last executing test programs: 2m30.746613674s ago: executing program 32 (id=584): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r0, 0x402, 0x40000008) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x41) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r3, 0x402, 0x4) fcntl$notify(r2, 0x402, 0xc58100de3fc96e21) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2m22.961523395s ago: executing program 33 (id=639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0x1000}], 0x1}, 0x700) 2m11.399291729s ago: executing program 1 (id=708): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000380)={'#! ', '', [], 0xa, "5854de9422ab97ca0e43de0a7956f703d038a068546ad861ec77f558bac3eca6c926a316"}, 0x28) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80940, 0xda138c4da563c29e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) 2m10.920909331s ago: executing program 1 (id=711): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) listen(r1, 0x6) close(r1) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000100)=""/59, 0x3b}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000f80)=""/4100, 0x1004}, {&(0x7f0000000480)=""/255, 0xff}, {&(0x7f00000002c0)=""/223, 0xdf}, {&(0x7f0000000880)=""/247, 0xf7}, {&(0x7f0000000780)=""/210, 0xd2}, {&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f0000000e00)=""/113, 0x71}, {&(0x7f0000000000)=""/32, 0x20}], 0xa}, 0x10000fff}], 0x1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000d00)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{0x2}, {@val={0x8}, @val={0xc, 0x99, {0xfffffff8, 0x30}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x6c00, 0x0, 0x24000001}, 0x0) 2m10.621276528s ago: executing program 1 (id=713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') socket$inet6(0xa, 0x2, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020}, 0x2020) 2m8.236952417s ago: executing program 1 (id=718): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) syz_clone(0x8020000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) 2m7.955768074s ago: executing program 1 (id=721): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd41, &(0x7f0000003180)=ANY=[], 0x0) 2m7.199404712s ago: executing program 1 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000000001000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 2m6.908051869s ago: executing program 34 (id=726): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="01000000030000000400000008"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000000001000b00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) 1m52.25793836s ago: executing program 2 (id=829): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC]) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) munlockall() 1m51.863265799s ago: executing program 2 (id=834): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000800)={@ifindex, 0x5, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$OCFS2_IOC_UNRESVSP(r0, 0x40305829, &(0x7f0000000080)={0x2, 0x1, 0x5, 0x8a2, 0x40, 0x80}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000), 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r2) close(r1) 1m51.243874295s ago: executing program 2 (id=850): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x80004, 0x0, 0xffffffff}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) 1m50.894980133s ago: executing program 2 (id=844): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m50.671780939s ago: executing program 2 (id=846): socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x8000000000000003, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0x5, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044800}, 0x480c5) openat$incfs(0xffffffffffffff9c, 0x0, 0xc00c0, 0x24) close(r0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 1m49.239293714s ago: executing program 2 (id=856): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xea) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1m48.935135322s ago: executing program 35 (id=856): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0xea) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuset.memory_pressure\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) 1m13.464496194s ago: executing program 4 (id=1079): write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r3}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000084) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x192}}, 0x20}}, 0x0) 1m13.075060113s ago: executing program 4 (id=1084): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1m12.877641968s ago: executing program 4 (id=1086): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x100688d, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x100000001, 0x8000000000000000, 0x1, 0x1, 0xfb, 0x3, 0x1], 0x41000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x8, 0x2, 0x50, 0x0, 0x2000000b, 0x7, 0x2, 0x9, 0x1, 0x8, 0x0, 0x51, 0x0, 0x40004, 0x10, 0xff, 0xb, 0x2, 0xf, '\x00', 0x2, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.613662614s ago: executing program 4 (id=1088): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4fb, &(0x7f0000001c80)="$eJzs3c9vG1kdAPDvOHF+tNlNdtkDINgtuwsFVXUSt42qHqCcEEKVED2C1IbEjaLYcRQ7pQk9pGeuSFTiBEf+ip64c0Fw41IOSPyIQA0SByOPJ6mT2k3UJHYUfz7SaObNm/r7Xp15L/469gtgYF2JiO2IGImIhxExmZ1Psi3utrbmda92ni7s7jxdSKLRuP/PJK1vnou2f9N0OXvMsYj40fcifpq8Gbe2ubUyXy6X1rPydL2yNl3b3Lq+XJlfKi2VVovFudm5mds3bhVPra+fVEayo6++/MP2t37ebNZEdqa9H6ep1fX8fpym4Yj4wVkE64OhrD8j/W4I7yQXER9GxKfp/T8ZQ+mzCQBcZI3GZDQm28sAwEWXS3NgSa6Q5QImIpcrFFo5vI/iUq5crdWvPapurC62cmVTkc89Wi6XZrJc4VTkk2Z5Nj1+XS5G/kD5RkR8EBG/HB1Py4WFanmxn7/4AMAAu3xo/v/PaGv+BwAuuLF+NwAA6DnzPwAMHvM/AAwe8z8ADJ7W/D/e72YAAD3k9T8ADB7zPwAMlB/eu9fcGrvZ918vPt7cWKk+vr5Yqq0UKhsLhYXq+lphqVpdSr+zp3LU45Wr1bXZm7HxZOrba7X6dG1z60GlurFaf5B+r/eDUj69arsHPQMAuvngkxd/Tpoz8p3xdIu2tRzyfW0ZcNZy/W4A0DdD/W4A0DdW+4LBdYLX+NIDcEF0WKL3gLFOHxBqNBqNs2sScMaufkn+HwZVW/7fXwHDgJH/h8El/w+Dq9FIjrvmfxz3QgDgfJPjB7q8//9htv9d9ubATxYPX/H8LFsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA59ve+r+FbC3wicjlCoWI9yJiKvLJo+VyaSYi3o+IP43mR5vl2T63GQA4qdzfkmz9r6uTn08cqPr48v7hSET87Nf3f/Vkvl5f/2PESPKv0b3z9efZ+WLvWw8AHG1vnk73bS/kX+08Xdjbetmev383IsZa8Xd3RmJ3P/5wDKf7schHxKV/J1m5JWnLXZzE9rOI+GKn/icxkeZAWiufHo7fjP1eT+PnDsTPpXWtffP/4gun0BYYNC+a48/dTvdfLq6k+873/1g6Qp1cNv41H2phNx0DX8ffG/+Guox/V44b4+bvv986Gn+z7lnEl4cj9mLvto0/e/GTLvE/P2b8v3zl40+71TV+E3E1OsdvjzVdr6xN1za3ri9X5pdKS6XVYnFudm7m9o1bxek0Rz3dfTb4x51r73era/b/Upf4Y0f0/+vH7P9v//fwx197S/xvftYpfi4+ekv85pz4jWNFT7qt7b0ff7FL/496/q8dK37Ey79uvbFsOADQP7XNrZX5crm0fmYH+SzSGYZwMCgH5/kH6Tu9ijUSnat+8VnrTjtU1Wi8U6xuI8ZpZN2A82D/po+I//a7MQAAAAAAAAAAAAAAQEe9+MRSv/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxfX/AAAA///n5cqK") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 1m12.090625088s ago: executing program 4 (id=1092): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc450}, 0x0) r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0x0]) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setgroups(0x1, &(0x7f00000001c0)=[r2]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x30925) keyctl$set_timeout(0xf, r1, 0xd2ab) 1m11.329505016s ago: executing program 3 (id=1096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000024c80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000024d40)=ANY=[@ANYBLOB="4400000010000d042abd7000077bf70000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002400128009000100626f6e64"], 0x44}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) 1m10.35273549s ago: executing program 3 (id=1103): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ad30c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b82614b2550bae878ec65a6fe5f7ee415af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd7fe926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846b3e578af7dc7d5e87d44ff828de453f7edf34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000000000000000000000000000000000eeffffff000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37c53cb57ff9d57ac41afb92a9d13e5de7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489a261f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f58c5eeab6dac2877225e90995554e92cb5d2f6af1f70188027773d82e5f43d0dbc60fd3dc8763c3aa884e7a3d06496384e179be004e56176dfc64fe5b1b0e6ede32527d6bed6225d9b6efe63b3798f8606ab2e5b50a15fd66f54d49ac9eaeb79dd87ec000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f088a847e04305000f4000631177fbac14144588a8030394029f034d2f87e589ca6aab845013f286dd1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000e1e, 0x0, 0x60e}, 0x2c) 1m10.106196746s ago: executing program 3 (id=1105): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 1m9.987885519s ago: executing program 4 (id=1106): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x54) 1m9.744607525s ago: executing program 36 (id=1106): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x0, r2}, 0x10) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x54) 1m8.157007894s ago: executing program 3 (id=1121): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f00000012c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) 1m7.376739723s ago: executing program 3 (id=1126): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x31) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m7.268720596s ago: executing program 3 (id=1128): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x401}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x54000) 57.689831521s ago: executing program 7 (id=1173): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000006c00010027bd7000fddbdf25000000", @ANYRES32=0x0, @ANYBLOB="8200000000280000180034801400350300696d"], 0x4c}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xc, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xaa99}, [@map_fd={0x18, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 57.494271936s ago: executing program 7 (id=1175): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000ac0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@fscache}]}}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) unlink(&(0x7f0000000080)='./file0/file1\x00') 57.233027452s ago: executing program 7 (id=1178): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000340)={0x6, "1803c8098000000000000000000000000000000000000000f34100", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x80800, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000001c0)={0x2, "fa02791d2a69a2610f020000000000000011000100e15ac64200", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f00000003c0)={0x7, "06000000000000d4c6004734c50a7d0020000000005c00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"0e337b42cc00d331ff0007000000000000001a00", r6, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000040)={"130f2672af96e04523020049227f3bebd7f9cec5164e58445f1268334b4900", r7}) 56.945373469s ago: executing program 7 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80143, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x480a8, 0x0, 0x21, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) fcntl$setstatus(r1, 0x4, 0x76800) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) 56.764551264s ago: executing program 7 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x1000c52, &(0x7f0000000200)=ANY=[], 0xfd, 0x296, &(0x7f0000001080)="$eJzs3M1qE1EUwPFj0o80tU0WIiiIB92oi6GNL2CQFsSAUhtRF8LUTjRkTMrMWImI7c6tz1FcuhPUF+jGnQt30k0XCm66UCOdjzatQ6u2yYTm/4Myp3Pvydz5CmcGctfvvHpcq7hGxfQklVFJiSzLhkh+MwodC5cpPx6SdstycfT7pzO37t67XiyVpmZUp4uzlwuqOn723dPnr8998EZvvxl/Oyyr+fvr3wpfVk+unlr/NRt9esNTU+caDc+csy2dr7o1Q/WmbZmupdW6azk72it2Y2GhqWZ9fiy74Fiuq2a9qTWrqV5DPaep5kOzWlfDMHQsK/0m/c8Z5ZWZGbPYkcEgCSNxKx2naKZjG8sr3RgUAADoLUnV/4+qrlZdre9X/6eE+r9zqP+PkuNrEvsUuFn/Z8P7d8uln10cGQAAAAAAAAAAAAAAAAAAAAAAOIiNVivXarVy0TL6GxaRjIhE/yc9TnTGQc7/cPeHi0PW9sO9jIj9crG8WA6WQXuxIlWxxZKJQZEf/vUQCuLpa6WpCfXl5b29FOYvLZbT/vXh50fy8fmTQb7uzB+UbPv2C5KTE/I5Lr8Qmz8kF8635RuSk48PpCG2zPvX9Xb+i0nVqzdKu/JH/H4AAAAAABwFhm754/ndbzc0mjZkV3uwcvv9gOT2eT+w6/l6QE4PJLffAAAAAAD0E7f5rGbatuUQ7AiuiMiefZI+dCM9cqA6GKQ2z0HXt/41ujV64yAcarD2JNi1v+mc4JcSAAAAgI7YLvqTHgkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1rj2nAMmEXf03U/3/mHmvbXLr7ewgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0jt8BAAD//ysQG/U=") 56.398484983s ago: executing program 7 (id=1185): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x40003, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x20004, 0x6, 0x9, 0x6}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x403, 0x4) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 52.089912079s ago: executing program 37 (id=1128): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x40001}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x3) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x401}, 0x8) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x5}}, 0x54000) 41.296662294s ago: executing program 38 (id=1185): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0x7}, 'port0\x00', 0x44, 0xa04f2, 0x10000000, 0x8000088, 0x6, 0x40003, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffffff, 0x22, 0xe1d9, 0x1101, 0xff}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000004c0)={0x800100, 0xfffffffd, 0x20004, 0x6, 0x9, 0x6}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x403, 0x4) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 12.936614902s ago: executing program 5 (id=1416): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 11.019257998s ago: executing program 5 (id=1428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000883}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070029000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 8.683758126s ago: executing program 5 (id=1438): socket$igmp(0x2, 0x3, 0x2) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000002) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xb}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 7.968856253s ago: executing program 9 (id=1444): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000400), 0x4) 7.628176482s ago: executing program 9 (id=1447): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000)) close_range(r1, r1, 0x0) 5.818172417s ago: executing program 9 (id=1458): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10) close(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) 5.29937813s ago: executing program 9 (id=1463): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3f9, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x8, @loopback}, 0x1c) listen(r1, 0x5) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x6e23, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1f}}, 0x4}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100000b}, 0x1c) listen(r2, 0xb) listen(r0, 0x50) 4.960499318s ago: executing program 9 (id=1465): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) epoll_create1(0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) epoll_wait(r3, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) 4.358363013s ago: executing program 8 (id=1469): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x155, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x11f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026170400"}, {0x18, 0x15, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9"}]}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000000}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 4.292933104s ago: executing program 0 (id=1470): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in6=@local, 0x0, 0x5, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, 0x1}, {0x7, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x2b}, 0x0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0xe8) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast2, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0203100802"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) close(r2) 3.823656316s ago: executing program 8 (id=1472): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000080)='./file0/../file0/file0\x00') read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xfffffffffffffffd, {0x4, 0x3, 0x3, 0x8, 0x0, 0x80, {0x5, 0x80000000000, 0x1, 0xfffffffffffffffa, 0x16f, 0xdbf, 0x10, 0x0, 0x0, 0x8000, 0x2, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x41}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') close_range(r0, 0xffffffffffffffff, 0x0) 3.782761577s ago: executing program 0 (id=1473): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3.506721033s ago: executing program 8 (id=1474): connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x2, 0x5, 0x1000000000000000, 0x3, 0x2, 0x2, 0xfffffffffffffffd], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000400)=@x86={0x7f, 0xc, 0x0, 0x0, 0xe286, 0x4, 0x7, 0x40, 0xfc, 0x1, 0x5, 0x6, 0x0, 0x9, 0x8, 0x6, 0x3, 0x93, 0x3, '\x00', 0x6b, 0xfffffffffffffff9}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x9000, 0x8080000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x8, 0x9, 0x10}, {0x8080000, 0xb000, 0xc, 0x0, 0xfc, 0x9, 0x0, 0x0, 0x3, 0x7}, {0x5000, 0xe000, 0x1f, 0xff, 0x7, 0x4, 0x4, 0xfd, 0x3, 0xfe, 0x0, 0xfc}, {0x5000, 0xd000, 0xd, 0x0, 0x0, 0xfe, 0xff, 0x0, 0x8, 0xfc, 0x6, 0x10}, {0xd000, 0x3000, 0x10, 0x0, 0x4, 0x8, 0x0, 0x3, 0xfc, 0x3c}, {0x0, 0x0, 0xf, 0xfd, 0x8, 0x0, 0x2, 0x0, 0x40, 0x0, 0x5}, {0x40000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xca, 0x4, 0x0, 0x0, 0x3}, {0x80a0000}, {0xdddd1000}, 0xddf8fffb, 0x0, 0x10000, 0x50, 0x0, 0xf801, 0xb000, [0x80000000, 0x0, 0x1]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.377454317s ago: executing program 5 (id=1475): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) read$char_usb(r1, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r0) 3.307740808s ago: executing program 0 (id=1476): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) sendto$inet6(r0, &(0x7f0000000000)="442e2717bdbd39f5d2185ec9050d681a1038f428", 0x4000, 0x40, 0x0, 0x0) 3.005580616s ago: executing program 8 (id=1477): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e4ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d2b95f827098a17bbab52d616469f034f5d955822d906343ab344782016e80fd7adb151", 0x47}, {&(0x7f00000005c0)="eb8a7649f11eee0c8a70", 0xa}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b006264288e06b92515a685f214", 0x57}, {&(0x7f0000000880)="fa8f73530bdc6839cbd7de2c3cfdf1eda862656f65d5d0c4c2844e668b2a9c3003a5b2dc3dd324d843512a5791747534054eb6", 0x33}], 0x4}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="5f13081d2750e4f83f8aaab231f88648f9c9e87e18e46ab9208a4d73c12e76e97444d96d1ebcc0b0aa6b49eb770956bde3", 0x31}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000d00)="736ecdd03b3937767fb82186dbda22c1200098cb486edd05ac88cf8c55717a30a2aa0dab40047756fbceec218470121af7f9934da3905f7fc4caad11bbf2db81c6462513a516da69f191e95538089f0d7717c9c1820c346dc35dacbeb6702094dadf302e9187e767f69c671c1b2f517308f512744852fd75edff69df", 0x7c}, {&(0x7f0000000d80)="ec008fdc8d2e6f8167e70b7173e464", 0xf}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001000)="a3e52c39765c8c792d36b1ac778d0c400244d38bd28936afd3dec9954548e60db10ba3bad3eb30dfa68747b776550895f5aff818eb4b6f74182be274e6cb67184e321d6f7e59b2cc3ace646baf9b6cd5c9cedf032a09f7ca1029b7fd0fd92332290a385a8c84f2f438d1c5ca31a21d086dce6913142053acfbdacf70c28d2c44e5d81d92f5e5c9fa53b531ffb1284da81d074eadb09b76a7fff33f9b34cfaffff031d2d75a163f69b708d627e08ff5570e943304faa60966bc9d9b70f5c8138d0d2aa04d47f9f49741bf6bcdd4c68eebf6b5", 0xd2}, {&(0x7f0000001100)="75619ba9b63af95745741a7167ca1c6679d83b202eefa6dc7a5eec0dfe04ea78263ad3d4272a1d707f17976212eb03d419e2adc073b16437f374d3cd3b6f7718fcf2aeed196dde83e668def7840db0d319c7ccf58bde50fe137d1de465875c8bd2aa2cd9c100dfe6c353b02ff314dbed4b08fd40d65c1364a08ed9ca28ce3bdaa88c77945aec718de9e6f793256366da40bd3949ed0a162c747f979f5ad6bdaf8d9230a6a294", 0xa6}, {&(0x7f00000011c0)="da02d6f5505c2587ed4cb3656c40aefe7037a4e2e157ef1ffd6c36986d63", 0x1e}], 0x3}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000001c0)="175d1423437898d9953ed230c0cd0b7983e1dc5947a0146524f93397bd4e00b590fa761ecd4b99347e822a64f95b92bb023699453bed0200000000000000fe5a7c9e5eec8a3330221709db4ae68ed701d78d65a6cd083ee1fbb8a6eb30a006223b1dc3be838632cf20c0b446dde5977d67ceb5456b2102db", 0xb7, 0x10008095, 0x0, 0x0) sendto(r0, &(0x7f00000008c0)="aee4d6345e9f0f1e9383720dd59b7f0501b378316bdc1d3c85055f5ca12d73ae2cabc871ccb52c7f3f1ee8df49b3b96cfd63c488873c11565117a55ab40c7d431c150fabf319f0e0f9e268a42bf529b1d75d32dc8e2bf9af7820ee2832815d2db8cdb5db16b8375a8332c51b98", 0x6d, 0x8020, 0x0, 0x0) 2.848664739s ago: executing program 0 (id=1478): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xcc, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x5, 0x700}, 0x50) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.707767933s ago: executing program 8 (id=1479): socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r4, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x200000000622c, 0x0) 2.077047479s ago: executing program 6 (id=1481): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x4d) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x4}, 0x1c) listen(r1, 0x50) syz_emit_ethernet(0x4f, &(0x7f0000000a80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6c2d000000198401fa2441ce000000000000000000000002fe8000000000000000000000000000aaa5ba94e385673ccfd3fe184ab0643975bcc85fbf438632261b"], 0x0) 1.835641605s ago: executing program 6 (id=1482): timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r0, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) 1.775185776s ago: executing program 8 (id=1483): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12011001000000106a050d01000000000001090224000100008008090400fe010300030009218120030122280009058103400002c101"], 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x6}) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x197) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0}, 0x28) write$binfmt_elf64(r1, 0x0, 0xfffffdcf) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="202228000000287a050000000000002c3cbfeace918d0fb74237cc4b44b72fb2688881ce2a52971661d67a0c5544"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.404911605s ago: executing program 0 (id=1484): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/strings/0x409/s1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x85) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000080)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) 847.085009ms ago: executing program 6 (id=1485): r0 = socket$unix(0x1, 0x1, 0x0) listen(r0, 0xfffffffe) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xb, 0xb}, {0xa, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5, 0x9}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x405c071}, 0x400c840) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x41814) 743.379251ms ago: executing program 0 (id=1486): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x7, 0x100000, 0x0, 'queue0\x00'}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, 0x0, 0x0, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) close_range(r1, 0xffffffffffffffff, 0x0) 409.26103ms ago: executing program 6 (id=1487): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$qrtr(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="01800800000000000000463208004500001c0000f0"], 0x0) r5 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 348.221261ms ago: executing program 9 (id=1488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x210}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x200, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x2, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1b"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) 347.230251ms ago: executing program 5 (id=1489): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c0002800500010000000000440002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000600034000010000080007"], 0xa0}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 176.305345ms ago: executing program 6 (id=1490): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = inotify_init() r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) 79.363267ms ago: executing program 5 (id=1491): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c0002800800014000000002080002400000000e0500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d1ac21", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0) 0s ago: executing program 6 (id=1492): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x10c000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x5, 0xffff8001) unshare(0x400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) syz_clone(0x40cb091, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.103139][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.135571][ T6455] squashfs image failed sanity check [ 153.150781][ T3082] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.157946][ T3082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.237042][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.279887][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.315620][ T6433] loop4: detected capacity change from 0 to 32768 [ 153.365095][ T6433] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.679 (6433) [ 153.369830][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.416326][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.456020][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.487200][ T6433] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 153.506903][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.549370][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 153.566335][ T6433] BTRFS info (device loop4): using free space tree [ 153.601793][ T6433] BTRFS info (device loop4): has skinny extents [ 153.652001][ T4230] Bluetooth: hci2: command 0x040f tx timeout [ 153.755115][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.780346][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.839363][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 153.892748][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 153.981884][ T6433] BTRFS info (device loop4): enabling ssd optimizations [ 153.995649][ T6301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.015990][ T6446] loop3: detected capacity change from 0 to 32768 [ 154.093942][ T26] audit: type=1800 audit(1785513094.268:5): pid=6446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.683" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 154.728097][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.749009][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.784136][ T6301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.020758][ T6509] loop2: detected capacity change from 0 to 4096 [ 155.313950][ T6511] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 155.368527][ T6521] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 155.573708][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.593287][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.657515][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.674706][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.708566][ T6301] device veth0_vlan entered promiscuous mode [ 155.729553][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.734558][ T21] Bluetooth: hci2: command 0x0419 tx timeout [ 155.760839][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.815978][ T6301] device veth1_vlan entered promiscuous mode [ 155.929799][ T6301] device veth0_macvtap entered promiscuous mode [ 155.942526][ T26] audit: type=1800 audit(1785513096.118:6): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.691" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 155.989053][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 156.002623][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.045690][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.089478][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.123625][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.169033][ T6301] device veth1_macvtap entered promiscuous mode [ 156.288862][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.324819][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.346458][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.369729][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.409566][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.473940][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.512145][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.527732][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.541115][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.568820][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.609098][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.633468][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.660030][ T6301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.693378][ T6301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.741406][ T6301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.772811][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.824183][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.875020][ T6301] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.909355][ T6301] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.951984][ T6301] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.960755][ T6301] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.212371][ T26] audit: type=1800 audit(1785513097.388:7): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.690" name="bus" dev="ramfs" ino=45116 res=0 errno=0 [ 157.273364][ T4964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.286030][ T4964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.300228][ T4247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.332542][ T4247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.338448][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.365382][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.480699][ T6544] loop3: detected capacity change from 0 to 32768 [ 157.706679][ T6544] XFS (loop3): Mounting V5 Filesystem [ 157.959700][ T6544] XFS (loop3): Ending clean mount [ 158.268329][ T26] audit: type=1800 audit(1785513098.438:8): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.692" name="file1" dev="loop3" ino=4426 res=0 errno=0 [ 158.448286][ T4189] XFS (loop3): Unmounting Filesystem [ 158.880399][ T26] audit: type=1804 audit(1785513099.008:9): pid=6613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.708" name=2321200A5854DE9422AB97CA0E43DE0A7956F703D038A068546AD861EC77F558BAC3ECA6C926A316 dev="ramfs" ino=44889 res=1 errno=0 [ 159.022910][ T5564] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 159.292041][ T5564] usb 7-1: Using ep0 maxpacket: 16 [ 159.330729][ T6625] loop2: detected capacity change from 0 to 128 [ 159.432128][ T5564] usb 7-1: config index 0 descriptor too short (expected 51443, got 18) [ 159.622352][ T5564] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 159.661924][ T5564] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.670005][ T5564] usb 7-1: Product: syz [ 159.729728][ T5564] usb 7-1: Manufacturer: syz [ 159.769129][ T5564] usb 7-1: SerialNumber: syz [ 159.815269][ T5564] r8152-cfgselector 7-1: config 0 descriptor?? [ 160.462238][ T5564] r8152-cfgselector 7-1: Unknown version 0x0000 [ 160.469059][ T5564] r8152-cfgselector 7-1: bad CDC descriptors [ 160.604618][ T6643] 0x000000000007-0x000000020000 : "" [ 160.639471][ T6643] ftl_cs: FTL header corrupt! [ 161.348831][ T5564] r8152-cfgselector 7-1: Unknown version 0x0000 [ 161.356946][ T5564] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 162.081590][ T6629] loop3: detected capacity change from 0 to 40427 [ 162.110611][ T6629] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 162.135032][ T6629] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 162.226512][ T6629] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.274975][ T6706] loop2: detected capacity change from 0 to 512 [ 163.360418][ T6706] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 163.457373][ T6706] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsv0,,errors=continue. Quota mode: writeback. [ 163.481879][ T6706] ext4 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.581310][ T6706] EXT4-fs error (device loop2): ext4_get_inode_usage:835: inode #12: comm syz.2.729: corrupted xattr block 6 [ 164.148329][ T6717] chnl_net:caif_netlink_parms(): no params data found [ 164.281602][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.331845][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.369544][ T6717] device bridge_slave_0 entered promiscuous mode [ 164.387958][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.428122][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.471580][ T6717] device bridge_slave_1 entered promiscuous mode [ 164.558968][ T6651] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 164.588790][ T6717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.665654][ T6717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.793142][ T6717] team0: Port device team_slave_0 added [ 164.839410][ T6717] team0: Port device team_slave_1 added [ 164.898728][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.928364][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.965238][ T6742] loop6: detected capacity change from 0 to 2048 [ 165.035511][ T6742] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.048443][ T6717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.094321][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.129800][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.209948][ T6717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.389973][ T6717] device hsr_slave_0 entered promiscuous mode [ 165.430304][ T6717] device hsr_slave_1 entered promiscuous mode [ 165.446682][ T6717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.472005][ T6717] Cannot create hsr debugfs directory [ 165.662085][ T6535] Bluetooth: hci0: command 0x0409 tx timeout [ 165.788893][ T6749] netlink: 24 bytes leftover after parsing attributes in process `syz.6.738'. [ 165.830835][ T6752] netlink: 224 bytes leftover after parsing attributes in process `syz.6.738'. [ 166.070900][ T6754] loop2: detected capacity change from 0 to 128 [ 166.313748][ T6717] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 166.324442][ T6754] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 166.381271][ T6717] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 166.389482][ T6754] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.403376][ T6717] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 166.425793][ T6717] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 166.446741][ T6754] EXT4-fs (loop2): shut down requested (1) [ 166.492748][ T6754] fscrypt (loop2, inode 12): Error -5 getting encryption context [ 166.726081][ T6717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.802499][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.810792][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.874702][ T6717] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.898818][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.932802][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.978087][ T4242] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.985246][ T4242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.020411][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.077829][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.111096][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.144189][ T4964] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.151442][ T4964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.169359][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.316860][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.336205][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.392329][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.420552][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.463119][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.501908][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.516490][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.563499][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.602825][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.618250][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.682746][ T6717] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.742493][ T6537] Bluetooth: hci0: command 0x041b tx timeout [ 167.870157][ T6811] loop3: detected capacity change from 0 to 512 [ 167.964211][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'. [ 168.002812][ T6811] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.050234][ T6811] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.750: bad orphan inode 131083 [ 168.082317][ T6811] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 168.148051][ T6816] 8021q: adding VLAN 0 to HW filter on device bond1 [ 168.235178][ T6818] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 168.284330][ T6818] bond1: (slave ip6erspan0): making interface the new active one [ 168.315340][ T6818] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 168.348083][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 168.372779][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.409656][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.449026][ T6717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.482125][ T6811] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.750: Invalid inode table block 0 in block_group 0 [ 168.597110][ T6811] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm syz.3.750: Invalid inode table block 0 in block_group 0 [ 168.730231][ T6832] loop2: detected capacity change from 0 to 1024 [ 168.750660][ T6811] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 168.832482][ T6811] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #18: comm syz.3.750: mark_inode_dirty error [ 169.101869][ T4242] EXT4-fs error (device loop3): __ext4_get_inode_loc:4334: comm kworker/u4:5: Invalid inode table block 0 in block_group 0 [ 169.310243][ T6843] netlink: 'syz.2.758': attribute type 10 has an invalid length. [ 169.493743][ T6843] device veth0_vlan left promiscuous mode [ 169.572656][ T6843] device veth0_vlan entered promiscuous mode [ 169.677209][ T6843] team0: Device veth0_vlan failed to register rx_handler [ 169.831024][ T6537] Bluetooth: hci0: command 0x040f tx timeout [ 170.000488][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 170.087148][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.100517][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.162155][ T6717] device veth0_vlan entered promiscuous mode [ 170.176372][ T6717] device veth1_vlan entered promiscuous mode [ 170.215677][ T6858] device gre1 entered promiscuous mode [ 170.238338][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.248728][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.266382][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.278544][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.287248][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.309162][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.331655][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.340353][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.370085][ T6717] device veth0_macvtap entered promiscuous mode [ 170.418126][ T6717] device veth1_macvtap entered promiscuous mode [ 170.502232][ T26] audit: type=1800 audit(1785513110.678:10): pid=6867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.765" name="p_chmask" dev="configfs" ino=45911 res=0 errno=0 [ 170.524154][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.546303][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.568208][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.581435][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.601029][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.621837][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.632004][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.642637][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.688431][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.721245][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.740249][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.747808][ T6874] loop6: detected capacity change from 0 to 512 [ 170.766972][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.790577][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.819577][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.831934][ T6874] EXT4-fs (loop6): Ignoring removed orlov option [ 170.838511][ T6874] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 170.856982][ T6874] EXT4-fs error (device loop6): ext4_iget_extra_inode:4573: inode #15: comm syz.6.767: corrupted in-inode xattr [ 170.858172][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.882388][ T6874] EXT4-fs error (device loop6): ext4_orphan_get:1411: comm syz.6.767: couldn't read orphan inode 15 (err -117) [ 170.918527][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.929855][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.940013][ T6717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.949879][ T6874] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000008000000,orlov,noload,user_xattr,mblk_io_submit,noinit_itable,noblock_validity,nogrpid,init_itable=0x0000000000000fff,,errors=continue. Quota mode: writeback. [ 170.952960][ T6717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.987886][ T6717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.996869][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.028885][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.095604][ T6717] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.126320][ T6717] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.145419][ T6717] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.164746][ T6717] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.389758][ T6885] netlink: 'syz.6.770': attribute type 10 has an invalid length. [ 171.454911][ T6885] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 171.469317][ T6885] team0: Failed to send options change via netlink (err -105) [ 171.477256][ T6885] team0: Port device netdevsim0 added [ 171.526367][ T4951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.618943][ T4951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.637014][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.692926][ T6895] bridge0: port 3(syz_tun) entered blocking state [ 171.712452][ T6895] bridge0: port 3(syz_tun) entered disabled state [ 171.720169][ T6895] device syz_tun entered promiscuous mode [ 171.731385][ T6895] bridge0: port 3(syz_tun) entered blocking state [ 171.737959][ T6895] bridge0: port 3(syz_tun) entered listening state [ 171.753714][ C1] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 171.763418][ C1] bridge0: topology change detected, propagating [ 171.778787][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.773'. [ 171.801268][ T6893] netlink: 224 bytes leftover after parsing attributes in process `syz.3.773'. [ 171.827355][ T4964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.860110][ T4964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.902163][ T6534] Bluetooth: hci0: command 0x0419 tx timeout [ 171.922021][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.016405][ T154] bridge0: port 3(syz_tun) entered disabled state [ 172.949739][ T6931] loop4: detected capacity change from 0 to 256 [ 173.130251][ T6931] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 173.530371][ T6949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 173.583360][ T26] audit: type=1800 audit(1785513113.758:11): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.788" name="p_chmask" dev="configfs" ino=47157 res=0 errno=0 [ 173.634316][ T6949] lo speed is unknown, defaulting to 1000 [ 173.640798][ T6949] lo speed is unknown, defaulting to 1000 [ 173.763527][ T6949] lo speed is unknown, defaulting to 1000 [ 173.902764][ T6949] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 174.118065][ T6949] lo speed is unknown, defaulting to 1000 [ 174.190408][ T6949] lo speed is unknown, defaulting to 1000 [ 174.283124][ T6949] lo speed is unknown, defaulting to 1000 [ 174.306531][ T6949] lo speed is unknown, defaulting to 1000 [ 174.352821][ T6949] lo speed is unknown, defaulting to 1000 [ 174.359787][ T6949] lo speed is unknown, defaulting to 1000 [ 174.474027][ T6984] loop6: detected capacity change from 0 to 2048 [ 174.511058][ T6949] lo speed is unknown, defaulting to 1000 üÿüÿÿÿ  ¨/dev/fusefd=0x0000000000000003,rootmode=00000000000000000040000,user_id=00000000000000000000,group_id=00000000000000000000P)èÜF@sÿÿÿ [ 174.718784][ T6984] EXT4-fs (loop6): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 174.747009][ T6984] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.057554][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.7.803'. [ 175.156300][ T6996] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set [ 175.213685][ T7008] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.282280][ T7010] ip6erspan0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.309915][ T6996] EXT4-fs (loop6): Remounting filesystem read-only [ 175.374156][ T7010] bond1: (slave ip6erspan0): making interface the new active one [ 175.450134][ T7010] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 175.523895][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 177.814570][ T7103] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 177.834215][ T7103] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 178.305771][ T7132] loop6: detected capacity change from 0 to 1024 [ 178.541837][ T7132] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 178.940697][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.6.839'. [ 179.187405][ T7168] netlink: 236 bytes leftover after parsing attributes in process `syz.6.845'. [ 179.193062][ T7170] netlink: 'syz.4.843': attribute type 11 has an invalid length. [ 179.529897][ T7179] loop6: detected capacity change from 0 to 1024 [ 179.638917][ T7179] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 180.014169][ T7179] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.848: Invalid inode table block 0 in block_group 0 [ 180.055664][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.092627][ T7179] EXT4-fs error (device loop6): empty_inline_dir:1855: inode #12: comm syz.6.848: error -117 getting inode 12 block [ 180.357538][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.624614][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.798225][ T7212] bridge0: port 3(syz_tun) entered blocking state [ 180.873080][ T7212] bridge0: port 3(syz_tun) entered disabled state [ 180.903831][ T7216] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 180.952103][ T7212] device syz_tun entered promiscuous mode [ 180.958329][ T7212] bridge0: port 3(syz_tun) entered blocking state [ 180.964887][ T7212] bridge0: port 3(syz_tun) entered listening state [ 181.030671][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.587693][ T154] tipc: Left network mode [ 181.632723][ T4974] bridge0: port 3(syz_tun) entered disabled state [ 181.701564][ T7243] lo speed is unknown, defaulting to 1000 [ 182.018350][ T7258] loop7: detected capacity change from 0 to 4096 [ 182.304418][ T7272] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.339863][ T7243] chnl_net:caif_netlink_parms(): no params data found [ 182.367347][ T26] audit: type=1800 audit(1785513122.538:12): pid=7258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.869" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 182.580726][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.873'. [ 182.641562][ T21] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 182.863608][ T7243] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.899487][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.931742][ T7243] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.940813][ T7243] device bridge_slave_0 entered promiscuous mode [ 182.955798][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.002525][ T7243] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.013626][ T7243] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.035561][ T7289] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.052791][ T7243] device bridge_slave_1 entered promiscuous mode [ 183.068902][ T154] batman_adv: batadv0: Interface deactivated: gretap1 [ 183.082262][ T7258] NILFS (loop7): nilfs_sufile_do_free: segment 9 is already clean [ 183.135223][ T154] batman_adv: batadv0: Removing interface: gretap1 [ 183.269636][ T21] usb 8-1: unable to get BOS descriptor or descriptor too short [ 183.281537][ T7243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.372169][ T21] usb 8-1: no configurations [ 183.384188][ T21] usb 8-1: can't read configurations, error -22 [ 183.444922][ T7243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.562087][ T7243] team0: Port device team_slave_0 added [ 183.587497][ T7243] team0: Port device team_slave_1 added [ 183.653233][ T4230] Bluetooth: hci1: command 0x0409 tx timeout [ 183.769911][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.812167][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.930013][ T7243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.974564][ T7312] netlink: 64467 bytes leftover after parsing attributes in process `syz.3.880'. [ 184.037901][ T7243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.066543][ T7243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.146042][ T7243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.177622][ T7317] loop3: detected capacity change from 0 to 256 [ 184.210013][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.7.881'. [ 184.249294][ T7317] exfat: Deprecated parameter 'utf8' [ 184.328635][ T7317] exfat: Deprecated parameter 'utf8' [ 184.390867][ T154] device hsr_slave_0 left promiscuous mode [ 184.405033][ T7317] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 184.422367][ T154] device hsr_slave_1 left promiscuous mode [ 184.452526][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.493410][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.531888][ T7317] exFAT-fs (loop3): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 184.549850][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.562918][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.582732][ T154] device team0 left promiscuous mode [ 184.588192][ T154] device team_slave_0 left promiscuous mode [ 184.630603][ T154] device team_slave_1 left promiscuous mode [ 184.640961][ T154] bridge0: port 4(team0) entered disabled state [ 184.673740][ T7291] loop4: detected capacity change from 0 to 40427 [ 184.686646][ T154] device bridge_slave_1 left promiscuous mode [ 184.694151][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.716669][ T154] device bridge_slave_0 left promiscuous mode [ 184.740947][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.749287][ T7291] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 184.783928][ T7291] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 184.812780][ T7291] F2FS-fs (loop4): invalid crc value [ 184.828796][ T154] device veth1_macvtap left promiscuous mode [ 184.889097][ T7291] F2FS-fs (loop4): Found nat_bits in checkpoint [ 184.896466][ T154] device veth0_macvtap left promiscuous mode [ 184.916268][ T154] device veth1_vlan left promiscuous mode [ 185.119598][ T7291] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 185.131414][ T7291] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 185.169543][ T7329] loop6: detected capacity change from 0 to 4096 [ 185.278180][ T7329] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 185.350156][ T7334] netlink: 28 bytes leftover after parsing attributes in process `syz.7.887'. [ 185.362655][ T7334] siw: device registration error -23 [ 185.396199][ T154] team0 (unregistering): Port device bridge1 removed [ 185.476371][ T7329] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 185.731925][ T6009] Bluetooth: hci1: command 0x041b tx timeout [ 185.971908][ T5564] Bluetooth: hci4: command 0x0406 tx timeout [ 185.981881][ T5564] Bluetooth: hci3: command 0x0406 tx timeout [ 186.063207][ T26] audit: type=1800 audit(1785513126.238:13): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.876" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 186.148642][ T154] team0 (unregistering): Port device team_slave_1 removed [ 186.172641][ T154] team0 (unregistering): Port device team_slave_0 removed [ 186.192574][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.251217][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.379158][ T154] bond0 (unregistering): Released all slaves [ 186.545641][ T7243] device hsr_slave_0 entered promiscuous mode [ 186.558006][ T7243] device hsr_slave_1 entered promiscuous mode [ 186.572730][ T7243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.591399][ T7243] Cannot create hsr debugfs directory [ 187.379027][ T7243] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 187.459786][ T7387] loop6: detected capacity change from 0 to 4096 [ 187.469148][ T7243] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 187.498900][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.902'. [ 187.588598][ T7243] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 187.619603][ T7243] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 187.691233][ T5564] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 187.769774][ T5564] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 187.811994][ T6534] Bluetooth: hci1: command 0x040f tx timeout [ 187.950523][ T7243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.023252][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 188.042698][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.097423][ T7243] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.140747][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.170024][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.208376][ T4951] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.215596][ T4951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.242106][ T6301] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 188.259458][ T6301] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 188.270882][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.301312][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.321525][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.359842][ T4951] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.367080][ T4951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.421838][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 188.449153][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 188.510450][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 188.538725][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 188.578178][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 188.623612][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.659006][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.672939][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.710746][ T7243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.760093][ T7243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 188.787977][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 188.808717][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.848561][ T4951] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.433767][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 189.441314][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 189.469940][ T7243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.902306][ T6531] Bluetooth: hci1: command 0x0419 tx timeout [ 189.990259][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 190.003524][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.017033][ T7467] cgroup: Name too long [ 190.083558][ T6534] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.338372][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 190.478855][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.502686][ T6534] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 190.540697][ T6534] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 190.699737][ T7243] device veth0_vlan entered promiscuous mode [ 190.711827][ T6534] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 190.738564][ T6534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 190.757239][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.769849][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.809839][ T6534] usb 4-1: SerialNumber: syz [ 190.824611][ T7243] device veth1_vlan entered promiscuous mode [ 190.889656][ T7472] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 190.972655][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 191.002903][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 191.029081][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 191.063112][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 191.123232][ T7243] device veth0_macvtap entered promiscuous mode [ 191.173684][ T7243] device veth1_macvtap entered promiscuous mode [ 191.225148][ T6534] usb 4-1: 0:2 : does not exist [ 191.260198][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.285733][ T6534] usb 4-1: USB disconnect, device number 4 [ 191.294885][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.342064][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.380069][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.416400][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.461861][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.493525][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.504524][ T6531] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.522135][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.535410][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.597954][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.631593][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 191.650741][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 191.683909][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.711204][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.734520][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.766656][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.792235][ T6531] usb 5-1: Using ep0 maxpacket: 16 [ 191.801596][ T7243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.834948][ T7243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.906767][ T7243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.928351][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 191.942022][ T6531] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 191.953409][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 191.963456][ T6531] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 191.987713][ T7243] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.002860][ T6531] usb 5-1: config 0 has no interface number 0 [ 192.011233][ T7243] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.026438][ T7243] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.038893][ T7243] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.202260][ T6531] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 192.211365][ T6531] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.271764][ T6531] usb 5-1: Product: syz [ 192.275989][ T6531] usb 5-1: Manufacturer: syz [ 192.280611][ T6531] usb 5-1: SerialNumber: syz [ 192.321944][ T6531] usb 5-1: config 0 descriptor?? [ 192.346750][ T4961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.394499][ T4961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.440652][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.503445][ T4961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.552308][ T4961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.559891][ T3082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.637086][ T6535] usb 5-1: USB disconnect, device number 5 [ 193.525887][ T7537] loop7: detected capacity change from 0 to 512 [ 193.652436][ T7537] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 193.704459][ T7537] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 193.866987][ T7537] EXT4-fs (loop7): 1 truncate cleaned up [ 193.874064][ T7537] EXT4-fs (loop7): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,bsdgroups,grpjquota=,,errors=continue. Quota mode: none. [ 194.073353][ T7553] loop6: detected capacity change from 0 to 256 [ 194.150075][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.156531][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.198557][ T7553] exfat: Deprecated parameter 'utf8' [ 194.211330][ T7553] exfat: Deprecated parameter 'utf8' [ 194.259274][ T7553] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 194.327117][ T7553] exFAT-fs (loop6): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 194.682696][ T7569] loop5: detected capacity change from 0 to 7 [ 194.762572][ T7577] netlink: 'syz.3.948': attribute type 1 has an invalid length. [ 194.767753][ T7569] loop5: [ 194.781835][ T7569] loop5: partition table partially beyond EOD, truncated [ 194.919837][ T7577] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.955749][ T7584] bond2: (slave geneve2): making interface the new active one [ 194.967654][ T7584] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 194.984939][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 195.056512][ T7589] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.279981][ T7584] syz.3.948 (7584) used greatest stack depth: 19520 bytes left [ 195.428725][ T7609] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.956'. [ 196.170169][ T7644] loop4: detected capacity change from 0 to 8 [ 196.287306][ T7644] squashfs image failed sanity check [ 196.774591][ T7660] loop7: detected capacity change from 0 to 2048 [ 196.970487][ T7660] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.005947][ T7665] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 197.014456][ T7665] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 198.221484][ T7682] loop3: detected capacity change from 0 to 32768 [ 198.368283][ T7682] XFS (loop3): Mounting V5 Filesystem [ 198.605282][ T7682] XFS (loop3): Ending clean mount [ 199.158134][ T4189] XFS (loop3): Unmounting Filesystem [ 199.176829][ T7695] loop7: detected capacity change from 0 to 32768 [ 199.269185][ T7731] netlink: 'syz.6.981': attribute type 27 has an invalid length. [ 199.426291][ T7695] XFS (loop7): Mounting V5 Filesystem [ 199.575665][ T7695] XFS (loop7): Ending clean mount [ 199.584405][ T7695] XFS (loop7): Quotacheck needed: Please wait. [ 199.646452][ T7695] XFS (loop7): Quotacheck: Done. [ 200.129045][ T6717] XFS (loop7): Unmounting Filesystem [ 200.166254][ T6531] libceph: connect (1)[c::]:6789 error -101 [ 200.175887][ T6531] libceph: mon0 (1)[c::]:6789 connect error [ 200.213297][ T7746] ceph: No mds server is up or the cluster is laggy [ 200.482185][ T7751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.500630][ T7731] bridge0: port 3(syz_tun) entered disabled state [ 200.631305][ T7731] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.638824][ T7731] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.733535][ T7754] loop3: detected capacity change from 0 to 2048 [ 200.878083][ T7754] EXT4-fs (loop3): mounted filesystem without journal. Opts: nogrpid,noload,,errors=continue. Quota mode: none. [ 200.930812][ T7753] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 200.950681][ T7753] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 200.965767][ T7753] EXT4-fs (loop3): This should not happen!! Data will be lost [ 200.965767][ T7753] [ 200.975797][ T7753] EXT4-fs (loop3): Total free blocks count 0 [ 200.981884][ T7753] EXT4-fs (loop3): Free/Dirty block details [ 200.996724][ T7753] EXT4-fs (loop3): free_blocks=4096 [ 201.002635][ T7753] EXT4-fs (loop3): dirty_blocks=16 [ 201.007792][ T7753] EXT4-fs (loop3): Block reservation details [ 201.014389][ T7753] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 201.045936][ T7754] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 201.065592][ T7754] EXT4-fs (loop3): This should not happen!! Data will be lost [ 201.065592][ T7754] [ 201.975956][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.029573][ T7731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.657434][ T7731] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.666713][ T7731] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.676011][ T7731] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.685221][ T7731] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.837616][ T7736] netlink: 'syz.6.981': attribute type 27 has an invalid length. [ 202.886450][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.893849][ T7736] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 202.903339][ T7736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.913447][ T7736] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.924492][ T7736] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 202.962323][ T7752] mac80211_hwsim hwsim19 wlan1: disabling HT/VHT/HE as WMM/QoS is not supported by the AP [ 202.980110][ T7752] wlan1: No legacy rates in association response [ 203.069955][ T7775] netlink: 'syz.4.989': attribute type 16 has an invalid length. [ 203.085597][ T7775] netlink: 'syz.4.989': attribute type 17 has an invalid length. [ 203.119099][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.129897][ T7775] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.145703][ T7775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.162277][ T7784] netlink: 'syz.7.992': attribute type 1 has an invalid length. [ 203.720405][ T7828] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 203.730556][ T7830] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.740359][ T7830] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.749925][ T7830] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.758697][ T7830] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.843894][ T7830] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.853153][ T7830] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.862120][ T7830] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.871019][ T7830] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.994188][ T7832] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.003157][ T7832] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.011997][ T7832] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.020803][ T7832] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 204.092573][ T7832] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.101573][ T7832] netdevsim netdevsim8 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.110853][ T7832] netdevsim netdevsim8 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.119829][ T7832] netdevsim netdevsim8 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.219338][ T7846] gre0: Caught tx_queue_len zero misconfig [ 204.238982][ T6009] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 204.544259][ T7855] loop3: detected capacity change from 0 to 256 [ 204.611419][ T7855] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 205.693669][ T7898] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.1022'. [ 205.716423][ T7898] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1022'. [ 206.117727][ T4961] device hsr_slave_0 left promiscuous mode [ 206.130982][ T4961] device hsr_slave_1 left promiscuous mode [ 206.148880][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.175952][ T4961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.234394][ T4961] device bridge_slave_1 left promiscuous mode [ 206.251622][ T4961] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.276670][ T4961] device bridge_slave_0 left promiscuous mode [ 206.298440][ T4961] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.386693][ T4961] bond1 (unregistering): Released all slaves [ 206.907371][ T4961] team0 (unregistering): Port device team_slave_1 removed [ 206.949997][ T4961] team0 (unregistering): Port device team_slave_0 removed [ 206.995075][ T4961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.056727][ T4961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.428942][ T4961] bond0 (unregistering): Released all slaves [ 207.521941][ T7911] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1025'. [ 207.593971][ T7911] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.601351][ T7911] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.639636][ T7912] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1025'. [ 208.182002][ T7943] device veth0_macvtap left promiscuous mode [ 208.408173][ T7950] loop6: detected capacity change from 0 to 128 [ 208.575274][ T7950] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 208.616822][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 208.652042][ T7950] ext4 filesystem being mounted at /76/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 208.764305][ T7950] syz.6.1036 (pid 7950) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 210.540120][ T7961] loop8: detected capacity change from 0 to 40427 [ 210.614039][ T7961] F2FS-fs (loop8): invalid crc value [ 210.677333][ T7961] F2FS-fs (loop8): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 210.962698][ T7961] F2FS-fs (loop8): Start checkpoint disabled! [ 211.076611][ T7961] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 211.376150][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1050'. [ 211.694703][ T4964] attempt to access beyond end of device [ 211.694703][ T4964] loop8: rw=2049, want=45112, limit=40427 [ 211.712063][ T6537] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.805594][ T8028] loop3: detected capacity change from 0 to 512 [ 211.981899][ T6537] usb 5-1: Using ep0 maxpacket: 16 [ 212.078555][ T8028] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 212.102466][ T6537] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 212.161736][ T6537] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.195717][ T8028] ext4 filesystem being mounted at /224/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.231265][ T6537] usb 5-1: config 0 has no interface number 0 [ 212.472064][ T6537] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 212.506866][ T6537] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.541728][ T6537] usb 5-1: Product: syz [ 212.546936][ T6537] usb 5-1: Manufacturer: syz [ 212.562521][ T6537] usb 5-1: SerialNumber: syz [ 212.580582][ T6537] usb 5-1: config 0 descriptor?? [ 212.634245][ T6537] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 212.655043][ T6537] usb 5-1: No valid video chain found. [ 212.826510][ T8041] overlayfs: failed to resolve './file0': -2 [ 212.851541][ T6534] usb 5-1: USB disconnect, device number 6 [ 213.149241][ T8050] input: syz1 as /devices/virtual/input/input10 [ 216.140153][ T26] audit: type=1800 audit(1785513156.308:14): pid=8110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1074" name="UDC" dev="configfs" ino=52401 res=0 errno=0 [ 216.181461][ T8110] udc dummy_udc.0: failed to start g1: -19 [ 216.496564][ T8123] netlink: 'syz.6.1078': attribute type 4 has an invalid length. [ 217.171872][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 217.228386][ T8155] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 217.322940][ T8155] overlayfs: failed to resolve './file0': -2 [ 217.444727][ T8165] loop4: detected capacity change from 0 to 512 [ 217.573531][ T8165] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 217.589101][ T8165] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.819767][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1091'. [ 217.941914][ T8183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1091'. [ 217.977387][ T4194] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 218.067023][ T4194] EXT4-fs error (device loop4): ext4_lookup:1858: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 218.437346][ T8194] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1081'. [ 218.543422][ T8194] device syzkaller1 entered promiscuous mode [ 218.578773][ T8194] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.788950][ T8205] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1096'. [ 218.855804][ T8205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.982323][ T8208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.014107][ T8208] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 219.026934][ T8208] bond3: (slave wireguard0): Error -95 calling set_mac_address [ 219.468693][ T8222] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3979591798 (509387750144 ns) > initial count (364801339648 ns). Using initial count to start timer. [ 220.752331][ T8263] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.945809][ T8265] lo speed is unknown, defaulting to 1000 [ 221.389767][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 221.524570][ T8299] loop7: detected capacity change from 0 to 128 [ 221.616779][ T8299] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 221.638113][ T8265] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.660673][ T8265] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.678827][ T8265] device bridge_slave_0 entered promiscuous mode [ 221.690362][ T8265] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.711764][ T8265] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.720120][ T8299] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.799800][ T8265] device bridge_slave_1 entered promiscuous mode [ 221.960198][ T8318] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1121'. [ 222.039685][ T8265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.056045][ T8299] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.1119: No space for directory leaf checksum. Please run e2fsck -D. [ 222.087414][ T4344] udevd[4344]: incorrect ext4 checksum on /dev/loop7 [ 222.131933][ T8299] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.1119: checksumming directory block 0 [ 222.162677][ T8321] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #2: comm syz.7.1119: No space for directory leaf checksum. Please run e2fsck -D. [ 222.217723][ T8323] device syzkaller1 entered promiscuous mode [ 222.232676][ T8265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.265787][ T8321] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #2: comm syz.7.1119: checksumming directory block 0 [ 222.474282][ T8265] team0: Port device team_slave_0 added [ 222.480900][ T8331] tipc: Started in network mode [ 222.487947][ T8331] tipc: Node identity 8e30ed8ff29a, cluster identity 4711 [ 222.511966][ T8331] tipc: Enabled bearer , priority 0 [ 222.628595][ T8339] device syzkaller0 entered promiscuous mode [ 222.663200][ T8265] team0: Port device team_slave_1 added [ 222.767436][ T8327] tipc: Resetting bearer [ 222.855760][ T8327] tipc: Disabling bearer [ 222.858047][ T6004] Bluetooth: hci4: command 0x0409 tx timeout [ 222.884997][ T8347] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1127'. [ 222.910371][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.927606][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.956282][ T8265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.975809][ T8265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.983307][ T8265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.010437][ T8265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.054684][ T8265] device hsr_slave_0 entered promiscuous mode [ 223.067801][ T8265] device hsr_slave_1 entered promiscuous mode [ 223.079567][ T8356] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.1131'. [ 223.522483][ T8265] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 223.554064][ T8265] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 223.607502][ T8265] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 223.647416][ T8265] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 223.672234][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 223.852627][ T8265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.916175][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 223.926254][ T8392] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 223.943172][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 223.970170][ T8265] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.977124][ T21] usb 7-1: Using ep0 maxpacket: 16 [ 224.006347][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.021494][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.040224][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.047428][ T4957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.069932][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.085623][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.099201][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.120148][ T4247] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.127378][ T4247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.142028][ T21] usb 7-1: config 9 has an invalid interface number: 7 but max is 1 [ 224.150078][ T21] usb 7-1: config 9 has an invalid interface number: 242 but max is 1 [ 224.172549][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.183963][ T21] usb 7-1: config 9 has no interface number 0 [ 224.190078][ T21] usb 7-1: config 9 has no interface number 1 [ 224.201287][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.206394][ T21] usb 7-1: config 9 interface 7 has no altsetting 0 [ 224.231724][ T21] usb 7-1: config 9 interface 242 has no altsetting 0 [ 224.244539][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 224.291498][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 224.320237][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 224.349567][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 224.364935][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 224.381479][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 224.391222][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 224.421965][ T21] usb 7-1: New USB device found, idVendor=1199, idProduct=68aa, bcdDevice=20.ea [ 224.431048][ T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.440728][ T8265] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.471754][ T21] usb 7-1: Product: syz [ 224.476015][ T21] usb 7-1: Manufacturer: syz [ 224.480634][ T21] usb 7-1: SerialNumber: syz [ 224.485948][ T8265] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 224.505271][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 224.519116][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 224.836164][ T21] usb 7-1: Expected 3 endpoints, found: 0 [ 224.893401][ T21] sierra 7-1:9.242: Sierra USB modem converter detected [ 224.927946][ T8265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.937515][ T21] usb 7-1: Sierra USB modem converter now attached to ttyUSB0 [ 224.946565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 224.962990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 224.988053][ T6534] Bluetooth: hci4: command 0x041b tx timeout [ 225.002051][ T21] usb 7-1: USB disconnect, device number 3 [ 225.043802][ T21] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 225.100021][ T21] sierra 7-1:9.242: device disconnected [ 225.257486][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1141'. [ 225.387812][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 225.397065][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 225.468949][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 225.494410][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 225.523466][ T8265] device veth0_vlan entered promiscuous mode [ 225.538831][ T8265] device veth1_vlan entered promiscuous mode [ 225.546382][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 225.555958][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 225.565449][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 225.599733][ T8436] sctp: [Deprecated]: syz.6.1142 (pid 8436) Use of int in maxseg socket option. [ 225.599733][ T8436] Use struct sctp_assoc_value instead [ 225.644638][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 225.673344][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 225.724136][ T8265] device veth0_macvtap entered promiscuous mode [ 225.766219][ T8265] device veth1_macvtap entered promiscuous mode [ 225.852548][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.908558][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.919136][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.930238][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.940426][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.961621][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.975579][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.989605][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.033550][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.084904][ T8443] lo speed is unknown, defaulting to 1000 [ 226.091166][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.152804][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 226.168807][ T8452] loop6: detected capacity change from 0 to 2048 [ 226.174134][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 226.192309][ T21] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 226.213577][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 226.236002][ T8452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.302185][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.329943][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.340175][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.360746][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.371152][ T8265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.390869][ T8265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.420960][ T8265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.451050][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.462423][ T21] usb 8-1: Using ep0 maxpacket: 32 [ 226.472803][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.497582][ T8265] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.521733][ T8265] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.530491][ T8265] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.553319][ T8265] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.681985][ T21] usb 8-1: unable to get BOS descriptor or descriptor too short [ 226.689750][ T21] usb 8-1: no configurations [ 226.712111][ T21] usb 8-1: can't read configurations, error -22 [ 226.789365][ T4957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.811701][ T4957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.847139][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.890426][ T4964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.904092][ T4964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.940904][ T4247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.012243][ T6537] Bluetooth: hci4: command 0x040f tx timeout [ 227.145752][ T8462] netlink: 84 bytes leftover after parsing attributes in process `syz.9.1107'. [ 227.831825][ T6534] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 228.065177][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1155'. [ 228.222164][ T6534] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.244821][ T8466] loop7: detected capacity change from 0 to 40427 [ 228.252388][ T6534] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 228.352363][ T8494] sctp: [Deprecated]: syz.6.1156 (pid 8494) Use of int in max_burst socket option deprecated. [ 228.352363][ T8494] Use struct sctp_assoc_value instead [ 228.383049][ T8466] F2FS-fs (loop7): Invalid log_blocksize (64), supports only 12 [ 228.411202][ T8466] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 228.444760][ T8466] F2FS-fs (loop7): invalid crc value [ 228.462265][ T6534] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.471473][ T6534] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.490641][ T6534] usb 9-1: Product: syz [ 228.495744][ T6534] usb 9-1: Manufacturer: syz [ 228.501021][ T8466] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 228.521741][ T6534] usb 9-1: SerialNumber: syz [ 228.593145][ T6534] cdc_mbim 9-1:1.0: skipping garbage [ 228.682896][ T8466] F2FS-fs (loop7): Cannot turn on quotas: -2 on 1 [ 228.731866][ T8466] F2FS-fs (loop7): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 228.800114][ T8476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.085054][ T8492] syz.6.1156 (8492) used greatest stack depth: 18880 bytes left [ 229.114366][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 229.247594][ T8513] tipc: Enabled bearer , priority 0 [ 229.274220][ T21] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 229.347237][ T8513] device syzkaller0 entered promiscuous mode [ 229.358059][ T3851] device veth0_macvtap entered promiscuous mode [ 229.452913][ T8512] tipc: Resetting bearer [ 229.474517][ T8476] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 229.493202][ T6534] cdc_mbim 9-1:1.0: setting tx_max = 16384 [ 229.503458][ T6534] cdc_mbim 9-1:1.0: cdc-wdm0: USB WDM device [ 229.561810][ T21] usb 10-1: Using ep0 maxpacket: 32 [ 229.612324][ T8512] tipc: Disabling bearer [ 229.649876][ T6534] cdc_mbim 9-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.8-1, CDC MBIM, 7a:00:94:06:21:79 [ 229.693829][ T21] usb 10-1: config 0 has an invalid interface number: 12 but max is 0 [ 229.710744][ T21] usb 10-1: config 0 has no interface number 0 [ 229.719747][ T21] usb 10-1: config 0 interface 12 has no altsetting 0 [ 229.902280][ T8524] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1161'. [ 229.921969][ T21] usb 10-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 229.937692][ T8524] bridge0: port 3(syz_tun) entered disabled state [ 229.944722][ T21] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.978907][ T21] usb 10-1: Product: syz [ 229.990278][ T21] usb 10-1: Manufacturer: syz [ 230.001802][ T21] usb 10-1: SerialNumber: syz [ 230.028033][ T21] usb 10-1: config 0 descriptor?? [ 230.039603][ T6537] usb 9-1: USB disconnect, device number 2 [ 230.050658][ T6537] cdc_mbim 9-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.8-1, CDC MBIM [ 230.081105][ T8524] device syz_tun left promiscuous mode [ 230.091821][ T8524] bridge0: port 3(syz_tun) entered disabled state [ 230.901756][ T5563] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 231.291806][ T5563] usb 9-1: unable to get BOS descriptor or descriptor too short [ 231.304182][ T5563] usb 9-1: no configurations [ 231.319883][ T5563] usb 9-1: can't read configurations, error -22 [ 232.232319][ T21] f81534 10-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 232.246767][ T21] f81534 10-1:0.12: f81534_find_config_idx: read failed: -71 [ 232.271482][ T21] f81534 10-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 232.297503][ T21] f81534: probe of 10-1:0.12 failed with error -71 [ 232.372690][ T21] usb 10-1: USB disconnect, device number 2 [ 232.610426][ T8608] overlayfs: statfs failed on './file0' [ 232.691278][ T8613] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 233.438941][ T8644] loop7: detected capacity change from 0 to 128 [ 233.763338][ T8627] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.770750][ T8627] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.811843][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 234.285415][ T8649] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 234.293723][ T8649] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 234.547457][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.571826][ T8627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.944986][ T8627] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.954020][ T8627] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.964084][ T8627] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.973968][ T8627] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.324282][ T26] audit: type=1326 audit(1785513176.498:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8689 comm="syz.6.1193" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ae8c98019 code=0x0 [ 236.435527][ T8693] team0: Port device team_slave_1 removed [ 236.707618][ T8706] device macvtap1 entered promiscuous mode [ 236.723513][ T8706] device vlan0 entered promiscuous mode [ 236.730817][ T8706] team0: Device macvtap1 failed to register rx_handler [ 236.751543][ T8706] device vlan0 left promiscuous mode [ 237.640559][ T8726] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 237.921400][ T8734] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1207'. [ 238.140717][ T8736] IPVS: Scheduler module ip_vs_sip not found [ 238.441209][ T8742] lo speed is unknown, defaulting to 1000 [ 238.588918][ T8751] capability: warning: `syz.8.1212' uses deprecated v2 capabilities in a way that may be insecure [ 238.756723][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 238.960644][ T8761] kvm: pic: level sensitive irq not supported [ 238.963274][ T8761] kvm: pic: single mode not supported [ 238.985948][ T8761] kvm: pic: level sensitive irq not supported [ 239.017039][ T8761] kvm: pic: single mode not supported [ 239.030158][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.062498][ T8761] kvm: pic: level sensitive irq not supported [ 239.064318][ T8761] kvm: pic: single mode not supported [ 239.070501][ T8761] kvm: pic: level sensitive irq not supported [ 239.077570][ T8761] kvm: pic: single mode not supported [ 239.121609][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.191503][ T8742] device bridge_slave_0 entered promiscuous mode [ 239.312825][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.323265][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.331350][ T8742] device bridge_slave_1 entered promiscuous mode [ 239.340276][ T8774] batman_adv: batadv0: Adding interface: dummy0 [ 239.348419][ T8774] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.375567][ T8774] batman_adv: batadv0: Interface activated: dummy0 [ 239.393985][ T8775] batadv0: mtu less than device minimum [ 239.401187][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.414440][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.426330][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.438910][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.450846][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.463096][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.475240][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.487290][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.499427][ T8775] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 239.577098][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.635917][ T4247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.650674][ T4247] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.674556][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.696528][ T8777] netlink: 'syz.6.1221': attribute type 4 has an invalid length. [ 239.759860][ T8781] tipc: Enabling of bearer rejected, failed to enable media [ 239.805272][ T8783] loop6: detected capacity change from 0 to 512 [ 239.816010][ T8742] team0: Port device team_slave_0 added [ 239.822656][ C1] hrtimer: interrupt took 564744 ns [ 239.867481][ T8783] EXT4-fs (loop6): Ignoring removed oldalloc option [ 239.877207][ T4247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 239.925950][ T4247] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.951177][ T8783] EXT4-fs (loop6): mounted filesystem without journal. Opts: nolazytime,dioread_lock,oldalloc,block_validity,,errors=continue. Quota mode: writeback. [ 240.017324][ T8742] team0: Port device team_slave_1 added [ 240.066079][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.074735][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.100773][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.170459][ T8742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.226606][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.239730][ T4344] udevd[4344]: incorrect ext4 checksum on /dev/loop6 [ 240.246541][ T8783] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm syz.6.1223: Invalid inode table block 3757049630 in block_group 0 [ 240.279933][ T8783] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 240.289865][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.362730][ T4242] EXT4-fs error (device loop6): __ext4_get_inode_loc:4334: comm kworker/u4:5: Invalid inode table block 3757049630 in block_group 0 [ 240.382027][ T6517] Bluetooth: hci5: command 0x0409 tx timeout [ 240.413815][ T8742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.439803][ T4247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.451094][ T4247] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.588748][ T4247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 240.609935][ T4247] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.683978][ T8742] device hsr_slave_0 entered promiscuous mode [ 240.708009][ T8742] device hsr_slave_1 entered promiscuous mode [ 240.732556][ T8742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.760119][ T8742] Cannot create hsr debugfs directory [ 241.157269][ T4247] tipc: Disabling bearer [ 241.192747][ T4247] tipc: Left network mode [ 241.392912][ T8742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.668748][ T8742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.855251][ T8742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.116960][ T8838] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.141242][ T8838] team0: Port device bond1 added [ 242.297204][ T8742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.461901][ T6534] Bluetooth: hci5: command 0x041b tx timeout [ 242.949515][ T8859] loop9: detected capacity change from 0 to 16 [ 243.054180][ T8742] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.107049][ T8742] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.134361][ T8859] erofs: (device loop9): mounted with root inode @ nid 36. [ 243.228142][ T8859] attempt to access beyond end of device [ 243.228142][ T8859] loop9: rw=524288, want=1342177304, limit=16 [ 243.297294][ T8859] attempt to access beyond end of device [ 243.297294][ T8859] loop9: rw=0, want=1342177280, limit=16 [ 243.343602][ T8742] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.388781][ T26] audit: type=1800 audit(1785513183.558:16): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1239" name="file1" dev="loop9" ino=86 res=0 errno=0 [ 243.485316][ T8742] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.553277][ T8858] attempt to access beyond end of device [ 243.553277][ T8858] loop9: rw=0, want=1342177280, limit=16 [ 243.608050][ T8885] lo speed is unknown, defaulting to 1000 [ 243.633339][ T8858] attempt to access beyond end of device [ 243.633339][ T8858] loop9: rw=0, want=1342177280, limit=16 [ 243.747192][ T8859] attempt to access beyond end of device [ 243.747192][ T8859] loop9: rw=0, want=1342177280, limit=16 [ 243.772632][ T8859] attempt to access beyond end of device [ 243.772632][ T8859] loop9: rw=0, want=1342177280, limit=16 [ 243.802085][ T8859] attempt to access beyond end of device [ 243.802085][ T8859] loop9: rw=0, want=1342177280, limit=16 [ 243.818471][ T8859] attempt to access beyond end of device [ 243.818471][ T8859] loop9: rw=0, want=1342177280, limit=16 [ 243.831829][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 243.866593][ T8858] attempt to access beyond end of device [ 243.866593][ T8858] loop9: rw=0, want=1342177280, limit=16 [ 243.948565][ T8858] attempt to access beyond end of device [ 243.948565][ T8858] loop9: rw=0, want=1342177280, limit=16 [ 243.951454][ T4247] device hsr_slave_0 left promiscuous mode [ 243.997519][ T4247] device hsr_slave_1 left promiscuous mode [ 244.032887][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.060876][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.091981][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 244.098274][ T4247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.119777][ T4247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.146513][ T4247] device bridge_slave_1 left promiscuous mode [ 244.190944][ T4247] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.280006][ T4247] device bridge_slave_0 left promiscuous mode [ 244.331877][ T13] usb 7-1: unable to get BOS descriptor or descriptor too short [ 244.339648][ T13] usb 7-1: no configurations [ 244.345757][ T4247] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.360140][ T13] usb 7-1: can't read configurations, error -22 [ 244.433942][ T4247] device veth1_macvtap left promiscuous mode [ 244.450270][ T4247] device veth0_macvtap left promiscuous mode [ 244.480822][ T4247] device veth0_vlan left promiscuous mode [ 244.532017][ T6537] Bluetooth: hci5: command 0x040f tx timeout [ 244.983850][ T4247] bond3 (unregistering): Released all slaves [ 245.031633][ T4247] bond2 (unregistering): (slave geneve2): Releasing active interface [ 245.055916][ T4247] bond2 (unregistering): Released all slaves [ 245.070735][ T4247] bond1 (unregistering): Released all slaves [ 245.578772][ T4247] team0 (unregistering): Port device team_slave_1 removed [ 245.648834][ T4247] team0 (unregistering): Port device team_slave_0 removed [ 245.677088][ T4247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.697734][ T4247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.808692][ T4247] bond0 (unregistering): Released all slaves [ 245.880013][ T8918] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.887474][ T8918] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.944012][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.951201][ T8921] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.958695][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.965847][ T8921] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.992188][ T8921] device bridge0 entered promiscuous mode [ 246.006905][ T4233] lo speed is unknown, defaulting to 1000 [ 246.106242][ T8742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.165028][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.179373][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.224704][ T8742] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.251636][ T8941] 9pnet_virtio: no channels available for device c::: [ 246.299018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.344408][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 246.392716][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.399863][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.497276][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 246.528601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 246.582479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 246.628398][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.635565][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.672172][ T6517] Bluetooth: hci5: command 0x0419 tx timeout [ 246.692565][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 246.764542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 246.904664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 246.937524][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.975580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 247.023175][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 247.089772][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 247.127490][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 247.150412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 247.175186][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 247.200978][ T8742] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 247.246591][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.896390][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.909288][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.939216][ T8742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.011919][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 248.028579][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 248.130180][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 248.158062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 248.233841][ T8742] device veth0_vlan entered promiscuous mode [ 248.264549][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 248.303218][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 248.338675][ T8742] device veth1_vlan entered promiscuous mode [ 248.464652][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 248.483284][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 248.549944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 248.616265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 248.643348][ T8742] device veth0_macvtap entered promiscuous mode [ 248.679530][ T9004] loop8: detected capacity change from 0 to 512 [ 248.720803][ T8742] device veth1_macvtap entered promiscuous mode [ 248.864706][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.876481][ T9004] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 248.962006][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.022181][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.097389][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.156377][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 249.215460][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.288906][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.356258][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 249.372221][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 249.442499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 249.484338][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 249.544582][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.651802][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.668158][ T8742] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 249.679925][ T8742] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 249.694931][ T8742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.714219][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 249.727777][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 249.771994][ T8742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.802985][ T8742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.829104][ T8742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.882955][ T8742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.337526][ T9038] netlink: 'syz.8.1281': attribute type 10 has an invalid length. [ 250.378019][ T9042] netlink: 'syz.8.1281': attribute type 11 has an invalid length. [ 250.445861][ T9038] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 250.543904][ T4974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.583185][ T4974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.691999][ T4242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.699874][ T4242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.767553][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 250.824460][ T9052] loop8: detected capacity change from 0 to 512 [ 250.833120][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 250.938555][ T9052] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 251.029204][ T9052] EXT4-fs (loop8): 1 truncate cleaned up [ 251.097308][ T9052] EXT4-fs (loop8): mounted filesystem without journal. Opts: init_itable=0x0000000000000004,dioread_nolock,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,nojournal_checksum,grpjquota=,,errors=continue. Quota mode: none. [ 251.289613][ T9021] chnl_net:caif_netlink_parms(): no params data found [ 251.338421][ T9071] EXT4-fs (loop8): pa ffff8880746c80e0: logic 131072, phys. 40, len 215 [ 251.347864][ T9071] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4904: group 0, free 159, pa_free 214 [ 251.662127][ T4233] Bluetooth: hci0: command 0x0409 tx timeout [ 251.784216][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.835011][ T9085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.955264][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.993735][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.047992][ T9021] device bridge_slave_0 entered promiscuous mode [ 252.206478][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.231976][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.240266][ T9021] device bridge_slave_1 entered promiscuous mode [ 252.272886][ T9095] netlink: 'syz.8.1293': attribute type 10 has an invalid length. [ 252.317344][ T9095] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.395217][ T9095] bond0: (slave team0): Enslaving as an active interface with an up link [ 252.442072][ T9097] batman_adv: batadv0: Adding interface: dummy0 [ 252.467445][ T9097] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.685974][ T9097] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 252.874478][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.971524][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.238927][ T9021] team0: Port device team_slave_0 added [ 253.293694][ T9021] team0: Port device team_slave_1 added [ 253.458670][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.499791][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.649402][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.742066][ T6517] Bluetooth: hci0: command 0x041b tx timeout [ 253.754024][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.825738][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.995314][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.136198][ T9134] netlink: 'syz.8.1302': attribute type 4 has an invalid length. [ 254.191889][ T5566] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 254.244968][ T9021] device hsr_slave_0 entered promiscuous mode [ 254.293657][ T9021] device hsr_slave_1 entered promiscuous mode [ 254.326336][ T9021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.357254][ T9021] Cannot create hsr debugfs directory [ 254.402361][ T9138] device bridge0 entered promiscuous mode [ 254.574327][ T5566] usb 7-1: config 0 has no interfaces? [ 254.732032][ T5566] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 254.756902][ T5566] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 254.796719][ T5566] usb 7-1: Product: syz [ 254.800955][ T5566] usb 7-1: Manufacturer: syz [ 254.852755][ T5566] usb 7-1: SerialNumber: syz [ 254.907572][ T5566] usb 7-1: config 0 descriptor?? [ 255.057064][ T9146] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 255.403050][ T9131] loop0: detected capacity change from 0 to 32768 [ 255.430477][ T5566] usb 7-1: USB disconnect, device number 6 [ 255.576198][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.582595][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.802016][ T9131] XFS (loop0): Mounting V5 Filesystem [ 256.083133][ T9131] XFS (loop0): Ending clean mount [ 256.103857][ T9131] XFS (loop0): Quotacheck needed: Please wait. [ 256.413395][ T9131] XFS (loop0): Quotacheck: Done. [ 256.701959][ T26] audit: type=1804 audit(1785513196.828:17): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1301" name="/newroot/2/file0/bus" dev="loop0" ino=9291 res=1 errno=0 [ 256.957554][ T9158] loop8: detected capacity change from 0 to 131072 [ 256.985284][ T4234] Bluetooth: hci0: command 0x040f tx timeout [ 257.000350][ T9178] loop9: detected capacity change from 0 to 128 [ 257.044053][ T9178] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 257.057254][ T9158] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0) [ 257.066144][ T9158] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 257.078767][ T9158] F2FS-fs (loop8): invalid crc value [ 257.127032][ T9158] F2FS-fs (loop8): Found nat_bits in checkpoint [ 257.134972][ T8742] XFS (loop0): Unmounting Filesystem [ 257.142225][ T9178] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.226776][ T9158] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 257.234964][ T9158] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 257.490381][ T144] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 257.557738][ T9178] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 258.555070][ T9021] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.614357][ T9021] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.636815][ T9021] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 258.697681][ T9021] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 258.792732][ T9212] netlink: 'syz.9.1317': attribute type 3 has an invalid length. [ 258.853913][ T9217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1319'. [ 259.003325][ T4199] block nbd0: Receive control failed (result -1) [ 259.026236][ T4233] Bluetooth: hci0: command 0x0419 tx timeout [ 259.302543][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.409630][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.493608][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 259.513002][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 259.580352][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 259.642788][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 259.698682][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.705901][ T4957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.747512][ T26] audit: type=1326 audit(1785513199.918:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9228 comm="syz.9.1322" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66b1104019 code=0x0 [ 259.776161][ T9227] netlink: 'syz.0.1310': attribute type 10 has an invalid length. [ 259.870307][ T9227] team0: Port device wlan1 added [ 259.915983][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 259.975179][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 259.991236][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 260.033741][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.040894][ T4957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.163909][ T4957] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 260.201390][ T4974] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 260.253110][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 260.280215][ T4229] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 260.318920][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 260.391031][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 260.412531][ T4229] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 260.444643][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 260.483821][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 260.603700][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 260.643145][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 260.713255][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 260.728147][ T9244] loop6: detected capacity change from 0 to 8192 [ 260.739483][ T9255] loop8: detected capacity change from 0 to 512 [ 260.770412][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 260.807228][ T9021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 260.878185][ T9255] EXT4-fs (loop8): 1 truncate cleaned up [ 260.892110][ T9255] EXT4-fs (loop8): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 261.185075][ T26] audit: type=1800 audit(1785513201.358:19): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1327" name="file1" dev="loop8" ino=13 res=0 errno=0 [ 261.738892][ T9269] ODEBUG: Out of memory. ODEBUG disabled [ 262.017099][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 262.032527][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.081468][ T9255] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1327: bg 0: block 465: padding at end of block bitmap is not set [ 262.153559][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.242732][ T9255] EXT4-fs (loop8): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 6 with error 28 [ 262.325228][ T9255] EXT4-fs (loop8): This should not happen!! Data will be lost [ 262.325228][ T9255] [ 262.336417][ T9255] EXT4-fs (loop8): Total free blocks count 0 [ 262.361973][ T9255] EXT4-fs (loop8): Free/Dirty block details [ 262.451896][ T9255] EXT4-fs (loop8): free_blocks=0 [ 262.457310][ T9255] EXT4-fs (loop8): dirty_blocks=6 [ 262.541352][ T9288] netlink: 'syz.6.1333': attribute type 10 has an invalid length. [ 262.549642][ T9255] EXT4-fs (loop8): Block reservation details [ 262.632016][ T9255] EXT4-fs (loop8): i_reserved_data_blocks=6 [ 262.695552][ T9288] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 262.848086][ T9264] loop0: detected capacity change from 0 to 32768 [ 263.002222][ T9264] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 263.064427][ T9264] JBD2: Ignoring recovery information on journal [ 263.212688][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 263.240923][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 263.344592][ T9264] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 263.432222][ T9021] device veth0_vlan entered promiscuous mode [ 263.465334][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 263.485493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 263.549096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 263.625400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 263.802280][ T9313] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.898142][ T9021] device veth1_vlan entered promiscuous mode [ 264.116636][ T9315] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.142702][ T8742] ocfs2: Unmounting device (7,0) on (node local) [ 264.332635][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 264.352709][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 264.402761][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 264.425357][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 264.471894][ T9021] device veth0_macvtap entered promiscuous mode [ 264.563863][ T9021] device veth1_macvtap entered promiscuous mode [ 264.696190][ T9315] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.848124][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.882358][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.921709][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 264.956135][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 264.989567][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.018881][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.048883][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.079704][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.120761][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.175525][ T9315] bond0: (slave netdevsim0): Releasing backup interface [ 265.199157][ T9315] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.259945][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 265.276512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 265.287064][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 265.303969][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 265.322986][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.344691][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.366012][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.385688][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.399308][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.420312][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.453030][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.508458][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 265.534505][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 265.566575][ T9021] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.612949][ T9021] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.645739][ T9021] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.676968][ T9021] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.958155][ T9315] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.001158][ T9315] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.026203][ T9315] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.055965][ T9315] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.278654][ T4957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.295352][ T4957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.352492][ T4964] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 266.476375][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.529658][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.541066][ T9371] loop8: detected capacity change from 0 to 1024 [ 266.559788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 266.753024][ T9371] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 266.858848][ T9384] fuse: Bad value for 'fd' [ 267.038361][ T9389] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1350'. [ 267.207526][ T9394] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 267.816968][ T9379] loop5: detected capacity change from 0 to 32768 [ 267.950590][ T9379] JBD2: Ignoring recovery information on journal [ 268.139155][ T9379] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 268.204538][ T9420] mmap: syz.0.1353 (9420) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 268.371818][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 268.382656][ T9379] loop_set_status: loop5 () has still dirty pages (nrpages=5) [ 268.842258][ T9021] ocfs2: Unmounting device (7,5) on (node local) [ 269.790460][ T9452] netlink: 'syz.5.1360': attribute type 11 has an invalid length. [ 269.829238][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1361'. [ 270.063098][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1362'. [ 270.184961][ T9462] device bridge0 entered promiscuous mode [ 270.759587][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1367'. [ 271.684353][ T9504] loop8: detected capacity change from 0 to 1024 [ 272.193761][ T9509] loop0: detected capacity change from 0 to 2048 [ 273.017064][ T5565] Bluetooth: hci2: command 0x0406 tx timeout [ 273.123935][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 273.463156][ T9547] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1381'. [ 274.236132][ T9566] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1387'. [ 274.302185][ T9567] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1387'. [ 274.339139][ T9566] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 276.023946][ T9624] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.1406'. [ 276.163270][ T9632] loop0: detected capacity change from 0 to 512 [ 276.279936][ T9632] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 276.311592][ T9638] "syz.8.1409" (9638) uses obsolete ecb(arc4) skcipher [ 277.235576][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.243680][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.365997][ T9671] device bridge_slave_1 left promiscuous mode [ 277.399763][ T9671] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.463216][ T9671] device bridge_slave_0 left promiscuous mode [ 277.472778][ T9671] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.790133][ T9685] net_ratelimit: 10 callbacks suppressed [ 277.790223][ T9685] Set syz0 is full, maxelem 0 reached [ 278.142904][ T6531] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 278.553171][ T6531] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 278.599746][ T6531] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 278.833001][ T6531] usb 9-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 278.860105][ T6531] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.895268][ T6531] usb 9-1: Product: syz [ 278.912563][ T6531] usb 9-1: Manufacturer: syz [ 278.937311][ T6531] usb 9-1: SerialNumber: syz [ 279.006230][ T6531] usb 9-1: config 0 descriptor?? [ 279.288625][ T9685] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 280.392558][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 280.404366][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 280.455047][ T9747] ceph: No mds server is up or the cluster is laggy [ 280.728192][ T4229] libceph: connect (1)[c::]:6789 error -101 [ 280.762669][ T4229] libceph: mon0 (1)[c::]:6789 connect error [ 280.823063][ T5565] usb 9-1: USB disconnect, device number 5 [ 280.957906][ T9766] netlink: 'syz.6.1436': attribute type 1 has an invalid length. [ 281.050156][ T9759] bond2: (slave geneve2): Error -99 calling set_mac_address [ 281.447148][ T9776] binder: 9775:9776 ioctl c0306201 200000000080 returned -14 [ 281.501263][ T9780] binder: 9775:9780 ioctl c0306201 2000000003c0 returned -14 [ 282.607552][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1448'. [ 283.224378][ T9829] tipc: Failed to remove unknown binding: 66,0,0/0:1737096498/1737096499 [ 283.791454][ T9843] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1455'. [ 284.401604][ T26] audit: type=1804 audit(1785513224.568:20): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1457" name="/newroot/197/file0" dev="fuse" ino=1 res=1 errno=0 [ 284.766940][ T9877] sch_tbf: burst 19872 is lower than device lo mtu (270008338) ! [ 284.835295][ T9881] sch_tbf: burst 593 is lower than device lo mtu (270008338) ! [ 286.111704][ T5566] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 286.351810][ T5566] usb 7-1: Using ep0 maxpacket: 32 [ 286.457776][ T9773] Set syz1 is full, maxelem 65536 reached [ 286.472212][ T5566] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 286.490495][ T5566] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.531747][ T5566] usb 7-1: config 0 has no interface number 0 [ 286.692038][ T5566] usb 7-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 286.721595][ T5566] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.729935][ T5566] usb 7-1: Product: syz [ 286.734628][ T5566] usb 7-1: Manufacturer: syz [ 286.739255][ T5566] usb 7-1: SerialNumber: syz [ 286.767354][ T9928] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 286.789698][ T5566] usb 7-1: config 0 descriptor?? [ 286.854314][ T5566] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 286.881444][ T5566] input: xirlink-cit as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 286.933388][ T1110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 287.073906][ T5566] usb 7-1: USB disconnect, device number 7 [ 287.291916][ T1110] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 287.310868][ T1110] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 287.361891][ T1110] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 287.384579][ T1110] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 287.416343][ T1110] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 287.581988][ T1110] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 287.601492][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 287.642006][ T1110] usb 6-1: Product: syz [ 287.669580][ T1110] usb 6-1: Manufacturer: syz [ 287.753121][ T1110] cdc_wdm 6-1:1.0: skipping garbage [ 287.758412][ T1110] cdc_wdm 6-1:1.0: skipping garbage [ 287.785716][ T1110] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 287.797419][ T1110] cdc_wdm 6-1:1.0: Unknown control protocol [ 288.139924][ T1110] usb 6-1: USB disconnect, device number 2 [ 288.145917][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 288.145989][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 288.146010][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 288.572712][ T6531] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 288.832728][ T6531] usb 9-1: Using ep0 maxpacket: 16 [ 288.940495][ T9979] Mass Storage Function, version: 2009/09/11 [ 288.953029][ T6531] usb 9-1: config 0 interface 0 has no altsetting 0 [ 288.960211][ T6531] usb 9-1: New USB device found, idVendor=056a, idProduct=010d, bcdDevice= 0.00 [ 289.009327][ T6531] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.019219][ T9979] LUN: removable file: (no medium) [ 289.063585][ T6531] usb 9-1: config 0 descriptor?? [ 289.086620][ T9979] udc dummy_udc.0: failed to start g1: -19 [ 289.563148][ T6531] wacom 0003:056A:010D.0005: unknown main item tag 0x0 [ 289.570589][ T6531] wacom 0003:056A:010D.0005: unknown main item tag 0x0 [ 289.643147][ T6531] wacom 0003:056A:010D.0005: unknown main item tag 0x0 [ 289.651034][ T6531] wacom 0003:056A:010D.0005: unknown main item tag 0x0 [ 289.671190][ T6531] wacom 0003:056A:010D.0005: unknown main item tag 0x0 [ 289.695435][ T6531] wacom 0003:056A:010D.0005: ignoring exceeding usage max [ 289.710087][T10000] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1489'. [ 289.754463][ T6531] wacom 0003:056A:010D.0005: hidraw0: USB HID v20.81 Device [HID 056a:010d] on usb-dummy_hcd.8-1/input0 [ 289.790325][ T6531] usb 9-1: USB disconnect, device number 6 [ 290.046841][ C0] ================================================================== [ 290.055726][ C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150 [ 290.063472][ C0] Read of size 2 at addr ffff88807bc68e40 by task syz.5.1491/10008 [ 290.071423][ C0] [ 290.073791][ C0] CPU: 0 PID: 10008 Comm: syz.5.1491 Not tainted syzkaller #0 [ 290.081276][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 290.091363][ C0] Call Trace: [ 290.094723][ C0] [ 290.097631][ C0] dump_stack_lvl+0x188/0x250 [ 290.102476][ C0] ? show_regs_print_info+0x20/0x20 [ 290.107712][ C0] ? _printk+0xda/0x130 [ 290.112048][ C0] ? __nft_trace_packet+0x135/0x150 [ 290.117284][ C0] ? load_image+0x410/0x410 [ 290.121830][ C0] print_address_description+0x60/0x2d0 [ 290.127413][ C0] ? __nft_trace_packet+0x135/0x150 [ 290.132645][ C0] kasan_report+0xdf/0x130 [ 290.137207][ C0] ? __nft_trace_packet+0x135/0x150 [ 290.142465][ C0] __nft_trace_packet+0x135/0x150 [ 290.147538][ C0] nft_do_chain+0x1299/0x14d0 [ 290.152243][ C0] ? 0xffffffffa0028000 [ 290.156430][ C0] ? mark_lock+0x94/0x320 [ 290.160809][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 290.166754][ C0] ? lock_chain_count+0x20/0x20 [ 290.171728][ C0] ? nf_nat_inet_fn+0x8a0/0xad0 [ 290.176674][ C0] nft_do_chain_inet+0x25c/0x340 [ 290.181678][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 290.186603][ C0] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 290.192032][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 290.196951][ C0] nf_hook_slow+0xb9/0x200 [ 290.201454][ C0] ? NF_HOOK+0x390/0x390 [ 290.205781][ C0] NF_HOOK+0x1f2/0x390 [ 290.209896][ C0] ? NF_HOOK+0x390/0x390 [ 290.214180][ C0] ? ip_local_deliver+0x180/0x180 [ 290.219241][ C0] ? NF_HOOK+0x390/0x390 [ 290.223524][ C0] ? ip_local_deliver+0x107/0x180 [ 290.228582][ C0] ? ip_rcv_core+0xb30/0xb30 [ 290.233211][ C0] NF_HOOK+0x303/0x390 [ 290.237311][ C0] ? ip_rcv_core+0xb30/0xb30 [ 290.241937][ C0] ? ip_local_deliver+0x180/0x180 [ 290.246993][ C0] ? ip_rcv_core+0xb30/0xb30 [ 290.251616][ C0] ? ip_rcv_core+0x72c/0xb30 [ 290.256240][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 290.261903][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 290.267566][ C0] __netif_receive_skb+0xcc/0x290 [ 290.272648][ C0] process_backlog+0x366/0x770 [ 290.277453][ C0] ? rps_trigger_softirq+0x210/0x210 [ 290.282767][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.288798][ C0] ? lock_chain_count+0x20/0x20 [ 290.293701][ C0] __napi_poll+0xbb/0x430 [ 290.298064][ C0] net_rx_action+0x522/0xa80 [ 290.302700][ C0] ? net_tx_action+0x880/0x880 [ 290.307518][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 290.313545][ C0] ? lock_chain_count+0x20/0x20 [ 290.318453][ C0] handle_softirqs+0x336/0x830 [ 290.323354][ C0] ? do_softirq+0x142/0x210 [ 290.327919][ C0] ? do_softirq+0x210/0x210 [ 290.332464][ C0] do_softirq+0x142/0x210 [ 290.336820][ C0] [ 290.339831][ C0] [ 290.342848][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 290.348254][ C0] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 290.354267][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 290.359585][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 290.364928][ C0] ? local_bh_enable+0x5/0x20 [ 290.369633][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 290.374864][ C0] ? _local_bh_enable+0xa0/0xa0 [ 290.379770][ C0] ? ip_finish_output2+0x8c1/0x10e0 [ 290.385006][ C0] ip_finish_output2+0xd6e/0x10e0 [ 290.390066][ C0] ? ip_fragment+0x210/0x210 [ 290.394692][ C0] ? ip_finish_output+0x3e5/0x4b0 [ 290.399746][ C0] ip_output+0x2ba/0x3e0 [ 290.404045][ C0] __ip_queue_xmit+0x1207/0x1ce0 [ 290.409012][ C0] ? rcu_lock_release+0x20/0x20 [ 290.413938][ C0] __tcp_transmit_skb+0x1ca3/0x31e0 [ 290.419190][ C0] ? __tcp_send_ack+0x5d0/0x5d0 [ 290.424073][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 290.430427][ C0] ? memset+0x1e/0x40 [ 290.434450][ C0] ? tcp_rbtree_insert+0x114/0x170 [ 290.439609][ C0] ? tcp_connect+0x1fca/0x4970 [ 290.444435][ C0] tcp_connect+0x21bd/0x4970 [ 290.449112][ C0] tcp_v4_connect+0xf42/0x1990 [ 290.453991][ C0] ? tcp_twsk_unique+0x970/0x970 [ 290.458986][ C0] ? tcp_v6_connect+0x698/0x1a10 [ 290.464033][ C0] tcp_v6_connect+0xb07/0x1a10 [ 290.468843][ C0] ? verify_lock_unused+0x140/0x140 [ 290.474073][ C0] ? tcp_v6_pre_connect+0xf0/0xf0 [ 290.479148][ C0] ? mark_lock+0x94/0x320 [ 290.483519][ C0] __inet_stream_connect+0x244/0xd80 [ 290.488862][ C0] ? lock_chain_count+0x20/0x20 [ 290.493900][ C0] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 290.499928][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 290.505343][ C0] ? inet_dgram_connect+0x340/0x340 [ 290.510582][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 290.515981][ C0] ? _local_bh_enable+0xa0/0xa0 [ 290.520875][ C0] inet_stream_connect+0x62/0xa0 [ 290.525837][ C0] ? __inet_stream_connect+0xd80/0xd80 [ 290.531331][ C0] __sys_connect+0x3cb/0x450 [ 290.536060][ C0] ? __sys_connect_file+0x170/0x170 [ 290.541308][ C0] __x64_sys_connect+0x76/0x80 [ 290.546109][ C0] do_syscall_64+0x4c/0xa0 [ 290.550570][ C0] ? clear_bhb_loop+0x30/0x80 [ 290.555338][ C0] ? clear_bhb_loop+0x30/0x80 [ 290.560049][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.565985][ C0] RIP: 0033:0x7f84580e6019 [ 290.570425][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.590280][ C0] RSP: 002b:00007f845633e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 290.598783][ C0] RAX: ffffffffffffffda RBX: 00007f845836dfa0 RCX: 00007f84580e6019 [ 290.606784][ C0] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000005 [ 290.614787][ C0] RBP: 00007f845817d00c R08: 0000000000000000 R09: 0000000000000000 [ 290.622795][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.630791][ C0] R13: 00007f845836e038 R14: 00007f845836dfa0 R15: 00007ffedd5be728 [ 290.638937][ C0] [ 290.641976][ C0] [ 290.644323][ C0] Allocated by task 10008: [ 290.648846][ C0] __kasan_slab_alloc+0x92/0xc0 [ 290.653726][ C0] slab_post_alloc_hook+0x4c/0x380 [ 290.658863][ C0] kmem_cache_alloc_node+0x184/0x2c0 [ 290.664182][ C0] __alloc_skb+0xf4/0x750 [ 290.668587][ C0] synproxy_send_client_synack+0x16c/0xd90 [ 290.674426][ C0] nft_synproxy_eval_v4+0x35f/0x4e0 [ 290.679919][ C0] nft_synproxy_do_eval+0x32e/0x550 [ 290.685148][ C0] nft_do_chain+0x491/0x14d0 [ 290.689768][ C0] nft_do_chain_inet+0x25c/0x340 [ 290.694737][ C0] nf_hook_slow+0xb9/0x200 [ 290.699189][ C0] NF_HOOK+0x1f2/0x390 [ 290.703282][ C0] NF_HOOK+0x303/0x390 [ 290.707376][ C0] __netif_receive_skb+0xcc/0x290 [ 290.712428][ C0] process_backlog+0x366/0x770 [ 290.717221][ C0] __napi_poll+0xbb/0x430 [ 290.721758][ C0] net_rx_action+0x522/0xa80 [ 290.726377][ C0] handle_softirqs+0x336/0x830 [ 290.731158][ C0] do_softirq+0x142/0x210 [ 290.735521][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 290.740745][ C0] ip_finish_output2+0xd6e/0x10e0 [ 290.745794][ C0] ip_output+0x2ba/0x3e0 [ 290.750069][ C0] __ip_queue_xmit+0x1207/0x1ce0 [ 290.755031][ C0] __tcp_transmit_skb+0x1ca3/0x31e0 [ 290.760271][ C0] tcp_connect+0x21bd/0x4970 [ 290.764894][ C0] tcp_v4_connect+0xf42/0x1990 [ 290.769683][ C0] tcp_v6_connect+0xb07/0x1a10 [ 290.774482][ C0] __inet_stream_connect+0x244/0xd80 [ 290.779895][ C0] inet_stream_connect+0x62/0xa0 [ 290.784946][ C0] __sys_connect+0x3cb/0x450 [ 290.789562][ C0] __x64_sys_connect+0x76/0x80 [ 290.794352][ C0] do_syscall_64+0x4c/0xa0 [ 290.798796][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.804722][ C0] [ 290.807086][ C0] Freed by task 10008: [ 290.811190][ C0] kasan_set_track+0x4b/0x70 [ 290.815809][ C0] kasan_set_free_info+0x1f/0x40 [ 290.820780][ C0] ____kasan_slab_free+0xd5/0x110 [ 290.825826][ C0] slab_free_freelist_hook+0xec/0x170 [ 290.831230][ C0] kmem_cache_free+0x8f/0x210 [ 290.835930][ C0] nft_synproxy_eval_v4+0x367/0x4e0 [ 290.841164][ C0] nft_synproxy_do_eval+0x32e/0x550 [ 290.846407][ C0] nft_do_chain+0x491/0x14d0 [ 290.851018][ C0] nft_do_chain_inet+0x25c/0x340 [ 290.855978][ C0] nf_hook_slow+0xb9/0x200 [ 290.860431][ C0] NF_HOOK+0x1f2/0x390 [ 290.864531][ C0] NF_HOOK+0x303/0x390 [ 290.868623][ C0] __netif_receive_skb+0xcc/0x290 [ 290.873670][ C0] process_backlog+0x366/0x770 [ 290.878467][ C0] __napi_poll+0xbb/0x430 [ 290.882824][ C0] net_rx_action+0x522/0xa80 [ 290.887535][ C0] handle_softirqs+0x336/0x830 [ 290.892324][ C0] do_softirq+0x142/0x210 [ 290.896675][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 290.901895][ C0] ip_finish_output2+0xd6e/0x10e0 [ 290.906949][ C0] ip_output+0x2ba/0x3e0 [ 290.911217][ C0] __ip_queue_xmit+0x1207/0x1ce0 [ 290.916789][ C0] __tcp_transmit_skb+0x1ca3/0x31e0 [ 290.922019][ C0] tcp_connect+0x21bd/0x4970 [ 290.926636][ C0] tcp_v4_connect+0xf42/0x1990 [ 290.931430][ C0] tcp_v6_connect+0xb07/0x1a10 [ 290.936225][ C0] __inet_stream_connect+0x244/0xd80 [ 290.941535][ C0] inet_stream_connect+0x62/0xa0 [ 290.946499][ C0] __sys_connect+0x3cb/0x450 [ 290.951152][ C0] __x64_sys_connect+0x76/0x80 [ 290.955943][ C0] do_syscall_64+0x4c/0xa0 [ 290.960384][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 290.966310][ C0] [ 290.968653][ C0] The buggy address belongs to the object at ffff88807bc68dc0 [ 290.968653][ C0] which belongs to the cache skbuff_head_cache of size 232 [ 290.983324][ C0] The buggy address is located 128 bytes inside of [ 290.983324][ C0] 232-byte region [ffff88807bc68dc0, ffff88807bc68ea8) [ 290.996647][ C0] The buggy address belongs to the page: [ 291.002313][ C0] page:ffffea0001ef1a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bc68 [ 291.012485][ C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 291.020082][ C0] raw: 00fff00000000200 0000000000000000 0000000300000001 ffff888144bf0140 [ 291.028703][ C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 291.037307][ C0] page dumped because: kasan: bad access detected [ 291.043749][ C0] page_owner tracks the page as allocated [ 291.049485][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 1107, ts 131122932923, free_ts 131115843634 [ 291.067142][ C0] get_page_from_freelist+0x24f6/0x2670 [ 291.072814][ C0] __alloc_pages+0x1ee/0x480 [ 291.077437][ C0] new_slab+0xc0/0x4b0 [ 291.081538][ C0] ___slab_alloc+0x807/0xdd0 [ 291.086163][ C0] kmem_cache_alloc_node+0x118/0x2c0 [ 291.091470][ C0] __alloc_skb+0xf4/0x750 [ 291.095824][ C0] nsim_dev_trap_report_work+0x25c/0xab0 [ 291.101579][ C0] process_one_work+0x867/0xff0 [ 291.106517][ C0] worker_thread+0xad7/0x12a0 [ 291.111245][ C0] kthread+0x42e/0x520 [ 291.115345][ C0] ret_from_fork+0x1f/0x30 [ 291.119899][ C0] page last free stack trace: [ 291.124587][ C0] free_unref_page_prepare+0x637/0x6c0 [ 291.130070][ C0] free_unref_page+0x8f/0x2a0 [ 291.134783][ C0] __vunmap+0x8e0/0xa80 [ 291.139049][ C0] cleanup_entry+0x156/0x350 [ 291.143755][ C0] translate_table+0x1e09/0x2020 [ 291.148718][ C0] do_ip6t_set_ctl+0x96c/0xd90 [ 291.153508][ C0] nf_setsockopt+0x25f/0x280 [ 291.158179][ C0] ipv6_setsockopt+0x20ba/0x3cc0 [ 291.163151][ C0] rawv6_setsockopt+0x29e/0x660 [ 291.168034][ C0] __sys_setsockopt+0x2bf/0x3d0 [ 291.172916][ C0] __x64_sys_setsockopt+0xb1/0xc0 [ 291.177965][ C0] do_syscall_64+0x4c/0xa0 [ 291.182403][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.188329][ C0] [ 291.190674][ C0] Memory state around the buggy address: [ 291.196396][ C0] ffff88807bc68d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 291.204483][ C0] ffff88807bc68d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 291.212599][ C0] >ffff88807bc68e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 291.220681][ C0] ^ [ 291.226855][ C0] ffff88807bc68e80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc [ 291.235022][ C0] ffff88807bc68f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 291.243105][ C0] ================================================================== [ 291.251226][ C0] Disabling lock debugging due to kernel taint [ 291.257564][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 291.264779][ C0] CPU: 0 PID: 10008 Comm: syz.5.1491 Tainted: G B syzkaller #0 [ 291.273656][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 291.283826][ C0] Call Trace: [ 291.287137][ C0] [ 291.290022][ C0] dump_stack_lvl+0x188/0x250 [ 291.294733][ C0] ? show_regs_print_info+0x20/0x20 [ 291.299955][ C0] ? load_image+0x410/0x410 [ 291.304501][ C0] panic+0x2f8/0x850 [ 291.308435][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 291.312972][ C0] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 291.318894][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 291.324815][ C0] ? _raw_spin_unlock+0x40/0x40 [ 291.329702][ C0] ? print_memory_metadata+0x314/0x400 [ 291.335203][ C0] ? __nft_trace_packet+0x135/0x150 [ 291.340435][ C0] check_panic_on_warn+0x80/0xa0 [ 291.345407][ C0] ? __nft_trace_packet+0x135/0x150 [ 291.350635][ C0] end_report+0x6d/0xf0 [ 291.354820][ C0] kasan_report+0x102/0x130 [ 291.359352][ C0] ? __nft_trace_packet+0x135/0x150 [ 291.364570][ C0] __nft_trace_packet+0x135/0x150 [ 291.369618][ C0] nft_do_chain+0x1299/0x14d0 [ 291.374320][ C0] ? 0xffffffffa0028000 [ 291.378501][ C0] ? mark_lock+0x94/0x320 [ 291.382857][ C0] ? nft_fwd_dup_netdev_offload+0x120/0x120 [ 291.388807][ C0] ? lock_chain_count+0x20/0x20 [ 291.393718][ C0] ? nf_nat_inet_fn+0x8a0/0xad0 [ 291.398612][ C0] nft_do_chain_inet+0x25c/0x340 [ 291.403584][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 291.408499][ C0] ? nf_nat_ipv4_local_in+0x229/0x5d0 [ 291.413905][ C0] ? nft_do_chain_arp+0xf0/0xf0 [ 291.418781][ C0] nf_hook_slow+0xb9/0x200 [ 291.423228][ C0] ? NF_HOOK+0x390/0x390 [ 291.427500][ C0] NF_HOOK+0x1f2/0x390 [ 291.431604][ C0] ? NF_HOOK+0x390/0x390 [ 291.435880][ C0] ? ip_local_deliver+0x180/0x180 [ 291.440943][ C0] ? NF_HOOK+0x390/0x390 [ 291.445221][ C0] ? ip_local_deliver+0x107/0x180 [ 291.450278][ C0] ? ip_rcv_core+0xb30/0xb30 [ 291.454901][ C0] NF_HOOK+0x303/0x390 [ 291.459001][ C0] ? ip_rcv_core+0xb30/0xb30 [ 291.463627][ C0] ? ip_local_deliver+0x180/0x180 [ 291.468686][ C0] ? ip_rcv_core+0xb30/0xb30 [ 291.473307][ C0] ? ip_rcv_core+0x72c/0xb30 [ 291.477929][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 291.483601][ C0] ? ip_local_deliver_finish+0x320/0x320 [ 291.489271][ C0] __netif_receive_skb+0xcc/0x290 [ 291.494332][ C0] process_backlog+0x366/0x770 [ 291.499140][ C0] ? rps_trigger_softirq+0x210/0x210 [ 291.504486][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.510507][ C0] ? lock_chain_count+0x20/0x20 [ 291.515417][ C0] __napi_poll+0xbb/0x430 [ 291.519779][ C0] net_rx_action+0x522/0xa80 [ 291.524407][ C0] ? net_tx_action+0x880/0x880 [ 291.529197][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 291.535221][ C0] ? lock_chain_count+0x20/0x20 [ 291.540113][ C0] handle_softirqs+0x336/0x830 [ 291.544914][ C0] ? do_softirq+0x142/0x210 [ 291.549449][ C0] ? do_softirq+0x210/0x210 [ 291.553989][ C0] do_softirq+0x142/0x210 [ 291.558353][ C0] [ 291.561303][ C0] [ 291.564265][ C0] ? __local_bh_enable_ip+0x1c0/0x1c0 [ 291.569666][ C0] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 291.575672][ C0] ? __local_bh_enable_ip+0xd7/0x1c0 [ 291.580989][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 291.586336][ C0] ? local_bh_enable+0x5/0x20 [ 291.591054][ C0] __local_bh_enable_ip+0x180/0x1c0 [ 291.596287][ C0] ? _local_bh_enable+0xa0/0xa0 [ 291.601190][ C0] ? ip_finish_output2+0x8c1/0x10e0 [ 291.606426][ C0] ip_finish_output2+0xd6e/0x10e0 [ 291.611482][ C0] ? ip_fragment+0x210/0x210 [ 291.616104][ C0] ? ip_finish_output+0x3e5/0x4b0 [ 291.621156][ C0] ip_output+0x2ba/0x3e0 [ 291.625443][ C0] __ip_queue_xmit+0x1207/0x1ce0 [ 291.630408][ C0] ? rcu_lock_release+0x20/0x20 [ 291.635291][ C0] __tcp_transmit_skb+0x1ca3/0x31e0 [ 291.640527][ C0] ? __tcp_send_ack+0x5d0/0x5d0 [ 291.645407][ C0] ? seqcount_lockdep_reader_access+0x18d/0x1d0 [ 291.651688][ C0] ? memset+0x1e/0x40 [ 291.655703][ C0] ? tcp_rbtree_insert+0x114/0x170 [ 291.660840][ C0] ? tcp_connect+0x1fca/0x4970 [ 291.665633][ C0] tcp_connect+0x21bd/0x4970 [ 291.670270][ C0] tcp_v4_connect+0xf42/0x1990 [ 291.675081][ C0] ? tcp_twsk_unique+0x970/0x970 [ 291.680056][ C0] ? tcp_v6_connect+0x698/0x1a10 [ 291.685021][ C0] tcp_v6_connect+0xb07/0x1a10 [ 291.689829][ C0] ? verify_lock_unused+0x140/0x140 [ 291.695066][ C0] ? tcp_v6_pre_connect+0xf0/0xf0 [ 291.700138][ C0] ? mark_lock+0x94/0x320 [ 291.704586][ C0] __inet_stream_connect+0x244/0xd80 [ 291.709906][ C0] ? lock_chain_count+0x20/0x20 [ 291.714788][ C0] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 291.720821][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 291.726221][ C0] ? inet_dgram_connect+0x340/0x340 [ 291.731452][ C0] ? __local_bh_enable_ip+0x136/0x1c0 [ 291.736860][ C0] ? _local_bh_enable+0xa0/0xa0 [ 291.741745][ C0] inet_stream_connect+0x62/0xa0 [ 291.746716][ C0] ? __inet_stream_connect+0xd80/0xd80 [ 291.752212][ C0] __sys_connect+0x3cb/0x450 [ 291.756839][ C0] ? __sys_connect_file+0x170/0x170 [ 291.762079][ C0] __x64_sys_connect+0x76/0x80 [ 291.766880][ C0] do_syscall_64+0x4c/0xa0 [ 291.771342][ C0] ? clear_bhb_loop+0x30/0x80 [ 291.776057][ C0] ? clear_bhb_loop+0x30/0x80 [ 291.780764][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 291.786684][ C0] RIP: 0033:0x7f84580e6019 [ 291.791134][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.810775][ C0] RSP: 002b:00007f845633e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 291.819222][ C0] RAX: ffffffffffffffda RBX: 00007f845836dfa0 RCX: 00007f84580e6019 [ 291.827222][ C0] RDX: 000000000000001c RSI: 0000200000000080 RDI: 0000000000000005 [ 291.835216][ C0] RBP: 00007f845817d00c R08: 0000000000000000 R09: 0000000000000000 [ 291.843227][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.851223][ C0] R13: 00007f845836e038 R14: 00007f845836dfa0 R15: 00007ffedd5be728 [ 291.859227][ C0] [ 291.862555][ C0] Kernel Offset: disabled [ 291.866896][ C0] Rebooting in 86400 seconds..