.385870][T10263] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1206'. [ 870.582402][T10146] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 871.593200][T10146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.612371][ T48] Bluetooth: hci6: command tx timeout [ 871.631650][ T34] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 871.687774][T10146] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.706788][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 871.717983][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 871.748668][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 871.775768][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 871.806731][ T3846] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.813938][ T3846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 871.840421][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 871.860362][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 871.890286][ T3846] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.897490][ T3846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.918301][T10240] chnl_net:caif_netlink_parms(): no params data found [ 871.951572][ T34] usb 3-1: Using ep0 maxpacket: 32 [ 872.047828][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 872.059376][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 872.088852][ T3846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 872.098061][ T34] usb 3-1: config 0 has no interfaces? [ 872.159439][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 872.197575][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 872.206443][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 872.228058][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 872.247328][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 872.287963][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 872.289264][ T34] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 872.302009][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 872.323958][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.332406][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 872.342446][ T34] usb 3-1: Product: syz [ 872.349023][ T34] usb 3-1: Manufacturer: syz [ 872.370937][ T34] usb 3-1: SerialNumber: syz [ 872.374682][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 872.392163][ T34] usb 3-1: config 0 descriptor?? [ 872.396332][T10146] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 872.540946][ T22] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 872.550717][T10240] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.568608][T10240] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.592003][T10240] device bridge_slave_0 entered promiscuous mode [ 872.602841][T10240] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.620219][T10240] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.632710][T10240] device bridge_slave_1 entered promiscuous mode [ 872.646491][ T3838] usb 3-1: USB disconnect, device number 43 [ 872.705431][T10240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.738034][T10240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.797285][T10240] team0: Port device team_slave_0 added [ 872.811549][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 872.830777][T10240] team0: Port device team_slave_1 added [ 872.886499][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 872.894489][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 872.907432][T10146] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.936249][T10240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.951911][ T22] usb 5-1: config 0 has no interfaces? [ 872.961010][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 873.001130][T10240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.039467][T10240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 876.458649][ T48] Bluetooth: hci6: command tx timeout [ 876.469582][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.543494][T10240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 876.591893][ T22] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 876.602493][T10317] misc userio: Can't change port type on an already running userio instance [ 876.622760][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.660093][ T22] usb 5-1: Product: syz [ 876.676704][ T22] usb 5-1: Manufacturer: syz [ 876.690353][T10240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 876.701349][ T22] usb 5-1: SerialNumber: syz [ 876.712081][ T22] usb 5-1: config 0 descriptor?? [ 876.751597][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 876.794527][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 876.930778][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 876.973493][ T3682] usb 5-1: USB disconnect, device number 35 [ 877.001872][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.032944][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.069895][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.139130][T10146] device veth0_vlan entered promiscuous mode [ 877.168975][T10240] device hsr_slave_0 entered promiscuous mode [ 877.176812][T10240] device hsr_slave_1 entered promiscuous mode [ 877.183980][T10240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 877.201202][T10240] Cannot create hsr debugfs directory [ 877.661678][T10146] device veth1_vlan entered promiscuous mode [ 877.772508][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.812965][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.839999][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.880407][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.953694][T10146] device veth0_macvtap entered promiscuous mode [ 881.619494][ T48] Bluetooth: hci6: command tx timeout [ 882.052963][T10240] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.151867][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 882.163590][T10146] device veth1_macvtap entered promiscuous mode [ 882.172657][T10360] loop2: detected capacity change from 0 to 1764 [ 882.523179][T10240] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.242843][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.294918][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.349526][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.373423][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.383627][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.403213][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.439310][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 883.452342][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.477891][T10146] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.510213][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.556757][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.580539][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.611027][T10374] loop4: detected capacity change from 0 to 32768 [ 883.622794][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.633698][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.644656][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.655366][T10146] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 883.666508][T10146] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 883.678604][T10146] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.729535][T10374] XFS (loop4): Mounting V5 Filesystem [ 883.742521][T10240] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.765764][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 883.805833][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 883.812543][ T22] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 883.828495][T10374] XFS (loop4): Ending clean mount [ 883.837831][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 883.848834][ T3718] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 883.952647][T10146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.982486][T10146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.017412][T10146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.030180][T10146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.084963][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 884.784786][T10240] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.862512][ T9621] XFS (loop4): Unmounting Filesystem [ 885.049981][ T6358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.060809][ T6358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.073505][ T22] usb 3-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 885.090957][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.111041][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 885.116794][ T22] usb 3-1: Product: syz [ 885.125625][ T3867] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.131086][ T22] usb 3-1: Manufacturer: syz [ 885.139274][ T22] usb 3-1: SerialNumber: syz [ 885.152505][ T3867] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.153127][ T22] usb 3-1: config 0 descriptor?? [ 885.195190][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 885.236837][ T22] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 885.299451][T10240] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 885.328257][T10240] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 885.343561][T10240] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 885.352817][T10240] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 885.447762][T10409] loop0: detected capacity change from 0 to 16 [ 885.572490][T10409] erofs: (device loop0): mounted with root inode @ nid 36. [ 886.144534][T10415] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1220'. [ 886.194170][T10411] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1220'. [ 886.235462][T10240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.249892][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 886.259402][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 886.277414][T10240] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.290451][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 886.300562][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 886.309404][ T5164] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.316520][ T5164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.326341][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 886.337722][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 886.347485][ T22] pwc: Failed to set LED on/off time (-71) [ 886.349033][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 886.372632][ T22] pwc: send_video_command error -71 [ 886.373911][ T6358] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.378759][ T22] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 886.384990][ T6358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.396252][ T22] Philips webcam: probe of 3-1:0.0 failed with error -71 [ 886.407377][ T9009] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 886.410479][ T22] usb 3-1: USB disconnect, device number 45 [ 886.437516][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 886.457852][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 886.490609][T10240] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 886.510011][T10240] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 886.532945][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 886.550067][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 886.559056][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 886.578741][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 886.589633][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 886.599081][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 886.608352][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 886.617683][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 886.628462][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 886.639255][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 886.661039][ T9009] usb 5-1: Using ep0 maxpacket: 32 [ 886.781229][ T9009] usb 5-1: config 0 has no interfaces? [ 886.892699][T10427] misc userio: Can't change port type on an already running userio instance [ 886.961192][ T9009] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 887.176526][ T9009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.225225][ T9009] usb 5-1: Product: syz [ 887.241946][ T9009] usb 5-1: Manufacturer: syz [ 887.246730][ T9009] usb 5-1: SerialNumber: syz [ 887.309865][ T9009] usb 5-1: config 0 descriptor?? [ 887.716388][ T3838] usb 5-1: USB disconnect, device number 36 [ 887.763780][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 887.783105][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 887.832740][T10240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 887.851113][ T7] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 887.893845][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 887.907922][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 887.958176][T10240] device veth0_vlan entered promiscuous mode [ 888.091368][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 888.216464][T10240] device veth1_vlan entered promiscuous mode [ 888.224612][ T7] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 888.248990][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 888.322381][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 888.418602][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 888.557005][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 888.593097][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 888.602725][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 888.631346][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 888.639032][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 888.670197][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 888.678198][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.689067][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 888.728077][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 888.808711][T10240] device veth0_macvtap entered promiscuous mode [ 888.834758][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 888.849000][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 888.871525][T10240] device veth1_macvtap entered promiscuous mode [ 888.902115][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 888.939840][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.959151][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 888.981048][ T7] usb 3-1: GET_CAPABILITIES returned 0 [ 888.986568][ T7] usbtmc 3-1:16.0: can't read capabilities [ 889.010519][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.050269][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.064893][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.080702][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.101700][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.119647][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.140060][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.160223][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.175510][T10240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.187546][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 889.197549][ T6359] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 889.208759][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.212779][T10432] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 889.228327][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.235391][ T6532] usb 3-1: USB disconnect, device number 46 [ 889.239478][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.255850][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.271769][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.286397][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.297568][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.308050][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.319385][T10240] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.330313][T10240] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.343009][T10240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.351252][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 889.361849][ T22] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 889.370137][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 889.384386][T10240] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.395421][T10240] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.404594][T10240] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.413876][T10240] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.496131][ T6359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.525054][ T6359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.534660][ T3820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 889.549135][ T3820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 889.567244][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 889.575920][ T5164] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 889.620892][ T22] usb 5-1: Using ep0 maxpacket: 32 [ 890.194264][ T22] usb 5-1: config 0 has no interfaces? [ 890.671816][ T22] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 890.725555][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 890.886165][ T22] usb 5-1: Product: syz [ 890.890403][ T22] usb 5-1: Manufacturer: syz [ 890.905295][ T22] usb 5-1: SerialNumber: syz [ 891.148603][T10464] xt_ecn: cannot match TCP bits for non-tcp packets [ 891.528445][ T22] usb 5-1: config 0 descriptor?? [ 891.882944][ T3680] usb 5-1: USB disconnect, device number 37 [ 892.777457][T10485] loop4: detected capacity change from 0 to 8 [ 892.849017][T10483] loop0: detected capacity change from 0 to 1024 [ 892.856601][T10485] unable to read fragment index table [ 893.132585][T10377] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 893.624473][ T4571] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 893.728933][T10483] loop0: detected capacity change from 0 to 2048 [ 893.901190][ T4571] usb 4-1: Using ep0 maxpacket: 32 [ 894.040782][T10490] kvm: emulating exchange as write [ 894.293459][ T26] audit: type=1326 audit(1860933170.011:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10495 comm="syz.1.1240" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd8b8d7def9 code=0x0 [ 894.331394][ T4571] usb 4-1: config 0 has no interfaces? [ 894.491486][ T4571] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 894.500567][ T4571] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.591429][ T4571] usb 4-1: Product: syz [ 894.595782][ T4571] usb 4-1: Manufacturer: syz [ 894.600403][ T4571] usb 4-1: SerialNumber: syz [ 894.612892][ T4571] usb 4-1: config 0 descriptor?? [ 896.381315][ T14] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 896.691540][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 896.811461][ T14] usb 3-1: config 0 has no interfaces? [ 896.888908][T10521] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.897757][T10521] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.907949][T10521] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.911084][ T4571] usb 4-1: can't set config #0, error -71 [ 896.916886][T10521] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.932234][T10521] device geneve2 entered promiscuous mode [ 897.086834][ T4571] usb 4-1: USB disconnect, device number 39 [ 897.107915][T10521] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.130758][T10521] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.261565][ T14] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 897.559086][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.820251][T10521] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.847695][T10529] loop0: detected capacity change from 0 to 512 [ 898.857081][T10521] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 898.937924][T10529] EXT4-fs (loop0): 1 orphan inode deleted [ 898.957217][ T14] usb 3-1: Product: syz [ 898.980101][ T6358] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 899.002211][T10529] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 899.017685][ T14] usb 3-1: config 0 descriptor?? [ 899.023387][T10529] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038 (0x7fffffff) [ 899.047856][ T6358] EXT4-fs error (device loop0): ext4_release_dquot:6823: comm kworker/u4:19: Failed to release dquot type 1 [ 899.062096][ T14] usb 3-1: can't set config #0, error -71 [ 899.072819][ T14] usb 3-1: USB disconnect, device number 47 [ 899.139280][T10534] loop4: detected capacity change from 0 to 1024 [ 899.157364][T10534] EXT4-fs: Ignoring removed orlov option [ 899.208747][T10534] EXT4-fs (loop4): Test dummy encryption mode enabled [ 899.314219][T10534] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 900.744651][T10546] input: syz1 as /devices/virtual/input/input24 [ 901.436996][ T9621] EXT4-fs (loop4): unmounting filesystem. [ 901.785058][T10548] 9pnet_fd: p9_fd_create_unix (10548): problem connecting socket: ./file0: -2 [ 901.831417][ T6532] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 902.071962][T10562] netlink: 'syz.4.1253': attribute type 27 has an invalid length. [ 902.081247][ T6532] usb 3-1: Using ep0 maxpacket: 32 [ 902.145803][T10146] EXT4-fs (loop0): unmounting filesystem. [ 902.201615][ T6532] usb 3-1: config 0 has no interfaces? [ 904.591068][ T6532] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 905.213819][ T6532] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.224154][ T6532] usb 3-1: Product: syz [ 905.228437][ T6532] usb 3-1: Manufacturer: syz [ 905.268089][ T6532] usb 3-1: config 0 descriptor?? [ 905.291406][ T6532] usb 3-1: can't set config #0, error -71 [ 905.317517][ T6532] usb 3-1: USB disconnect, device number 48 [ 909.177355][T10562] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.187333][T10562] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.325967][T10598] loop0: detected capacity change from 0 to 256 [ 909.692954][T10604] loop3: detected capacity change from 0 to 64 [ 909.731717][ T3838] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 909.867635][T10562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 909.902486][T10562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.637038][ T3838] usb 3-1: Using ep0 maxpacket: 32 [ 910.781396][ T3838] usb 3-1: config 0 has no interfaces? [ 910.958995][ T3838] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 910.988145][ T3838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.996725][ T3838] usb 3-1: Product: syz [ 911.018318][ T3838] usb 3-1: Manufacturer: syz [ 911.023322][T10562] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.029541][ T3838] usb 3-1: SerialNumber: syz [ 911.032799][T10562] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.048277][T10562] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.057696][T10562] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 911.058300][ T3838] usb 3-1: config 0 descriptor?? [ 911.599033][T10592] vcan0 speed is unknown, defaulting to 1000 [ 911.607351][ T3838] usb 3-1: USB disconnect, device number 49 [ 912.503184][T10614] loop4: detected capacity change from 0 to 128 [ 912.605960][T10614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 912.636173][T10614] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038 (0x7fffffff) [ 913.707593][T10623] loop0: detected capacity change from 0 to 2048 [ 915.028487][T10623] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 915.038288][T10623] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 915.191537][ T9621] EXT4-fs (loop4): unmounting filesystem. [ 915.345829][T10146] EXT4-fs (loop0): unmounting filesystem. [ 915.355816][T10630] loop2: detected capacity change from 0 to 256 [ 915.424601][ T26] audit: type=1800 audit(1860933191.141:222): pid=10630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1267" name="bus" dev="loop2" ino=1048854 res=0 errno=0 [ 916.302406][T10636] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1269'. [ 916.445182][T10642] loop4: detected capacity change from 0 to 512 [ 918.031828][ T48] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 918.044650][ T48] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 918.053516][ T48] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 918.065715][ T48] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 918.074268][ T48] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 918.082597][ T48] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 918.159271][T10664] loop2: detected capacity change from 0 to 512 [ 918.197119][T10658] vcan0 speed is unknown, defaulting to 1000 [ 918.366165][T10664] EXT4-fs (loop2): 1 orphan inode deleted [ 918.400968][T10664] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 919.121673][T10664] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038 (0x7fffffff) [ 919.131721][ T2479] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 919.142162][ T2479] EXT4-fs error (device loop2): ext4_release_dquot:6823: comm kworker/u4:5: Failed to release dquot type 1 [ 919.991508][ T34] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 920.293962][ T48] Bluetooth: hci7: command tx timeout [ 920.371096][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 920.582090][ T34] usb 5-1: config 0 has no interfaces? [ 920.771385][ T34] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 921.384677][ T34] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 921.421322][ T34] usb 5-1: Product: syz [ 921.434949][ T34] usb 5-1: Manufacturer: syz [ 921.457242][ T34] usb 5-1: SerialNumber: syz [ 921.500822][ T34] usb 5-1: config 0 descriptor?? [ 921.570290][ T5185] EXT4-fs (loop2): unmounting filesystem. [ 921.761922][T10658] chnl_net:caif_netlink_parms(): no params data found [ 921.783568][ T6532] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 921.802872][ T3680] usb 5-1: USB disconnect, device number 38 [ 922.013276][T10658] bridge0: port 1(bridge_slave_0) entered blocking state [ 922.045410][T10658] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.082324][T10658] device bridge_slave_0 entered promiscuous mode [ 922.117662][T10658] bridge0: port 2(bridge_slave_1) entered blocking state [ 922.147064][T10658] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.174304][T10658] device bridge_slave_1 entered promiscuous mode [ 922.275607][T10658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 922.296355][T10658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 922.337525][T10658] team0: Port device team_slave_0 added [ 922.349143][T10658] team0: Port device team_slave_1 added [ 922.354907][ T3640] Bluetooth: hci7: command tx timeout [ 922.372244][ T6532] usb 4-1: Using ep0 maxpacket: 32 [ 922.654643][T10658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 922.662369][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 922.688855][T10658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 922.689025][ T6532] usb 4-1: config 0 has no interfaces? [ 925.180416][T10658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 925.187781][T10658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 925.234973][T10658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 925.272818][ T48] Bluetooth: hci5: command 0x0406 tx timeout [ 925.273299][ T3652] Bluetooth: hci7: command tx timeout [ 925.331129][ T6532] usb 4-1: string descriptor 0 read error: -71 [ 925.337415][ T6532] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 925.370957][ T6532] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.422857][ T6532] usb 4-1: config 0 descriptor?? [ 925.441309][ T6532] usb 4-1: can't set config #0, error -71 [ 925.457417][ T6532] usb 4-1: USB disconnect, device number 40 [ 927.317670][ T48] Bluetooth: hci7: command tx timeout [ 929.169544][T10739] loop2: detected capacity change from 0 to 256 [ 929.265659][T10658] device hsr_slave_0 entered promiscuous mode [ 929.300596][T10658] device hsr_slave_1 entered promiscuous mode [ 929.325977][T10658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 929.326550][T10658] Cannot create hsr debugfs directory [ 929.709054][T10748] loop0: detected capacity change from 0 to 1764 [ 929.801040][ T34] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 930.611875][ T34] usb 4-1: Using ep0 maxpacket: 32 [ 930.801936][ T34] usb 4-1: config 0 has no interfaces? [ 931.022114][ T34] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 931.059047][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.191058][ T34] usb 4-1: Product: syz [ 931.195460][ T34] usb 4-1: Manufacturer: syz [ 931.229941][ T34] usb 4-1: SerialNumber: syz [ 931.415036][ T34] usb 4-1: config 0 descriptor?? [ 931.677796][ T3838] usb 4-1: USB disconnect, device number 41 [ 932.035302][T10626] tipc: Disabling bearer [ 932.043099][T10626] tipc: Left network mode [ 935.291241][ T3680] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 935.519170][T10658] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 935.545070][T10658] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 935.562993][T10658] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 935.563604][ T3680] usb 5-1: Using ep0 maxpacket: 32 [ 935.599394][T10658] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 935.715624][ T3680] usb 5-1: config 0 has no interfaces? [ 935.881796][T10626] IPVS: stopping backup sync thread 3930 ... [ 935.892077][ T3680] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 935.911320][ T3680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.930600][ T3680] usb 5-1: Product: syz [ 935.937547][ T3680] usb 5-1: Manufacturer: syz [ 935.973277][T10658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.998747][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 936.009757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 936.040258][T10658] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.079237][T10803] loop0: detected capacity change from 0 to 512 [ 936.092632][ T3680] usb 5-1: SerialNumber: syz [ 936.099618][ T3680] usb 5-1: config 0 descriptor?? [ 936.118641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 936.143283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 936.458832][T10803] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1297: casefold flag without casefold feature [ 936.831773][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.891323][T10803] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1297: couldn't read orphan inode 15 (err -117) [ 936.903885][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.911025][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.940001][ T3681] usb 5-1: USB disconnect, device number 39 [ 936.941107][T10803] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 937.601422][T10820] loop3: detected capacity change from 0 to 2048 [ 937.818899][T10803] 9pnet_fd: p9_fd_create_unix (10803): problem connecting socket: ./file0: -111 [ 937.891344][T10820] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 937.900940][T10820] ext4 filesystem being mounted at /13/bus supports timestamps until 2038 (0x7fffffff) [ 938.805941][T10240] EXT4-fs (loop3): unmounting filesystem. [ 939.007330][T10626] bond0: (slave wlan1): Releasing backup interface [ 939.092555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 939.109133][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 939.128481][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 939.137427][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.144580][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 939.153047][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 939.161415][T10146] EXT4-fs (loop0): unmounting filesystem. [ 939.168934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 940.056605][T10839] loop3: detected capacity change from 0 to 512 [ 940.173047][T10841] loop4: detected capacity change from 0 to 1024 [ 940.208319][T10841] EXT4-fs: Ignoring removed nobh option [ 940.218766][T10841] EXT4-fs: Ignoring removed orlov option [ 940.282443][T10844] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 925 (only 8 groups) [ 940.368485][T10841] EXT4-fs: Ignoring removed nomblk_io_submit option [ 940.587284][T10658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 940.645793][T10658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 940.819403][T10839] EXT4-fs (loop3): 1 orphan inode deleted [ 940.827883][T10841] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 940.843072][T10839] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 940.852642][ T9] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 940.865003][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 940.892781][T10839] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 940.911279][ T9] EXT4-fs error (device loop3): ext4_release_dquot:6823: comm kworker/u4:0: Failed to release dquot type 1 [ 940.974046][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 941.002542][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 941.023483][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 941.050699][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 941.106849][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 941.180322][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 941.208515][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 941.382143][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 941.390151][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 941.612284][ T4415] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 941.635418][T10626] device hsr_slave_0 left promiscuous mode [ 941.642581][T10626] device hsr_slave_1 left promiscuous mode [ 941.648867][T10626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 941.657356][T10626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.665064][T10626] device bridge_slave_1 left promiscuous mode [ 941.677816][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.692128][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.042720][T10240] EXT4-fs (loop3): unmounting filesystem. [ 943.453179][ T4415] usb 1-1: Using ep0 maxpacket: 32 [ 943.771077][ T4415] usb 1-1: config 0 has no interfaces? [ 943.931288][ T4415] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 943.940369][ T4415] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 943.979021][ T4415] usb 1-1: Product: syz [ 943.987641][ T4415] usb 1-1: Manufacturer: syz [ 943.992711][ T4415] usb 1-1: SerialNumber: syz [ 944.023605][ T4415] usb 1-1: config 0 descriptor?? [ 944.170511][ T4415] usb 1-1: USB disconnect, device number 39 [ 944.966368][T10876] binder: BINDER_SET_CONTEXT_MGR already set [ 944.980198][T10876] binder: 10875:10876 ioctl 4018620d 20000040 returned -16 [ 948.862489][T10626] team0 (unregistering): Port device team_slave_1 removed [ 948.908100][T10626] team0 (unregistering): Port device team_slave_0 removed [ 948.955006][T10626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 948.999701][T10626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.488150][T10626] bond0 (unregistering): Released all slaves [ 949.578539][T10866] vcan0 speed is unknown, defaulting to 1000 [ 949.583828][T10658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.618838][T10658] device veth0_vlan entered promiscuous mode [ 949.631561][T10658] device veth1_vlan entered promiscuous mode [ 949.657076][T10658] device veth0_macvtap entered promiscuous mode [ 949.666929][T10658] device veth1_macvtap entered promiscuous mode [ 949.680476][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 949.691835][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 949.699263][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 949.710734][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 949.719742][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 949.728117][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 949.736890][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 949.745312][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 949.754412][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 949.763224][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 949.776084][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 949.803850][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 949.820344][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 949.828540][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 949.875563][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.891348][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 949.921179][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 949.948900][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.031378][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.037213][T10887] loop3: detected capacity change from 0 to 512 [ 950.057976][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.083409][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.094776][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.114816][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.128670][ T3652] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 950.140188][ T3640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 950.149394][ T3640] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 950.217656][ T3640] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 950.221870][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.229942][ T3640] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 950.248881][ T3640] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 950.249631][T10658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.277534][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.288894][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.314649][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.478950][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.529348][T10887] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.1315: casefold flag without casefold feature [ 950.689827][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.712190][T10887] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1315: couldn't read orphan inode 15 (err -117) [ 950.724950][ T22] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 950.786768][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.809235][T10887] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 950.855560][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.876961][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.907844][T10658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.938205][T10658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.972883][T10658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.994720][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 951.016754][ T22] usb 1-1: Using ep0 maxpacket: 32 [ 951.017880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 951.032912][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 951.046229][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 951.243733][ T22] usb 1-1: config 0 has no interfaces? [ 952.217483][T10658] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.252979][T10658] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.350974][ T3640] Bluetooth: hci0: command tx timeout [ 952.376760][T10658] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.381155][ T22] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 952.389535][T10658] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 952.403542][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.403568][ T22] usb 1-1: Product: syz [ 952.403583][ T22] usb 1-1: Manufacturer: syz [ 952.403599][ T22] usb 1-1: SerialNumber: syz [ 952.424251][ T22] usb 1-1: config 0 descriptor?? [ 952.683060][T10887] 9pnet_fd: p9_fd_create_unix (10887): problem connecting socket: ./file0: -111 [ 952.709628][ T3680] usb 1-1: USB disconnect, device number 40 [ 952.769162][T10892] vcan0 speed is unknown, defaulting to 1000 [ 952.806600][T10240] EXT4-fs (loop3): unmounting filesystem. [ 952.829962][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 952.911706][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.004658][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 953.048813][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.069540][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.244222][T10913] netlink: 280 bytes leftover after parsing attributes in process `syz.2.1318'. [ 953.443071][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 953.716718][T10915] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 954.813601][T10930] Bluetooth: MGMT ver 1.22 [ 954.872954][ T3640] Bluetooth: hci0: command tx timeout [ 955.355278][T10892] chnl_net:caif_netlink_parms(): no params data found [ 957.330923][ T3640] Bluetooth: hci0: command tx timeout [ 957.488740][T10951] loop0: detected capacity change from 0 to 2048 [ 957.583355][T10951] UDF-fs: bad mount option "nov" or missing value [ 957.747430][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.756467][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.663165][T10892] device bridge_slave_0 entered promiscuous mode [ 958.796769][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.815145][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.840365][T10892] device bridge_slave_1 entered promiscuous mode [ 958.898834][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 958.946454][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.050440][T10892] team0: Port device team_slave_0 added [ 959.391038][ T3640] Bluetooth: hci0: command tx timeout [ 959.760630][T10892] team0: Port device team_slave_1 added [ 959.821348][ T4415] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 959.875357][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.885236][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.911853][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.925126][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.933063][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.966176][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 960.044046][T10892] device hsr_slave_0 entered promiscuous mode [ 960.057897][T10892] device hsr_slave_1 entered promiscuous mode [ 960.067588][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 960.084240][ T4415] usb 4-1: Using ep0 maxpacket: 32 [ 960.094846][T10892] Cannot create hsr debugfs directory [ 960.211224][ T4415] usb 4-1: config 0 has no interfaces? [ 960.851065][ T4415] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 960.870252][ T4415] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.892308][ T4415] usb 4-1: Product: syz [ 960.901215][ T4415] usb 4-1: Manufacturer: syz [ 960.907587][ T4415] usb 4-1: SerialNumber: syz [ 960.913526][T10975] loop0: detected capacity change from 0 to 512 [ 960.932053][ T4415] usb 4-1: config 0 descriptor?? [ 960.985812][T10975] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 961.001937][T10975] EXT4-fs (loop0): orphan cleanup on readonly fs [ 961.014460][T10975] Quota error (device loop0): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 961.030603][T10975] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 961.051334][T10975] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 961.069682][T10975] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.1331: iget: immutable or append flags not allowed on symlinks [ 961.085945][T10975] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.1331: couldn't read orphan inode 16 (err -117) [ 961.098956][T10975] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 961.189000][ T4415] usb 4-1: USB disconnect, device number 42 [ 961.907983][T10977] 9pnet_fd: Insufficient options for proto=fd [ 962.131984][T10146] EXT4-fs (loop0): unmounting filesystem. [ 963.565714][T10892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 963.586650][T10892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 963.609959][T10892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 963.802312][T10892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 964.056007][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 964.100026][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 964.118055][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 964.139652][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 964.164925][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 964.186015][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 964.209087][ T3867] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.216266][ T3867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 964.224547][ T154] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 964.259778][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 964.278707][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 964.311652][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 964.328693][ T3867] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.335858][ T3867] bridge0: port 2(bridge_slave_1) entered forwarding state [ 964.354689][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 964.370034][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 964.415774][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 964.440272][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 964.459364][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 964.480051][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 964.502175][ T154] usb 4-1: Using ep0 maxpacket: 32 [ 964.508062][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 964.530637][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 964.554758][T10892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 964.576097][T10892] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 964.590329][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 964.613273][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 964.621658][ T154] usb 4-1: config 0 has no interfaces? [ 964.641469][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 964.781309][ T154] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 964.810698][ T154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.827564][ T154] usb 4-1: Product: syz [ 964.851098][ T154] usb 4-1: Manufacturer: syz [ 964.855850][ T154] usb 4-1: SerialNumber: syz [ 964.890297][ T154] usb 4-1: config 0 descriptor?? [ 965.091625][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 965.101126][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 965.125237][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 965.162643][ T154] usb 4-1: USB disconnect, device number 43 [ 965.708141][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 965.739050][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 965.812608][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 965.842252][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 965.884519][T10892] device veth0_vlan entered promiscuous mode [ 965.892955][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 965.927603][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 965.959069][T10892] device veth1_vlan entered promiscuous mode [ 966.162298][T11005] loop0: detected capacity change from 0 to 512 [ 966.304192][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 966.356577][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 966.380560][T11005] EXT4-fs warning (device loop0): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 966.396528][T11005] EXT4-fs (loop0): mount failed [ 966.423400][T10892] device veth0_macvtap entered promiscuous mode [ 966.433422][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 966.470618][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 966.527295][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 966.587322][T11011] loop1: detected capacity change from 0 to 512 [ 966.644509][T10892] device veth1_macvtap entered promiscuous mode [ 966.725034][T11011] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 966.762747][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.774123][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.785591][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.797302][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.807366][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.807545][T11011] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038 (0x7fffffff) [ 966.819042][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.840245][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.853891][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.863984][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.875386][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.885478][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 966.897193][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 966.908854][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.030640][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 967.101677][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 967.129825][T11021] syz.3.1337[11021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 967.129924][T11021] syz.3.1337[11021] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 967.157295][ T48] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 967.824146][ T3652] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 967.836205][ T3652] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 967.846585][ T3652] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 967.855277][ T3652] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 967.865823][ T3652] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 967.930178][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.148280][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 968.158343][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 968.169073][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.241897][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.252919][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.263512][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.288325][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.348919][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 969.379321][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.406184][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.419878][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 969.437869][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 969.449603][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 969.489021][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 969.522240][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 969.564441][T11029] vcan0 speed is unknown, defaulting to 1000 [ 969.950991][ T48] Bluetooth: hci8: command tx timeout [ 970.393651][T11016] vcan0 speed is unknown, defaulting to 1000 [ 970.398594][T10892] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.430194][T10892] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.486438][T10892] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.509955][T10892] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.531515][T11038] device team_slave_0 entered promiscuous mode [ 970.539383][T11038] device team_slave_1 entered promiscuous mode [ 970.765696][T11042] netlink: 'syz.3.1343': attribute type 10 has an invalid length. [ 970.775666][T10658] EXT4-fs (loop1): unmounting filesystem. [ 970.807394][T11042] device team_slave_0 left promiscuous mode [ 970.847574][T11042] device team_slave_1 left promiscuous mode [ 970.901644][ T6532] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 970.974592][T11042] device team_slave_0 entered promiscuous mode [ 970.980902][T11042] device team_slave_1 entered promiscuous mode [ 970.991559][T11042] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.004942][T11042] bond0: (slave team0): Enslaving as an active interface with an up link [ 971.201318][ T6532] usb 1-1: Using ep0 maxpacket: 32 [ 971.321328][ T6532] usb 1-1: config 0 has no interfaces? [ 972.120918][ T3652] Bluetooth: hci8: command tx timeout [ 972.166265][T10626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.188304][T10626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.216479][T11036] device team_slave_0 left promiscuous mode [ 972.222758][T11036] device team_slave_1 left promiscuous mode [ 972.261719][ T6532] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 972.315026][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 972.331972][ T6532] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.340777][ T6532] usb 1-1: Product: syz [ 972.345410][ T6532] usb 1-1: Manufacturer: syz [ 972.350015][ T6532] usb 1-1: SerialNumber: syz [ 972.356276][ T6532] usb 1-1: config 0 descriptor?? [ 972.388864][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.431644][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.456031][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 973.358824][ T9599] usb 1-1: USB disconnect, device number 41 [ 974.807724][ T3652] Bluetooth: hci8: command tx timeout [ 975.214412][T11016] chnl_net:caif_netlink_parms(): no params data found [ 976.034324][T11074] tipc: Started in network mode [ 976.040601][T11074] tipc: Node identity 401, cluster identity 4711 [ 976.061273][T11074] tipc: Node number set to 1025 [ 976.069109][T11074] tipc: Cannot configure node identity twice [ 976.169749][T11074] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1349'. [ 976.212221][T11086] loop3: detected capacity change from 0 to 2048 [ 976.275953][T11086] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 976.327004][T11086] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 976.340355][T11086] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 976.348897][T11086] UDF-fs: Scanning with blocksize 512 failed [ 976.386289][T11086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 976.619587][T11016] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.628164][T11016] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.637245][T11016] device bridge_slave_0 entered promiscuous mode [ 976.648843][T11016] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.004077][ T48] Bluetooth: hci8: command tx timeout [ 977.010608][ T154] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 977.127471][T11098] xt_NFQUEUE: number of total queues is 0 [ 977.256755][T11016] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.303986][T11016] device bridge_slave_1 entered promiscuous mode [ 977.360943][ T154] usb 1-1: Using ep0 maxpacket: 8 [ 977.382202][T11016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.418626][T11016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.481157][ T154] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 977.511376][ T154] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 977.539823][ T154] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 977.569405][ T154] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 977.589430][ T154] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 977.614021][ T154] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 977.629641][ T154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.679908][T11016] team0: Port device team_slave_0 added [ 977.707600][T11016] team0: Port device team_slave_1 added [ 977.782558][T11016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 978.688581][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 978.716312][T11016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 978.729800][T11016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 978.963201][ T154] usb 1-1: GET_CAPABILITIES returned 0 [ 978.975332][ T154] usbtmc 1-1:16.0: can't read capabilities [ 979.013413][T11016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.185882][T11090] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 979.227519][ T154] usb 1-1: USB disconnect, device number 42 [ 979.694765][T11016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.780430][T11099] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 979.810789][T11099] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 979.823484][T11099] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 979.861602][T11099] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 979.944597][T11099] device geneve2 entered promiscuous mode [ 982.730097][T11115] loop1: detected capacity change from 0 to 736 [ 984.831022][ T3652] Bluetooth: hci3: command 0x0406 tx timeout [ 984.964090][ T6356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.024888][T11016] device hsr_slave_0 entered promiscuous mode [ 985.040799][T11016] device hsr_slave_1 entered promiscuous mode [ 985.088058][T11016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 985.131242][T11016] Cannot create hsr debugfs directory [ 985.216050][ T6356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.248888][T11118] vcan0 speed is unknown, defaulting to 1000 [ 985.321609][ T4415] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 985.337911][T11127] loop1: detected capacity change from 0 to 512 [ 985.425875][T11127] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 985.431241][ T6356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.489214][T11127] exFAT-fs (loop1): unable to read boot sector [ 985.514390][T11127] exFAT-fs (loop1): failed to read boot sector [ 985.542212][T11127] exFAT-fs (loop1): failed to recognize exfat type [ 985.561673][ T4415] usb 5-1: Using ep0 maxpacket: 32 [ 985.587320][ T6356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.682346][ T4415] usb 5-1: config 0 has no interfaces? [ 985.811595][ T6356] tipc: Disabling bearer [ 985.821473][ T6356] tipc: Disabling bearer [ 985.834961][ T6356] tipc: Disabling bearer [ 985.841486][ T4415] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 985.853432][ T4415] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.863229][ T4415] usb 5-1: Product: syz [ 985.867522][ T4415] usb 5-1: Manufacturer: syz [ 985.873860][ T4415] usb 5-1: SerialNumber: syz [ 985.896444][ T4415] usb 5-1: config 0 descriptor?? [ 985.907659][ T6356] tipc: Left network mode [ 986.144506][ T6532] usb 5-1: USB disconnect, device number 40 [ 987.122749][T11145] xt_HMARK: spi-set and port-set can't be combined [ 987.143647][T11145] netlink: 'syz.0.1363': attribute type 2 has an invalid length. [ 987.651631][ T3684] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 987.679746][T11016] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 988.484323][T11016] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 988.519626][T11016] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 988.579762][T11016] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 988.584368][T11176] loop3: detected capacity change from 0 to 1024 [ 988.646821][T11176] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 988.704437][ T3684] usb 1-1: Using ep0 maxpacket: 8 [ 989.171500][ T3684] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 989.183060][ T3684] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 989.205934][ T3684] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 989.226019][ T3684] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 989.240269][ T3684] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 989.253843][ T3684] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 989.263273][ T3684] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.308585][T10240] EXT4-fs (loop3): unmounting filesystem. [ 989.544114][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.585942][T11202] openvswitch: netlink: Flow key attr not present in new flow. [ 989.668776][ T3684] usb 1-1: GET_CAPABILITIES returned 0 [ 989.674764][ T3684] usbtmc 1-1:16.0: can't read capabilities [ 989.991237][T11206] loop3: detected capacity change from 0 to 4096 [ 990.005365][T11200] device bridge_slave_1 left promiscuous mode [ 990.021137][ T3652] Bluetooth: hci6: command 0x0406 tx timeout [ 990.107378][T11157] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 990.155165][T11206] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 990.174111][T11206] EXT4-fs (loop3): unmounting filesystem. [ 990.312649][T11200] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.453558][ T3680] usb 1-1: USB disconnect, device number 43 [ 990.482771][T11016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.554390][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 990.573914][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 990.624768][T11016] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.646988][T11211] loop1: detected capacity change from 0 to 256 [ 990.655347][T11211] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿÿÿÿÿ" or missing value [ 990.707358][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 990.726339][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 990.745953][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.753116][T10626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.782486][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 991.506006][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 992.108996][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 992.178584][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.185780][T10626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 992.227620][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 992.236544][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 992.483954][ T6356] device hsr_slave_0 left promiscuous mode [ 992.535290][ T6356] device hsr_slave_1 left promiscuous mode [ 992.670408][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 992.710386][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.721201][ T154] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 992.768001][ T6356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 992.785849][ T6356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.814470][ T6356] device bridge_slave_1 left promiscuous mode [ 992.834012][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.875008][ T6356] device bridge_slave_0 left promiscuous mode [ 992.891105][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.970992][ T154] usb 4-1: Using ep0 maxpacket: 32 [ 993.709036][ T6356] device veth1_macvtap left promiscuous mode [ 993.715571][ T3652] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 993.715903][ T6356] device veth0_macvtap left promiscuous mode [ 994.208940][ T6356] device veth1_vlan left promiscuous mode [ 994.229637][ T6356] device veth0_vlan left promiscuous mode [ 994.264759][ T154] usb 4-1: config 0 has no interfaces? [ 994.421200][ T154] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 994.443718][ T154] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.471085][ T154] usb 4-1: Product: syz [ 994.481346][ T154] usb 4-1: Manufacturer: syz [ 994.491338][ T154] usb 4-1: SerialNumber: syz [ 994.527773][ T154] usb 4-1: config 0 descriptor?? [ 994.681910][ T6356] infiniband syz1: set down [ 994.844950][T11246] loop0: detected capacity change from 0 to 2048 [ 994.869125][T11246] UDF-fs: bad mount option "dmod=00000000" or missing value [ 995.027629][T11248] loop1: detected capacity change from 0 to 16 [ 995.050789][T11248] erofs: (device loop1): mounted with root inode @ nid 36. [ 995.407569][T11250] loop0: detected capacity change from 0 to 2048 [ 995.419723][ T3652] Bluetooth: hci3: unexpected event for opcode 0x100a [ 995.779425][T11251] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 995.797210][T11251] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -38 in[52, 4044] out[1851] [ 995.808533][T11251] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 995.866609][T11250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 996.370076][T11257] loop1: detected capacity change from 0 to 128 [ 997.811172][ T9599] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 998.080972][ T6356] team0 (unregistering): Port device team_slave_1 removed [ 998.101039][ T9599] usb 1-1: Using ep0 maxpacket: 32 [ 998.113018][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.176398][ T6356] team0 (unregistering): Port device team_slave_0 removed [ 998.231271][ T9599] usb 1-1: config 0 has no interfaces? [ 998.283507][ T6356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.382318][ T6356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 998.412705][ T9599] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 998.421936][ T9599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.430048][ T9599] usb 1-1: Product: syz [ 998.434886][ T9599] usb 1-1: Manufacturer: syz [ 998.439494][ T9599] usb 1-1: SerialNumber: syz [ 998.446370][ T9599] usb 1-1: config 0 descriptor?? [ 999.068676][ T6356] bond0 (unregistering): Released all slaves [ 999.089885][ T6350] smc: removing ib device syz1 [ 999.223821][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 999.266269][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 999.286148][ T4415] usb 4-1: USB disconnect, device number 44 [ 999.291662][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 999.311598][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 999.327633][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 999.355372][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 999.372119][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 999.381422][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 999.392780][ T6358] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 999.480998][ T154] vcan0 speed is unknown, defaulting to 1000 [ 999.482088][T11263] netlink: 'syz.1.1383': attribute type 1 has an invalid length. [ 999.487570][ T3652] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 999.503679][ T3652] Bluetooth: hci3: Injecting HCI hardware error event [ 999.513534][ T48] Bluetooth: hci3: hardware error 0x00 [ 999.582830][T11016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 999.606444][T11254] usb 1-1: USB disconnect, device number 44 [ 999.877084][T11186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 999.901241][T11186] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 999.932521][T11016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1000.024985][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1000.045071][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1000.127901][T11016] device veth0_vlan entered promiscuous mode [ 1000.177041][T11016] device veth1_vlan entered promiscuous mode [ 1000.254654][ T3627] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1000.267076][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1000.313048][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1000.345579][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1000.409071][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1000.439613][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1000.479226][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1000.505665][T11016] device veth0_macvtap entered promiscuous mode [ 1000.536144][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1000.545137][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1000.577496][ T3881] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1000.618685][T11016] device veth1_macvtap entered promiscuous mode [ 1000.684278][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.715419][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.751367][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.790901][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.821148][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.853520][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.890761][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.936647][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1000.973552][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1000.999073][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.025634][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.048093][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.067753][T11016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.094672][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1001.111719][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1001.133545][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.154563][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.174712][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.195410][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.209957][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.230600][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.264953][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.291197][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.309425][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.320511][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.339634][T11016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.350453][T11016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.350794][ T3680] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1001.372806][T11016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.381082][T11186] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1001.389634][T11186] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1001.711120][ T48] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1004.290562][T11016] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.299639][T11016] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.308457][T11016] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.317582][T11016] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.561678][ T6350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.590509][ T6350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1005.658538][ T3867] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1005.667772][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1005.876197][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.366216][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1006.891073][ T3684] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1007.142610][ T3684] usb 1-1: Using ep0 maxpacket: 32 [ 1007.261254][ T3684] usb 1-1: config 0 has no interfaces? [ 1007.459783][ T3684] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 1007.524211][ T3684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.538528][ T3684] usb 1-1: Product: syz [ 1007.538547][ T3684] usb 1-1: Manufacturer: syz [ 1007.538563][ T3684] usb 1-1: SerialNumber: syz [ 1007.772402][ T3684] usb 1-1: config 0 descriptor?? [ 1009.373371][ T3684] usb 1-1: USB disconnect, device number 45 [ 1012.818468][T11347] loop1: detected capacity change from 0 to 512 [ 1013.012438][T11350] loop3: detected capacity change from 0 to 40427 [ 1013.025828][T11347] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1013.034967][T11350] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1013.042917][T11350] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1013.058022][T11347] EXT4-fs (loop1): invalid journal inode [ 1013.081096][T11347] EXT4-fs (loop1): can't get journal size [ 1013.107301][T11350] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1013.141421][T11347] EXT4-fs (loop1): 1 truncate cleaned up [ 1013.147087][T11347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1013.156680][T11350] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1013.163845][T11350] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1015.134251][T11348] syz.3.1401: attempt to access beyond end of device [ 1015.134251][T11348] loop3: rw=2049, sector=77824, nr_sectors = 312 limit=40427 [ 1015.157114][T11350] syz.3.1401: attempt to access beyond end of device [ 1015.157114][T11350] loop3: rw=2049, sector=78136, nr_sectors = 2072 limit=40427 [ 1015.188766][T11350] syz.3.1401: attempt to access beyond end of device [ 1015.188766][T11350] loop3: rw=2049, sector=80208, nr_sectors = 1712 limit=40427 [ 1015.399029][T11350] syz.3.1401: attempt to access beyond end of device [ 1015.399029][T11350] loop3: rw=2049, sector=49152, nr_sectors = 2072 limit=40427 [ 1016.318532][T11350] syz.3.1401: attempt to access beyond end of device [ 1016.318532][T11350] loop3: rw=2049, sector=51224, nr_sectors = 600 limit=40427 [ 1016.335492][ T27] INFO: task syz.3.1182:10110 blocked for more than 145 seconds. [ 1016.343305][ T26] audit: type=1326 audit(1860933292.031:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1016.703205][ T27] Not tainted 6.1.111-syzkaller #0 [ 1016.950248][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1017.231113][ T27] task:syz.3.1182 state:D stack:25880 pid:10110 ppid:8853 flags:0x00004004 [ 1017.240590][ T27] Call Trace: [ 1017.244534][ T27] [ 1017.247569][ T27] __schedule+0x143f/0x4570 [ 1017.253099][ T27] ? release_firmware_map_entry+0x186/0x186 [ 1017.259096][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1017.261054][ T26] audit: type=1326 audit(1860933292.051:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1017.265827][ T27] ? print_irqtrace_events+0x210/0x210 [ 1017.293910][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1017.295327][ T26] audit: type=1326 audit(1860933292.051:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1017.299100][ T27] schedule+0xbf/0x180 [ 1017.334745][ T27] ? down_read+0x69f/0xa30 [ 1017.334880][ T26] audit: type=1326 audit(1860933292.051:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1017.339302][ T27] schedule_preempt_disabled+0xf/0x20 [ 1017.367656][ T27] down_read+0x6ff/0xa30 [ 1017.372220][ T27] ? __down_common+0x8b0/0x8b0 [ 1017.374726][ T26] audit: type=1326 audit(1860933292.051:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1017.377036][ T27] ? do_raw_spin_lock+0x14a/0x370 [ 1017.405605][ T27] ? do_raw_spin_unlock+0x137/0x8a0 [ 1017.407588][ T26] audit: type=1326 audit(1860933292.051:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f88f857c797 code=0x7ffc0000 [ 1017.411382][ T27] iterate_supers+0xac/0x1e0 [ 1017.438873][ T26] audit: type=1326 audit(1860933292.051:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1017.438906][ T26] audit: type=1326 audit(1860933292.051:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11366 comm="syz.4.1404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f857def9 code=0x7ffc0000 [ 1017.488386][ T27] ? ksys_sync+0x1c0/0x1c0 [ 1017.492959][ T27] ksys_sync+0xb9/0x1c0 [ 1017.497125][ T27] ? sync_filesystem+0x220/0x220 [ 1017.502385][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1017.508382][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1017.514386][ T27] __do_sys_sync+0xa/0x10 [ 1017.518727][ T27] do_syscall_64+0x3b/0xb0 [ 1017.523508][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1017.528205][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.535681][ T27] RIP: 0033:0x7f349b17def9 [ 1017.540112][ T27] RSP: 002b:00007f349bff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1017.548834][ T27] RAX: ffffffffffffffda RBX: 00007f349b335f80 RCX: 00007f349b17def9 [ 1017.557166][ T3684] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1017.564977][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.573625][ T27] RBP: 00007f349b1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1017.581692][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.589666][ T27] R13: 0000000000000000 R14: 00007f349b335f80 R15: 00007fffa349abb8 [ 1017.600304][ T27] [ 1017.603499][ T27] INFO: task syz.3.1182:10112 blocked for more than 146 seconds. [ 1017.612275][ T27] Not tainted 6.1.111-syzkaller #0 [ 1017.617918][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1017.626762][ T27] task:syz.3.1182 state:D stack:27400 pid:10112 ppid:8853 flags:0x00004004 [ 1017.651003][ T27] Call Trace: [ 1017.655698][ T27] [ 1017.658729][ T27] __schedule+0x143f/0x4570 [ 1017.663935][ T27] ? release_firmware_map_entry+0x186/0x186 [ 1017.669974][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1017.676361][ T27] ? print_irqtrace_events+0x210/0x210 [ 1017.682360][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 1017.688132][ T27] schedule+0xbf/0x180 [ 1017.693081][ T27] ? down_read+0x69f/0xa30 [ 1017.697531][ T27] schedule_preempt_disabled+0xf/0x20 [ 1017.708930][ T27] down_read+0x6ff/0xa30 [ 1017.726369][ T27] ? __down_common+0x8b0/0x8b0 [ 1017.731419][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 1017.736629][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 1017.743345][ T27] iterate_supers+0xac/0x1e0 [ 1017.747974][ T27] ? ksys_sync+0x1c0/0x1c0 [ 1017.752702][ T27] ksys_sync+0xb9/0x1c0 [ 1017.756856][ T27] ? sync_filesystem+0x220/0x220 [ 1017.761995][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1017.767998][ T27] ? syscall_enter_from_user_mode+0x2e/0x230 [ 1017.774274][ T27] __do_sys_sync+0xa/0x10 [ 1017.778602][ T27] do_syscall_64+0x3b/0xb0 [ 1017.783239][ T27] ? clear_bhb_loop+0x45/0xa0 [ 1017.787942][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1017.794231][ T27] RIP: 0033:0x7f349b17def9 [ 1017.798640][ T27] RSP: 002b:00007f349bfd5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 1017.807179][ T27] RAX: ffffffffffffffda RBX: 00007f349b336058 RCX: 00007f349b17def9 [ 1017.817972][ T3684] usb 1-1: Using ep0 maxpacket: 32 [ 1017.823306][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1017.831577][ T27] RBP: 00007f349b1f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 1017.845160][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1017.853457][ T27] R13: 0000000000000000 R14: 00007f349b336058 R15: 00007fffa349abb8 [ 1017.861948][ T27] [ 1017.868784][ T27] [ 1017.868784][ T27] Showing all locks held in the system: [ 1017.876911][ T27] 1 lock held by rcu_tasks_kthre/12: [ 1017.882484][ T27] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1017.893263][ T27] 1 lock held by rcu_tasks_trace/13: [ 1017.898568][ T27] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1017.910033][ T27] 1 lock held by khungtaskd/27: [ 1017.917551][ T27] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1017.932403][ T27] 2 locks held by getty/3396: [ 1017.937202][ T27] #0: ffff88807e628098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1017.972368][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1017.975278][T10658] EXT4-fs (loop1): unmounting filesystem. [ 1018.003088][ T27] 3 locks held by kworker/0:7/3684: [ 1018.008480][ T27] #0: ffff8881422e9138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.029687][ T27] #1: ffffc90004617d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.055142][ T27] #2: ffff888144b6c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730 [ 1018.070474][ T27] 2 locks held by kworker/1:7/3838: [ 1018.076176][ T3684] usb 1-1: unable to read config index 0 descriptor/all [ 1018.077898][ T27] #0: [ 1018.083345][ T3684] usb 1-1: can't read configurations, error -71 [ 1018.089326][ T27] ffff888017c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.103184][ T27] #1: ffffc90004987d20 ((work_completion)(&pwq->unbound_release_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.115808][ T27] 1 lock held by syz-executor/5189: [ 1018.121306][ T27] #0: ffff8880796680e0 (&type->s_umount_key#97){++++}-{3:3}, at: deactivate_super+0xa9/0xe0 [ 1018.131600][ T27] 4 locks held by kworker/u4:18/6356: [ 1018.136967][ T27] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.149061][ T27] #1: ffffc90004d47d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.159057][ T27] #2: ffffffff8e4ed450 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 1018.170329][ T27] #3: ffffffff8d3304c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 1018.180521][ T27] 2 locks held by kworker/1:12/9599: [ 1018.186118][ T27] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.196547][ T27] #1: ffffc9000325fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1018.208272][ T27] 1 lock held by syz.3.1182/10110: [ 1018.213446][ T27] #0: ffff8880796680e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 1018.226598][ T27] 1 lock held by syz.3.1182/10112: [ 1018.231864][ T27] #0: ffff8880796680e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 1018.242365][ T27] 1 lock held by syz-executor/10240: [ 1018.247654][ T27] #0: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1018.259575][ T27] 1 lock held by syz.4.1303/10841: [ 1018.265260][ T27] #0: ffff8880796680e0 (&type->s_umount_key#97){++++}-{3:3}, at: iterate_supers+0xac/0x1e0 [ 1018.277869][ T27] 1 lock held by syz.0.1403/11362: [ 1018.283289][ T27] #0: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 1018.294317][ T27] [ 1018.296827][ T27] ============================================= [ 1018.296827][ T27] [ 1018.306674][ T27] NMI backtrace for cpu 0 [ 1018.311013][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 1018.318909][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1018.328967][ T27] Call Trace: [ 1018.332246][ T27] [ 1018.335166][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1018.339840][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1018.345290][ T27] ? panic+0x764/0x764 [ 1018.349344][ T27] ? vprintk_emit+0x622/0x740 [ 1018.354018][ T27] ? printk_sprint+0x490/0x490 [ 1018.358773][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 1018.363880][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 1018.368814][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1018.374960][ T27] ? _printk+0xd1/0x111 [ 1018.379105][ T27] ? panic+0x764/0x764 [ 1018.383160][ T27] ? __wake_up_klogd+0xcc/0x100 [ 1018.387998][ T27] ? panic+0x764/0x764 [ 1018.392052][ T27] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 1018.398111][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1018.404170][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 1018.410141][ T27] watchdog+0xf88/0xfd0 [ 1018.414288][ T27] ? watchdog+0x1f8/0xfd0 [ 1018.418609][ T27] kthread+0x28d/0x320 [ 1018.422661][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1018.427675][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1018.432250][ T27] ret_from_fork+0x1f/0x30 [ 1018.436661][ T27] [ 1018.440982][ T27] Sending NMI from CPU 0 to CPUs 1: [ 1018.446489][ C1] NMI backtrace for cpu 1 [ 1018.446499][ C1] CPU: 1 PID: 32 Comm: kworker/u4:2 Not tainted 6.1.111-syzkaller #0 [ 1018.446515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1018.446524][ C1] Workqueue: phy57 ieee80211_iface_work [ 1018.446547][ C1] RIP: 0010:__unwind_start+0x437/0x720 [ 1018.446566][ C1] Code: 24 18 48 8b 1b 41 80 3c 17 00 74 08 4c 89 ef e8 af 54 a5 00 49 8b 76 28 4d 8d 66 20 48 89 df 4c 89 f2 4c 89 e1 e8 a9 c5 f3 ff <85> c0 48 ba 00 00 00 00 00 fc ff df 0f 84 83 00 00 00 89 2c 24 48 [ 1018.446580][ C1] RSP: 0018:ffffc90000a8f660 EFLAGS: 00000202 [ 1018.446592][ C1] RAX: 0000000000000000 RBX: ffffc90000a8f660 RCX: 0000000000000001 [ 1018.446602][ C1] RDX: ffffc90000a8f6c0 RSI: ffffc90000a90000 RDI: ffffc90000a8f660 [ 1018.446613][ C1] RBP: ffffc90000a8f701 R08: dffffc0000000001 R09: ffffc90000a8f6c0 [ 1018.446630][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90000a8f6e0 [ 1018.446640][ C1] R13: ffffc90000a8f6e8 R14: ffffc90000a8f6c0 R15: 1ffff92000151edd [ 1018.446651][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1018.446664][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1018.446675][ C1] CR2: 0000565387fe5018 CR3: 000000000d08e000 CR4: 00000000003526e0 [ 1018.446688][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1018.446697][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1018.446707][ C1] Call Trace: [ 1018.446711][ C1] [ 1018.446717][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 1018.446740][ C1] ? read_lock_is_recursive+0x10/0x10 [ 1018.446763][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1018.446785][ C1] ? nmi_handle+0x25/0x440 [ 1018.446814][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1018.446835][ C1] ? nmi_handle+0x12e/0x440 [ 1018.446856][ C1] ? nmi_handle+0x25/0x440 [ 1018.446876][ C1] ? __unwind_start+0x437/0x720 [ 1018.446891][ C1] ? default_do_nmi+0x62/0x150 [ 1018.446907][ C1] ? exc_nmi+0xa8/0x100 [ 1018.446921][ C1] ? end_repeat_nmi+0x16/0x31 [ 1018.446947][ C1] ? __unwind_start+0x437/0x720 [ 1018.446963][ C1] ? __unwind_start+0x437/0x720 [ 1018.446979][ C1] ? __unwind_start+0x437/0x720 [ 1018.446995][ C1] [ 1018.446999][ C1] [ 1018.447013][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1018.447033][ C1] arch_stack_walk+0xdb/0x140 [ 1018.447052][ C1] ? __unwind_start+0xef/0x720 [ 1018.447069][ C1] stack_trace_save+0x113/0x1c0 [ 1018.447090][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 1018.447114][ C1] ? skb_release_data+0x5de/0x7a0 [ 1018.447135][ C1] kasan_set_track+0x4b/0x70 [ 1018.447182][ C1] kasan_save_free_info+0x27/0x40 [ 1018.447198][ C1] ____kasan_slab_free+0xd6/0x120 [ 1018.447213][ C1] __kmem_cache_free+0x25c/0x3c0 [ 1018.447231][ C1] ? skb_release_data+0x5de/0x7a0 [ 1018.447253][ C1] skb_release_data+0x5de/0x7a0 [ 1018.447277][ C1] ? ieee80211_iface_work+0x260/0xce0 [ 1018.447293][ C1] kfree_skb_reason+0x16f/0x390 [ 1018.447315][ C1] ieee80211_iface_work+0x260/0xce0 [ 1018.447336][ C1] ? process_one_work+0x7a9/0x11d0 [ 1018.447352][ C1] process_one_work+0x8a9/0x11d0 [ 1018.447376][ C1] ? worker_detach_from_pool+0x260/0x260 [ 1018.447395][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 1018.447412][ C1] ? kthread_data+0x4e/0xc0 [ 1018.447434][ C1] ? wq_worker_running+0x97/0x190 [ 1018.447449][ C1] worker_thread+0xa47/0x1200 [ 1018.447478][ C1] kthread+0x28d/0x320 [ 1018.447490][ C1] ? worker_clr_flags+0x190/0x190 [ 1018.447506][ C1] ? kthread_blkcg+0xd0/0xd0 [ 1018.447520][ C1] ret_from_fork+0x1f/0x30 [ 1018.447545][ C1] [ 1018.509937][ T5164] kworker/u4:14: attempt to access beyond end of device [ 1018.509937][ T5164] loop3: rw=1, sector=77832, nr_sectors = 8 limit=40427 [ 1018.652902][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1018.652917][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0 [ 1018.652935][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1018.652945][ T27] Call Trace: [ 1018.652951][ T27] [ 1018.652959][ T27] dump_stack_lvl+0x1e3/0x2cb [ 1018.652990][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 1018.653013][ T27] ? panic+0x764/0x764 [ 1018.653035][ T27] ? vscnprintf+0x59/0x80 [ 1018.653055][ T27] panic+0x318/0x764 [ 1018.653073][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1018.653096][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 1018.653117][ T27] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1018.653139][ T27] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 1018.653163][ T27] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 1018.653187][ T27] watchdog+0xfc7/0xfd0 [ 1018.653212][ T27] ? watchdog+0x1f8/0xfd0 [ 1018.653235][ T27] kthread+0x28d/0x320 [ 1018.653250][ T27] ? hungtask_pm_notify+0x50/0x50 [ 1018.653268][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1018.653284][ T27] ret_from_fork+0x1f/0x30 [ 1018.653315][ T27] [ 1018.656516][ T27] Kernel Offset: disabled [ 1018.931924][ T27] Rebooting in 86400 seconds..