last executing test programs: 2m34.153919034s ago: executing program 3 (id=121): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000240)='nfsd\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) 2m32.884730631s ago: executing program 3 (id=126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x8000000000, 0x1, 0x1, 0x8, 0x4002004c5, 0x1000, 0x1, 0x0, 0x7, 0xe, 0x0, 0x6, 0x0, 0x49], 0xdddd1000, 0x1c7056}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000300)=@gcm_128={{0x304}, "45542f745866c700", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "faffffffffffffff"}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002a00)={0xa, 0xf, &(0x7f0000000440)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x8c01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.948930538s ago: executing program 3 (id=136): pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=@newlink={0x50, 0x10, 0xf11, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x104}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20, 0x20}}}}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m29.594773417s ago: executing program 3 (id=143): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000011c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000002,smackfsfloor=smackfstransmute,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 2m27.941078569s ago: executing program 3 (id=152): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private2}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r2, &(0x7f0000001d80)=[{0x0}, {&(0x7f0000000a40)=""/95, 0x5f}], 0x2, 0x8, 0x0) 2m26.220174403s ago: executing program 3 (id=164): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) 2m25.928695437s ago: executing program 32 (id=164): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000001c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000380)={[0x3, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2005c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) 2m15.783638036s ago: executing program 2 (id=198): pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, 0x0, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) socket$packet(0x11, 0x3, 0x300) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2m14.092781299s ago: executing program 2 (id=208): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000240)=0x10, 0x80800) ppoll(&(0x7f0000000340)=[{r1, 0xc4a0}, {r3}, {r2, 0x74}, {0xffffffffffffffff, 0x6065}, {}, {r4, 0x4a0}, {0xffffffffffffffff, 0x2000}], 0x7, &(0x7f0000000580)={0x0, 0x3938700}, &(0x7f00000005c0)={[0x4]}, 0x8) 2m11.373517596s ago: executing program 2 (id=210): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) epoll_create1(0x80000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008032, 0xffffffffffffffff, 0xffffd000) 2m9.516194032s ago: executing program 2 (id=220): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000011c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,mode=00000000000000000000005,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,gid=forget,mode=00000000000000000002000,lastblock=00000000000000001024,shortad,euid>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=0x0000000000000002,smackfsfloor=smackfstransmute,fowner>', @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b6673747261736d7574653d001c0b235ffdce27803854a81c498e5bc58fdfc2e25738bee597df2c00"/55], 0x2, 0xc2d, &(0x7f00000001c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 2m7.213876644s ago: executing program 2 (id=225): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x844, &(0x7f0000000bc0)=ANY=[], 0x5, 0x267, &(0x7f0000000740)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) r3 = open(&(0x7f0000000140)='./file2\x00', 0x64842, 0x21) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 2m3.82827167s ago: executing program 2 (id=232): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 2m2.742427965s ago: executing program 33 (id=232): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close(0xffffffffffffffff) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) 8.913136607s ago: executing program 1 (id=682): openat$nvme_fabrics(0xffffff9c, 0x0, 0x200000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020400) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 8.912504077s ago: executing program 4 (id=684): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) write$tun(r0, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0xb, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 8.508570893s ago: executing program 1 (id=688): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) listen(r0, 0x3) close(0x3) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0xa5b, 0x12) 8.304320996s ago: executing program 1 (id=690): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000440)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d01020301090212"], 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x2d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x3, 0x5, 0x1}, 0x13, [0x8000, 0xc95a, 0xf, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x7, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x8, 0x1000004, 0x4, 0x9, 0x3c5b, 0x1, 0x24, 0x9, 0x1, 0x1d461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0x6, 0x0, 0x71, 0x7, 0x7, 0x1, 0x7, 0x5, 0x10003e, 0x8f, 0x3, 0x9, 0x0, 0xb, 0x4, 0x8, 0x0, 0x82, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x20000040], [0x10000007, 0xffff, 0x1ff, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xe, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x5, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x3, 0x4, 0x4, 0x8000, 0xd, 0x400, 0x401, 0x6, 0x1, 0x35, 0x8005, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x7f, 0x9, 0x3, 0x3, 0x9, 0x1, 0x7, 0x3, 0x7, 0x48c93690, 0x8, 0x2], [0x7, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x7ff, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x80000001, 0x5, 0xfffffbff, 0x86, 0x3, 0x9, 0x3e7, 0x9, 0x2, 0x2, 0x2, 0x3, 0x8, 0x4, 0x6d01, 0x1, 0x38, 0x800003, 0x5, 0x80, 0x3, 0x4, 0x2950bfaf, 0x200, 0xa2, 0x7, 0x5, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x0, 0x1, 0x8000ffff, 0x0, 0x1, 0x1c, 0x120000, 0x3, 0x6, 0xa2ed, 0x4, 0x25], [0x5, 0x20bb31, 0x7, 0xb, 0x6, 0x938, 0x9, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0x7, 0x5, 0x3, 0x105, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x8, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x4003, 0x7e, 0x100, 0x9602, 0x3, 0x2, 0x5, 0x6, 0x1, 0x10080, 0x5, 0x208, 0x30b1d693, 0x1, 0xc, 0x7, 0x8001, 0x6c1b, 0x0, 0x4, 0x5, 0x3, 0x1, 0x1fe, 0xfdff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 6.940127974s ago: executing program 0 (id=695): timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) syz_open_procfs$namespace(0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) open(0x0, 0x60142, 0x0) mknod$loop(0x0, 0x0, 0x1) link(0x0, 0x0) 6.937247625s ago: executing program 4 (id=696): mkdir(0x0, 0x0) mkdir(0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r4 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r4, 0x7, r2, &(0x7f0000000040)={r3, r2}) 6.913891294s ago: executing program 5 (id=697): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24, 0x24, 0x4, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3, 0xe}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x5, 0xa, 0x10002}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x24000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.781968816s ago: executing program 6 (id=698): openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000980)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\xda\x89\xb7}@\xab\x16\x9c{\x8c\x97\xcc\xe7\xa5\xf5\xeb2\x9a\xed%\xf2\x8f\x97\x18\xce\x92\xc9\xa8\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6H\x80s\xd66y\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=/o\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90Q\xe8r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12B\x06\xe5\x8f\x83Vb\xf1\xbc\xb9E\x1a\x9bH$\x1f^\x9dX\xd0\xca\xcc\xc9\x86\xaa\xd0\x9c\xc0\x82\xabE\xcc{\xcd\xd3\xdb\x97\x1e.y\xb0\x9f\x8f\xefv\x9c\xbd%\x84\xbf\"\xd9\xb4Vm\t.\x15\xf1)\xd6\xd8\x1cb\xc5\xd9=c\xb5<|+K*\x9f\x01u', 0xfeffffff00000000) 5.680280332s ago: executing program 6 (id=699): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) 3.536209491s ago: executing program 1 (id=700): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000900)=[{0x200000000006, 0x0, 0x0, 0x7ffc17fb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) 3.535882281s ago: executing program 6 (id=701): openat$nvme_fabrics(0xffffff9c, 0x0, 0x200000, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r3, 0x54583}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x22020400) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @dev={0xac, 0x14, 0x14, 0x27}}}}], 0x20}}], 0x1, 0x80) 3.535649531s ago: executing program 4 (id=702): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1210000, &(0x7f0000000280)=ANY=[], 0x1, 0x1290, &(0x7f0000001a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 3.461350552s ago: executing program 1 (id=704): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") creat(&(0x7f0000000200)='./bus\x00', 0x30) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x7004, 0x0) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfee00}], 0x1, 0x1200, 0x30, 0x3) 3.131247617s ago: executing program 5 (id=705): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001d00), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000017000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b8b8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) flock(r3, 0x8) close(r1) close_range(r0, 0xffffffffffffffff, 0x0) 3.130162497s ago: executing program 6 (id=706): r0 = socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r2 = accept4(r0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000940)="d744784ca67c0398246d848e6df22054de2bd8ca3da64dfdea7d8eb74ffe057d7469066c6ca034a2677ce0c1c25e2b2a825d677e0fbac312a7da165cd5db94fa38cdf3a3f3f93b912a7515e0b1e441a3be644a296bcc765e7adc9ddb4d14376a69cbfcd2ddd156ba432349e96debeda26ee8914c28f4", 0x7ffff000}, {&(0x7f00000009c0)="d86e5c29ab2c0dce2b79f95d543a0d6b45dec9dab7afbc0d6d678feb7a652e67638c3ee007937917fad76308e99818f8f112b73a3c3e3c5ed80c49fab6e0593e95008b4a47aebdde3e28cea1cec26385f3d03b872970dfb69a63a6384a9be5b9419ff8ea6d9c2a730307894adb589d11a1ec59255d10acb1fbef", 0x7a}], 0x2}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) 3.085829527s ago: executing program 0 (id=707): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x3) bind$inet(r0, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) listen(r0, 0x3) close(0x3) socket(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000140)=0xa5b, 0x12) 3.047842078s ago: executing program 0 (id=708): socket$unix(0x1, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x7f, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r1], 0x50}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x50, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x50}}, 0x2) 2.928228439s ago: executing program 1 (id=709): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) write$tun(r0, &(0x7f0000000600)={@void, @val={0x1, 0x3, 0xffff, 0xb, 0xfeff, 0xff0c}, @mpls={[], @ipv4=@udp={{0x5, 0x4, 0x3, 0x5, 0x2c, 0x68, 0x0, 0x9, 0x11, 0x0, @remote, @multicast2}, {0x4e20, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x7b8dd026, 0x1ff}}}}}, 0x36) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) syz_usb_connect$cdc_ncm(0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) 2.765391091s ago: executing program 0 (id=710): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$sysfs(0xffffffffffffff9c, 0x0, 0x200000, 0x158) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="1200000007"], 0x10) 2.423807837s ago: executing program 5 (id=711): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}]}, 0x20}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001800dd8d00000000000000000a000000000000060000000008001e0002"], 0x30}}, 0x4090) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 2.120788431s ago: executing program 4 (id=712): unshare(0x2c060000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) 2.119105281s ago: executing program 6 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) fsconfig$FSCONFIG_SET_PATH(0xffffffffffffffff, 0x3, 0x0, 0x0, 0xffffffffffffff9c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8020, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x5, 0x7}, {}, {0xa, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x22044028}, 0x84) 2.066928861s ago: executing program 0 (id=714): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000002400)=ANY=[@ANYRES32, @ANYBLOB="76cea1141d65e7fa31fbec3d815e2980581b183cd8fbbf52361757df7c239bd2fe6b881941dea120e60f5d952985cf01e6bd37b53c921bd13439b9150d6b1df8bf5043ecd1c0ed04cbefbe9eb0d65fe6ed9434a1f4aa76ec44685c765337c953434480ab88606966be2cb64416dfea9d9eda649ee1268ef17efa754856f8a99cf61805fba721d93b23a5a37ab9e0d62d07540cea047d39cc5b80b9f225aea77f273306949bf31f7ba38d8af4af552006e00b99c0", @ANYRES64=0x0, @ANYBLOB="b0ed086982ae288c0ded88b546ef1c1e703d8f9c10354ca909cb45bfc2f978a7aedaae1ce91bb7cea3a037dd1cffbea6890ea96b05173bb55c37129d8a1763fb7c5ae6e47efff4f65eaa937effbb44a202528799b7421ce9c6a23ed76fce3919300aa25e9cd22ce700114242a870e3a1", @ANYRESHEX=0x0, @ANYRES16, @ANYRESDEC, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="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", @ANYRES32], 0x2, 0x1d3, &(0x7f00000008c0)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x80, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x4e}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) userfaultfd(0x801) 1.829783915s ago: executing program 5 (id=715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x6e1cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x250, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1b8, 0x2a8, 0x2a8, 0x1b8, 0x2a8, 0x3, 0x0, {[{{@ip={@empty, @private=0xa010101, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'rose0\x00', {}, {}, 0x8, 0x2, 0x2}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="294ab6c07822", 0xa530, 0x3, [0x33, 0x1c, 0x32, 0x1e, 0x39, 0x32, 0x3, 0x2a, 0x2e, 0x15, 0x1d, 0x1d, 0x13, 0x9, 0x8, 0x10], 0x1, 0xc3d, 0xa9a}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x2}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x1, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 133.310368ms ago: executing program 0 (id=716): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000200)='./file2\x00', 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file2\x00', &(0x7f00000000c0), &(0x7f0000000000)=ANY=[], 0xfe37, 0x0) 131.632038ms ago: executing program 5 (id=717): syz_mount_image$squashfs(&(0x7f0000000140), &(0x7f00000005c0)='./file1\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="007e2a01b3e93dc9b01cde3a163851811e0c5e4fcb67f7fb5b0346e9584bd76d3e0284a2d88a1203a216f9000000000000000000cd53386d3903cd1c5feea0df6ae2ffebef5a71b94f19fe6b85f2e9673d8056b96f0ea03203e45120741be6031f1d069575c54d3635d0bfe4f1c7021f000000000000000000000000f51901f9e5c0d6c2a87da700ed0dbb3de5f4e9919523a78b2df3ead13eaf357bfd13f8f10ac3d1a885a49837a979637c9a41cbf9c4f31431a4a82524449b2f377a21eb757c76bc8ebb43f45a089eff7f8a541906018715c2336cc3c939f5885601cde39a8c93c14d4ca3e750d296"], 0x84, 0x181, &(0x7f0000000740)="$eJzskr9OKkEUxr9Zhl2guLkkt7oNJPdGsVBgicbYaKm9DyDBFYmLf1gShVCsMYbCwlj6BFS+g4kvoIUx1tYUxNqsmZmzy+wzOL+CM+ebM9/OOcNhcBY4AL5moxa2IMngF14YAwdQYkqbWireUXyleKsCnqluh/Qrin+DwfCo6fter7xRRjElAPiUWiIFm5cWptLqbTZqicUegCiKIuSUYRGAXpN551KXNeKDHPgjm4iSGlEhkkUA1X73tBoMhsudbrPttb1j122sMV6rrbrVg47v1dQv0z5BrUDEJQAO4BSUo9zPArimmgLSMO1qtM/ymretzbDyL33WQj5Zxx4Mj8lZB8iq9wJ2sSAndB7SQwj1QblwyJa2wZChpM61+6mqnNxYaZ34+2MwsPjYBDzxqH8gmySunjTWw/iqY4r/47YoTrQxCkp2WuDS4YaySsjntwNw0ez3e3XAVivXjjX3dzgfmPqX3Fvp5p4sGAwGg8FgMBgMBsNP5zsAAP//F3pyRg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x34, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}}, 0x0) getdents(r0, 0x0, 0x54) r4 = syz_open_dev$loop(0x0, 0xd79, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, 0x0) ioctl$LOOP_GET_STATUS64(r4, 0x4c05, &(0x7f0000000400)) llistxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x10) 121.225928ms ago: executing program 4 (id=718): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r3) 81.834958ms ago: executing program 6 (id=719): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4}}}]}, 0x38}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xe}, {}, {0xfff3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 870.67µs ago: executing program 5 (id=720): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) setpriority(0x0, 0x0, 0xacf0165) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40d2) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB]) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', 0x0, 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 0s ago: executing program 4 (id=721): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) r4 = socket$key(0xf, 0x3, 0x2) accept4(r4, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.064544][ T4175] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.073459][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.082698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.091262][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.100333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.109513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.118521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.127663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.135863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.153995][ T4168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.178991][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.188830][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.198510][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.206521][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.213968][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.223277][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.239298][ T4168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.248590][ T4168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.257758][ T4168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.267248][ T4168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.283251][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.294479][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.304307][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.318146][ T4166] device veth0_vlan entered promiscuous mode [ 60.338605][ T4167] device veth0_macvtap entered promiscuous mode [ 60.355846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.363945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.373159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.382927][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.391550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.412090][ T4167] device veth1_macvtap entered promiscuous mode [ 60.429345][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.438773][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.449019][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.458488][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.468262][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.477743][ T4175] device veth0_vlan entered promiscuous mode [ 60.487605][ T4166] device veth1_vlan entered promiscuous mode [ 60.497284][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.505923][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.513724][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.545043][ T4175] device veth1_vlan entered promiscuous mode [ 60.570684][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.583638][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.602674][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.613403][ T4167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.624479][ T4167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.636751][ T4167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.645958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.654050][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.662410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.675722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.684328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.693815][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.702345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.710929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.719922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.727936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.755489][ T4174] device veth0_vlan entered promiscuous mode [ 60.768351][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.779419][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.786686][ T4167] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.786751][ T4167] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.786779][ T4167] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.786807][ T4167] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.811333][ T4175] device veth0_macvtap entered promiscuous mode [ 60.847918][ T4174] device veth1_vlan entered promiscuous mode [ 60.871452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.881456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.891652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.900691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.909637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.919298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.935182][ T4166] device veth0_macvtap entered promiscuous mode [ 60.958589][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.959142][ T4175] device veth1_macvtap entered promiscuous mode [ 60.973001][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.982273][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.992514][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.002037][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.012791][ T4166] device veth1_macvtap entered promiscuous mode [ 61.109177][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.127310][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.137796][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.148489][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.161630][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.190466][ T4174] device veth0_macvtap entered promiscuous mode [ 61.205154][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.213323][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.220491][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.231399][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.243899][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.253526][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.262777][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.283976][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.297225][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.311030][ T4175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.325253][ T4251] Bluetooth: hci0: command 0x040f tx timeout [ 61.329750][ T4175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.332281][ T4251] Bluetooth: hci1: command 0x040f tx timeout [ 61.343696][ T4175] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.359263][ T4251] Bluetooth: hci2: command 0x040f tx timeout [ 61.366794][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.382035][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.392135][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.403113][ T4251] Bluetooth: hci3: command 0x040f tx timeout [ 61.409723][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.420110][ T4251] Bluetooth: hci4: command 0x040f tx timeout [ 61.427208][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.438559][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.450685][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.471964][ T4174] device veth1_macvtap entered promiscuous mode [ 61.501059][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.521006][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.532605][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.542334][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.556974][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.566086][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.575527][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.580953][ T4259] loop1: detected capacity change from 0 to 128 [ 61.588272][ T4175] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.607836][ T4175] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.617207][ T4175] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.626526][ T4175] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.640278][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.656246][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.671881][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.683644][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.699286][ T4166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.711275][ T4166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.733726][ T4166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.737746][ T4259] attempt to access beyond end of device [ 61.737746][ T4259] loop1: rw=2049, want=1041, limit=128 [ 61.761024][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.771061][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.778605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.788867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.804287][ T4166] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.814570][ T4166] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.825957][ T4166] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.835024][ T4166] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.852927][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.867257][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.869051][ T4260] attempt to access beyond end of device [ 61.869051][ T4260] loop1: rw=524288, want=369, limit=128 [ 61.881951][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.891869][ T4260] attempt to access beyond end of device [ 61.891869][ T4260] loop1: rw=0, want=153, limit=128 [ 61.911185][ T4260] attempt to access beyond end of device [ 61.911185][ T4260] loop1: rw=0, want=153, limit=128 [ 61.911698][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.934848][ T4260] attempt to access beyond end of device [ 61.934848][ T4260] loop1: rw=0, want=153, limit=128 [ 61.938251][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.947558][ T4259] attempt to access beyond end of device [ 61.947558][ T4259] loop1: rw=0, want=153, limit=128 [ 61.960486][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.974451][ T4260] attempt to access beyond end of device [ 61.974451][ T4260] loop1: rw=0, want=153, limit=128 [ 61.983276][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.991807][ T4259] attempt to access beyond end of device [ 61.991807][ T4259] loop1: rw=0, want=153, limit=128 [ 62.007781][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.013130][ T4260] attempt to access beyond end of device [ 62.013130][ T4260] loop1: rw=0, want=153, limit=128 [ 62.023516][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.042424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.046071][ T4259] attempt to access beyond end of device [ 62.046071][ T4259] loop1: rw=0, want=153, limit=128 [ 62.056783][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 62.077344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.118030][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.141363][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.152517][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.167636][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.180203][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.194966][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.211191][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.229661][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.253863][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.324105][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 62.340721][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.397855][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 62.447904][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.511986][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.598674][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.682793][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.522530][ T4214] Bluetooth: hci2: command 0x0419 tx timeout [ 63.529207][ T4214] Bluetooth: hci1: command 0x0419 tx timeout [ 63.535330][ T4214] Bluetooth: hci0: command 0x0419 tx timeout [ 63.540381][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.541440][ T21] Bluetooth: hci4: command 0x0419 tx timeout [ 63.556047][ T21] Bluetooth: hci3: command 0x0419 tx timeout [ 63.581749][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.682093][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.708268][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.775784][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.796339][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.819772][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.852594][ T4225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.874460][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.875108][ T4225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.919857][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.950674][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.978163][ T4225] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.003438][ T4228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.005228][ T4225] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.078563][ T4228] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.173953][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.310511][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.572077][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.674496][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 65.795076][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.875088][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 65.884523][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 65.894783][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.903932][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.913136][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 65.922676][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 66.448874][ T4298] loop4: detected capacity change from 0 to 2048 [ 66.457334][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 66.614554][ T4320] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 67.548478][ T4344] Zero length message leads to an empty skb [ 67.723932][ T4349] kvm: vcpu 0: requested 1792 ns lapic timer period limited to 200000 ns [ 68.058895][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.074522][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.082806][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.078650][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.079009][ T4385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 72.470324][ T4215] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 72.750782][ T4215] usb 4-1: Using ep0 maxpacket: 16 [ 72.925404][ T4215] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 73.705735][ T4215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.716622][ T4215] usb 4-1: config 0 has no interface number 0 [ 73.722813][ T4215] usb 4-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 73.751457][ T4215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.822733][ T4215] usb 4-1: config 0 descriptor?? [ 73.909516][ T4215] usb 4-1: Found UVC 0.00 device (0bd3:0555) [ 73.916111][ T4422] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 73.948088][ T4215] usb 4-1: No valid video chain found. [ 74.143820][ T13] usb 4-1: USB disconnect, device number 2 [ 74.199927][ T4431] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 74.271905][ T4431] device veth3 entered promiscuous mode [ 74.364849][ T21] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.640984][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 75.566060][ T21] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 75.677585][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 75.687051][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.699941][ T21] usb 3-1: config 0 descriptor?? [ 75.738101][ T4449] loop0: detected capacity change from 0 to 1024 [ 75.761512][ T21] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 75.972724][ T4428] input: syz0 as /devices/virtual/input/input6 [ 77.334534][ T4474] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 77.390968][ T4474] device veth3 entered promiscuous mode [ 77.586857][ T4486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 77.812504][ T4492] loop3: detected capacity change from 0 to 128 [ 77.845742][ T4492] ======================================================= [ 77.845742][ T4492] WARNING: The mand mount option has been deprecated and [ 77.845742][ T4492] and is ignored by this kernel. Remove the mand [ 77.845742][ T4492] option from the mount to silence this warning. [ 77.845742][ T4492] ======================================================= [ 77.885598][ T4217] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.926136][ T4492] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.942077][ T4492] EXT4-fs (loop3): Test dummy encryption mode enabled [ 77.977867][ T4492] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 77.999503][ T4492] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 78.074959][ T3530] bcm5974 3-1:0.0: could not read from device [ 78.103914][ T21] usb 3-1: USB disconnect, device number 2 [ 78.113296][ T3530] bcm5974 3-1:0.0: could not read from device [ 78.145786][ T4492] EXT4-fs (loop3): shut down requested (2) [ 78.224820][ T4217] usb 2-1: Using ep0 maxpacket: 16 [ 78.370996][ T4217] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 78.382962][ T4217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.440709][ T4510] loop2: detected capacity change from 0 to 1024 [ 78.489251][ T4217] usb 2-1: config 0 has no interface number 0 [ 78.495765][ T4217] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 78.507375][ T4217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.726170][ T4214] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 79.015032][ T4214] usb 4-1: Using ep0 maxpacket: 16 [ 79.298710][ T4217] usb 2-1: config 0 descriptor?? [ 79.347202][ T4217] usb 2-1: Found UVC 0.00 device (0bd3:0555) [ 79.405387][ T4217] usb 2-1: No valid video chain found. [ 79.430898][ T4214] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 79.448629][ T4214] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 79.457795][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.468343][ T4214] usb 4-1: config 0 descriptor?? [ 79.508849][ T4214] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 79.570004][ T4217] usb 2-1: USB disconnect, device number 2 [ 79.734952][ T4513] input: syz0 as /devices/virtual/input/input8 [ 79.825187][ T4526] netlink: 'syz.2.80': attribute type 1 has an invalid length. [ 79.854615][ T4524] binder_alloc: 4523: binder_alloc_buf failed to map page at 200000ffd000 in userspace [ 79.897737][ T4527] device veth3 entered promiscuous mode [ 80.141444][ T4535] loop1: detected capacity change from 0 to 128 [ 80.182397][ T4539] loop2: detected capacity change from 0 to 128 [ 80.185024][ T4535] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.221344][ T4535] EXT4-fs (loop1): Test dummy encryption mode enabled [ 80.239597][ T4535] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 80.265033][ T4535] ext4 filesystem being mounted at /12/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.285722][ T4539] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 80.343604][ T4539] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.373784][ T4535] EXT4-fs (loop1): shut down requested (2) [ 80.639282][ T4552] loop2: detected capacity change from 0 to 128 [ 80.656745][ T4549] loop1: detected capacity change from 0 to 1024 [ 80.725399][ T4552] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.772370][ T4552] EXT4-fs (loop2): Test dummy encryption mode enabled [ 80.885557][ T4552] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,test_dummy_encryption=v1,,errors=continue. Quota mode: none. [ 80.901619][ T4552] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.303663][ T4552] EXT4-fs (loop2): shut down requested (2) [ 81.345757][ T7] cfg80211: failed to load regulatory.db [ 81.774872][ T3530] bcm5974 4-1:0.0: could not read from device [ 81.837445][ T4214] usb 4-1: USB disconnect, device number 3 [ 81.845123][ T3530] bcm5974 4-1:0.0: could not read from device [ 81.887014][ T3530] bcm5974 4-1:0.0: could not read from device [ 83.050206][ T4214] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 83.070819][ T4578] loop2: detected capacity change from 0 to 1024 [ 83.078849][ T4214] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.102875][ T4582] netlink: 12 bytes leftover after parsing attributes in process `syz.4.103'. [ 83.136149][ T4578] EXT4-fs (loop2): Mount option "nodioread_nolock" incompatible with ext2 [ 83.465143][ T4585] fido_id[4585]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.924594][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.933199][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.559007][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.605954][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.734771][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.986144][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 86.068072][ T4582] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.077773][ T4582] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.086951][ T4582] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.095902][ T4582] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.104884][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 86.119136][ T23] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 86.128333][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.147466][ T23] usb 1-1: config 0 descriptor?? [ 86.201396][ T23] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 86.255150][ T4601] netlink: 'syz.3.107': attribute type 1 has an invalid length. [ 86.293605][ T4605] device wlan0 entered promiscuous mode [ 86.396112][ T4610] input: syz0 as /devices/virtual/input/input10 [ 86.535458][ T4621] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 86.627548][ T4621] device wlan0 entered promiscuous mode [ 86.698784][ T4627] tc_dump_action: action bad kind [ 86.811655][ T4633] netlink: 12 bytes leftover after parsing attributes in process `syz.1.116'. [ 86.925449][ T4633] device veth3 entered promiscuous mode [ 87.100663][ T4637] overlayfs: failed to get inode (-116) [ 87.109276][ T4637] overlayfs: failed to get inode (-116) [ 87.260203][ T4629] overlayfs: failed to resolve './file2': -2 [ 87.421551][ T4215] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.325179][ C1] sched: RT throttling activated [ 88.464962][ T3530] bcm5974 1-1:0.0: could not read from device [ 88.485815][ T23] usb 1-1: USB disconnect, device number 2 [ 88.624821][ T4215] usb 3-1: Using ep0 maxpacket: 32 [ 88.746147][ T4215] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 88.754321][ T4215] usb 3-1: config 0 has no interface number 0 [ 88.800857][ T4215] usb 3-1: config 0 interface 85 has no altsetting 0 [ 88.823071][ T4644] loop1: detected capacity change from 0 to 8192 [ 88.849728][ T4644] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 88.981280][ T4657] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 89.008175][ T4657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 89.174979][ T4215] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 89.187012][ T4644] process 'syz.1.124' launched './file1' with NULL argv: empty string added [ 89.204809][ T4215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.224985][ T4215] usb 3-1: Product: syz [ 89.246004][ T4215] usb 3-1: Manufacturer: syz [ 89.416046][ T4215] usb 3-1: SerialNumber: syz [ 89.662637][ T4215] usb 3-1: config 0 descriptor?? [ 90.125053][ T4215] usb 3-1: can't set config #0, error -71 [ 90.136459][ T4215] usb 3-1: USB disconnect, device number 3 [ 90.187906][ T4667] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 90.297467][ T4672] overlayfs: failed to clone upperpath [ 90.313083][ T4667] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.348487][ T4670] bond1: (slave geneve2): making interface the new active one [ 90.368023][ T4670] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 90.392798][ T4676] device wlan0 entered promiscuous mode [ 90.450687][ T4676] bond1: (slave wlan0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 90.565150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 90.600639][ T4680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.136'. [ 90.847876][ T4688] loop2: detected capacity change from 0 to 64 [ 91.185533][ T4681] device veth3 entered promiscuous mode [ 91.545100][ T4681] bridge1: port 1(veth3) entered blocking state [ 91.551432][ T4681] bridge1: port 1(veth3) entered disabled state [ 91.701702][ T4696] device vlan2 entered promiscuous mode [ 91.822984][ T4700] loop3: detected capacity change from 0 to 2048 [ 91.868000][ T4700] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=3932051, location=3932051 [ 91.991455][ T4700] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.199983][ T4700] overlayfs: upper fs needs to support d_type. [ 92.209480][ T4700] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.216530][ T4700] overlayfs: failed to set xattr on upper [ 92.222252][ T4700] overlayfs: ...falling back to index=off,metacopy=off. [ 93.603834][ T4167] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 93.691915][ T4167] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh [ 95.157358][ T4301] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.248978][ T4301] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.359736][ T4301] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.516949][ T4301] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.643447][ T4786] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 96.689593][ T4192] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 96.706146][ T4192] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 96.996089][ T4787] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 97.022240][ T4787] CIFS mount error: No usable UNC path provided in device string! [ 97.022240][ T4787] [ 97.032522][ T4787] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 99.168076][ T4779] chnl_net:caif_netlink_parms(): no params data found [ 99.241500][ T4806] netlink: 4 bytes leftover after parsing attributes in process `syz.4.176'. [ 99.265428][ T4251] Bluetooth: hci1: command 0x0409 tx timeout [ 99.393367][ T26] audit: type=1326 audit(1747975247.375:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.425539][ T26] audit: type=1326 audit(1747975247.405:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.462829][ T26] audit: type=1326 audit(1747975247.445:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.517183][ T26] audit: type=1326 audit(1747975247.445:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.547569][ T26] audit: type=1326 audit(1747975247.445:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.571321][ T26] audit: type=1326 audit(1747975247.445:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=93 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.572107][ T4779] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.593238][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.593944][ T26] audit: type=1326 audit(1747975247.445:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.611294][ T4779] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.643854][ T4779] device bridge_slave_0 entered promiscuous mode [ 99.656073][ T26] audit: type=1326 audit(1747975247.445:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.678067][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.689994][ T26] audit: type=1326 audit(1747975247.485:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4814 comm="syz.0.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 99.693584][ T4779] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.768621][ T4779] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.783421][ T4779] device bridge_slave_1 entered promiscuous mode [ 99.943792][ T4779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.962142][ T4779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.929560][ T4779] team0: Port device team_slave_0 added [ 100.947192][ T4835] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 100.981579][ T4779] team0: Port device team_slave_1 added [ 101.326208][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 101.863061][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.890589][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.971308][ T4779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.119075][ T4779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.152311][ T4779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.225734][ T4779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.271603][ T4845] loop0: detected capacity change from 0 to 32768 [ 103.303800][ T4301] bridge1: port 1(veth3) entered disabled state [ 103.411295][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 103.462429][ T4301] device hsr_slave_0 left promiscuous mode [ 103.493692][ T4301] device hsr_slave_1 left promiscuous mode [ 103.551601][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.581621][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.839180][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.857024][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.880572][ T4301] device bridge_slave_1 left promiscuous mode [ 105.419821][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.484890][ T4267] Bluetooth: hci1: command 0x0419 tx timeout [ 105.548988][ T4301] device bridge_slave_0 left promiscuous mode [ 105.558317][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.639209][ T4301] device veth1_macvtap left promiscuous mode [ 105.669835][ T4301] device veth0_macvtap left promiscuous mode [ 105.705585][ T4301] device veth1_vlan left promiscuous mode [ 105.711659][ T4301] device veth0_vlan left promiscuous mode [ 106.076331][ T4921] loop0: detected capacity change from 0 to 512 [ 106.298697][ T4921] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 106.322630][ T4921] ext4 filesystem being mounted at /47/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 107.169009][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 107.186632][ T4301] team0 (unregistering): Port device team_slave_0 removed [ 107.269562][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.293919][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.458517][ T4301] bond0 (unregistering): Released all slaves [ 109.801252][ T4779] device hsr_slave_0 entered promiscuous mode [ 109.826427][ T4779] device hsr_slave_1 entered promiscuous mode [ 109.844500][ T4779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.854126][ T4779] Cannot create hsr debugfs directory [ 110.197206][ T4779] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.475617][ T4779] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.502417][ T4779] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 111.311202][ T4968] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 111.471827][ T4779] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 111.830614][ T4984] loop2: detected capacity change from 0 to 2048 [ 111.839677][ T4779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.894442][ T4984] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051 [ 112.792727][ T4984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.854220][ T4779] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.916528][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.170026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 113.180946][ T4984] overlayfs: upper fs needs to support d_type. [ 113.188043][ T4984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 113.195100][ T4984] overlayfs: failed to set xattr on upper [ 113.200831][ T4984] overlayfs: ...falling back to index=off,metacopy=off. [ 114.083099][ T4986] loop0: detected capacity change from 0 to 131072 [ 114.102598][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.103098][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.103781][ T4225] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.103837][ T4225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.104215][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.104634][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.106642][ T4225] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.158270][ T4225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.331050][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.371348][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.386962][ T4175] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 114.396596][ T4175] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh [ 114.410914][ T4986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 115.309183][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 115.355693][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 115.406507][ T26] audit: type=1804 audit(1747975263.395:11): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.226" name="/newroot/54/bus/bus" dev="overlay" ino=311 res=1 errno=0 [ 115.413034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 115.471868][ T5005] Invalid ELF header magic: != ELF [ 116.105949][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 116.114561][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 116.136195][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 116.166217][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 116.203744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 116.231276][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 116.297107][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 117.495704][ T5027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 117.736339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 117.749501][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 117.776255][ T4779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.037462][ T5051] loop0: detected capacity change from 0 to 8192 [ 119.135362][ T5051] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 119.165184][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 119.198937][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 119.309298][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 119.339182][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 119.385781][ T4779] device veth0_vlan entered promiscuous mode [ 119.392535][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 119.423965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 119.459495][ T4779] device veth1_vlan entered promiscuous mode [ 119.572372][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 119.595687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.626899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.644215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.666449][ T4779] device veth0_macvtap entered promiscuous mode [ 119.690134][ T4779] device veth1_macvtap entered promiscuous mode [ 119.763707][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.801923][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.825215][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.847115][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.867265][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.892216][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.907870][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.935927][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.949606][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.957996][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.972653][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.990804][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.001657][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.017475][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.030419][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.053861][ T4779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.070053][ T4779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.081520][ T4779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.107829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.117151][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.132911][ T4779] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.142171][ T4779] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.151380][ T4779] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.160554][ T4779] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.273316][ T5062] chnl_net:caif_netlink_parms(): no params data found [ 120.308174][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.321482][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.353787][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.451887][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.473115][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.492070][ T5062] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.505303][ T5062] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.513680][ T5062] device bridge_slave_0 entered promiscuous mode [ 120.525982][ T5062] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.533386][ T5062] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.542058][ T5062] device bridge_slave_1 entered promiscuous mode [ 120.569523][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 120.623472][ T5062] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.637932][ T5062] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.680945][ T5103] loop1: detected capacity change from 0 to 512 [ 120.689578][ T5102] overlayfs: failed to clone upperpath [ 120.712212][ T4301] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.749467][ T5062] team0: Port device team_slave_0 added [ 120.775649][ T5103] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 120.814034][ T4301] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.838986][ T5103] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 120.852028][ T5110] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 120.889664][ T5062] team0: Port device team_slave_1 added [ 120.897464][ T5103] EXT4-fs (loop1): 1 truncate cleaned up [ 120.903138][ T5103] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,debug_want_extra_isize=0x0000000000000006,,errors=continue. Quota mode: none. [ 120.947551][ T4301] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.032834][ T5062] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.053668][ T5062] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.081610][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 121.101838][ T5062] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.128790][ T4301] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.163496][ T5062] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.171167][ T5062] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.198136][ T5062] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.261903][ T5062] device hsr_slave_0 entered promiscuous mode [ 121.271065][ T5062] device hsr_slave_1 entered promiscuous mode [ 121.278039][ T5062] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.286067][ T5062] Cannot create hsr debugfs directory [ 121.551839][ T5062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 121.635575][ T5062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 121.678875][ T5062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 121.859044][ T5062] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 123.734646][ T4192] Bluetooth: hci4: command 0x041b tx timeout [ 123.890979][ T5062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.933148][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.245'. [ 124.051606][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.082581][ T4225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.129653][ T5062] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.184596][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.196087][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.208831][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.216028][ T4213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.290013][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.330543][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.365510][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.390731][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.397860][ T4213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.429532][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.473234][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.493983][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.536877][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.556150][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.575255][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.590730][ T5161] loop5: detected capacity change from 0 to 8192 [ 124.595476][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.620572][ T5168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'. [ 124.632321][ T5169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'. [ 124.663550][ T5161] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 124.679192][ T5062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.739709][ T5062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.785474][ T5172] overlayfs: failed to clone upperpath [ 124.806255][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.819027][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.877715][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.906907][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.940232][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.980922][ T5179] netlink: 'syz.0.257': attribute type 8 has an invalid length. [ 125.876022][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 126.694511][ T4301] device hsr_slave_0 left promiscuous mode [ 126.981941][ T4301] device hsr_slave_1 left promiscuous mode [ 127.002211][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.469056][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.324520][ T4301] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.339829][ T5218] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 128.370331][ T4301] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.390594][ T4301] device bridge_slave_1 left promiscuous mode [ 128.400545][ T4301] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.432980][ T4301] device bridge_slave_0 left promiscuous mode [ 128.447538][ T4301] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.463104][ T4301] device veth1_macvtap left promiscuous mode [ 128.471860][ T4301] device veth0_macvtap left promiscuous mode [ 128.481180][ T4301] device veth1_vlan left promiscuous mode [ 128.492827][ T4301] device veth0_vlan left promiscuous mode [ 128.594875][ T4267] Bluetooth: hci4: command 0x0419 tx timeout [ 130.135816][ T4301] team0 (unregistering): Port device team_slave_1 removed [ 130.282449][ T4301] team0 (unregistering): Port device team_slave_0 removed [ 130.309744][ T4301] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.343184][ T4301] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.466352][ T4301] bond0 (unregistering): Released all slaves [ 132.401295][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 132.440179][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 132.466983][ T5062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.517444][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.747621][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 132.765917][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.807494][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 132.830532][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.843304][ T5062] device veth0_vlan entered promiscuous mode [ 132.858232][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.870449][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.891238][ T5062] device veth1_vlan entered promiscuous mode [ 132.944129][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 132.959793][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 132.970846][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 132.983675][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 133.002133][ T5062] device veth0_macvtap entered promiscuous mode [ 133.020748][ T5062] device veth1_macvtap entered promiscuous mode [ 133.050758][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.068065][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.088164][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.114755][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.124614][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.155213][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.177994][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.189568][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 133.201619][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 133.214528][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 133.229221][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 133.242007][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.260774][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.280262][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.292588][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.308153][ T5062] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.320988][ T5062] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.338211][ T5062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.350054][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 133.364060][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 133.382110][ T5062] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.403241][ T5062] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.415992][ T5062] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.425146][ T5062] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.522863][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.544641][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.581443][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 133.602453][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.614324][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.633660][ T4274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 135.331340][ T5303] hub 8-0:1.0: USB hub found [ 135.532501][ T5300] loop5: detected capacity change from 0 to 32768 [ 135.548273][ T5303] hub 8-0:1.0: 1 port detected [ 137.017864][ T5300] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.276 (5300) [ 137.976854][ T5300] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 137.986162][ T5300] BTRFS info (device loop5): using free space tree [ 137.992690][ T5300] BTRFS info (device loop5): has skinny extents [ 138.145019][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 138.170745][ T5336] loop6: detected capacity change from 0 to 1024 [ 138.243462][ T5336] EXT4-fs (loop6): Ignoring removed orlov option [ 138.354031][ T5336] EXT4-fs (loop6): mounted filesystem without journal. Opts: orlov,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback. [ 138.427488][ T5300] BTRFS error (device loop5): open_ctree failed: -12 [ 139.786927][ T4185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by udevd (4185) [ 142.091770][ T5410] loop6: detected capacity change from 0 to 32768 [ 142.977255][ T5410] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 142.986035][ T5410] BTRFS info (device loop6): using free space tree [ 142.992562][ T5410] BTRFS info (device loop6): has skinny extents [ 143.003289][ T5411] fuse: Bad value for 'fd' [ 143.048668][ T5419] ax25_connect(): syz.0.300 uses autobind, please contact jreuter@yaina.de [ 145.543165][ T5410] BTRFS error (device loop6): open_ctree failed: -12 [ 145.590297][ T4185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by udevd (4185) [ 145.658907][ T5460] loop0: detected capacity change from 0 to 4096 [ 145.704106][ T5460] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 147.640999][ T5496] loop0: detected capacity change from 0 to 16 [ 147.718947][ T5496] erofs: (device loop0): mounted with root inode @ nid 36. [ 150.405662][ T5531] syz.0.321 sent an empty control message without MSG_MORE. [ 150.423336][ T5536] mmap: syz.6.323 (5536) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 150.686158][ T5543] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.731573][ T5543] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.895212][ T5544] netlink: 'syz.0.324': attribute type 16 has an invalid length. [ 150.943668][ T5544] netlink: 'syz.0.324': attribute type 17 has an invalid length. [ 150.985392][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.002031][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 151.031675][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.044368][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 151.063180][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.071341][ T5544] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 151.090588][ T5544] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.097872][ T5544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.112919][ T5544] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.120061][ T5544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.269664][ T5548] netlink: 12 bytes leftover after parsing attributes in process `syz.4.325'. [ 151.307649][ T5548] device bond1 entered promiscuous mode [ 151.319009][ T5552] netlink: 28 bytes leftover after parsing attributes in process `syz.4.325'. [ 151.328723][ T5552] device bond1 left promiscuous mode [ 151.364962][ T5552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.879606][ T5591] loop1: detected capacity change from 0 to 512 [ 153.142115][ T5591] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 153.157191][ T5591] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.499334][ T5622] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 156.548477][ T5631] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 158.501160][ T5664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.351'. [ 158.509714][ T5665] input: syz1 as /devices/virtual/input/input11 [ 158.555603][ T5664] device erspan0 entered promiscuous mode [ 158.626230][ T5664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.351'. [ 158.834840][ T1108] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 159.116381][ T5355] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 160.000542][ T1108] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 777 [ 160.041488][ T1108] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 160.113985][ T1108] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 160.130687][ T1108] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 160.141051][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.205151][ T5662] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 160.228413][ T5683] loop6: detected capacity change from 0 to 764 [ 160.285004][ T5355] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 160.301784][ T5683] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 160.328822][ T5355] usb 2-1: config 0 has no interface number 0 [ 160.347469][ T5355] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 160.359581][ T1108] snd-usb-audio: probe of 1-1:27.0 failed with error -12 [ 160.454323][ T5689] udevd[5689]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.460513][ T1108] usb 1-1: USB disconnect, device number 3 [ 160.506190][ T5355] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 160.524975][ T5355] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 160.543384][ T5355] usb 2-1: Product: syz [ 160.547906][ T5355] usb 2-1: SerialNumber: syz [ 160.565553][ T5355] usb 2-1: config 0 descriptor?? [ 160.610156][ T5355] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 160.839269][ T5664] udc-core: couldn't find an available UDC or it's busy [ 160.850125][ T5664] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 161.973609][ T5730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.363'. [ 162.171456][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.303786][ T5347] usb 2-1: USB disconnect, device number 3 [ 162.324029][ T5730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.636088][ T5754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 162.654996][ T5467] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 162.705530][ T5758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 162.863502][ T5764] netlink: 156 bytes leftover after parsing attributes in process `syz.4.375'. [ 162.876973][ T5766] capability: warning: `syz.1.374' uses deprecated v2 capabilities in a way that may be insecure [ 162.946996][ T4266] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 163.051614][ T5778] loop1: detected capacity change from 0 to 128 [ 163.076141][ T5467] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.095788][ T5467] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.124018][ T5775] loop5: detected capacity change from 0 to 1024 [ 163.127624][ T5467] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.142248][ T5778] EXT4-fs (loop1): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000002,nouid32,,errors=continue. Quota mode: none. [ 163.167798][ T5778] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.204795][ T4266] usb 7-1: Using ep0 maxpacket: 32 [ 163.244441][ T5775] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.286130][ T5785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'. [ 163.314380][ T26] audit: type=1800 audit(1747975311.295:12): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.377" name="file1" dev="loop1" ino=12 res=0 errno=0 [ 163.343519][ T5467] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 163.344861][ T4266] usb 7-1: config 4 has an invalid interface number: 1 but max is 0 [ 163.370400][ T4266] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 163.381145][ T4266] usb 7-1: config 4 has no interface number 0 [ 163.388653][ T4266] usb 7-1: config 4 interface 1 altsetting 7 endpoint 0xB has invalid wMaxPacketSize 0 [ 163.395967][ T5467] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.404216][ T4266] usb 7-1: config 4 interface 1 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 163.441098][ T5467] usb 1-1: Product: syz [ 163.451690][ T5467] usb 1-1: Manufacturer: syz [ 163.456443][ T5467] usb 1-1: SerialNumber: syz [ 163.477582][ T4266] usb 7-1: config 4 interface 1 has no altsetting 0 [ 163.526316][ T5467] usb 1-1: selecting invalid altsetting 1 [ 163.620988][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 163.645612][ T4266] usb 7-1: New USB device found, idVendor=058b, idProduct=0043, bcdDevice= 1.f0 [ 163.655053][ T4266] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.663268][ T4266] usb 7-1: Product: syz [ 163.668592][ T4266] usb 7-1: Manufacturer: syz [ 163.673490][ T4266] usb 7-1: SerialNumber: syz [ 163.736144][ T5467] cdc_mbim 1-1:1.0: bind() failure [ 163.763689][ T5467] usb 1-1: USB disconnect, device number 4 [ 164.643697][ T4266] ftdi_sio 7-1:4.1: FTDI USB Serial Device converter detected [ 165.862163][ T5826] netlink: 'syz.1.385': attribute type 4 has an invalid length. [ 165.926591][ T5828] loop0: detected capacity change from 0 to 256 [ 166.165578][ T4266] usb 7-1: Detected SIO [ 166.170077][ T4266] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 11 [ 166.194213][ T4266] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 166.214423][ T4266] usb 7-1: USB disconnect, device number 2 [ 166.330188][ T4266] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 166.382385][ T4266] ftdi_sio 7-1:4.1: device disconnected [ 166.480914][ T5844] overlayfs: failed to get inode (-116) [ 166.508838][ T5844] overlayfs: failed to get inode (-116) [ 166.522364][ T5844] overlayfs: failed to get inode (-116) [ 166.566188][ T5844] overlayfs: failed to get inode (-116) [ 166.753113][ T5849] loop0: detected capacity change from 0 to 2048 [ 166.925488][ T5849] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 167.308936][ T5853] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 167.699013][ T5849] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1662 with error 28 [ 167.712717][ T5849] EXT4-fs (loop0): This should not happen!! Data will be lost [ 167.712717][ T5849] [ 167.723752][ T5849] EXT4-fs (loop0): Total free blocks count 0 [ 168.675356][ T5849] EXT4-fs (loop0): Free/Dirty block details [ 168.681319][ T5849] EXT4-fs (loop0): free_blocks=0 [ 168.741171][ T5867] loop1: detected capacity change from 0 to 1024 [ 168.775062][ T5849] EXT4-fs (loop0): dirty_blocks=1664 [ 168.792668][ T5849] EXT4-fs (loop0): Block reservation details [ 168.819235][ T5849] EXT4-fs (loop0): i_reserved_data_blocks=104 [ 168.945341][ T5867] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.960274][ T5867] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.296319][ T5885] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 169.305001][ T5885] netlink: 'syz.1.397': attribute type 4 has an invalid length. [ 169.348936][ T5889] binder: BINDER_SET_CONTEXT_MGR already set [ 169.418225][ T5885] netlink: 15363 bytes leftover after parsing attributes in process `syz.1.397'. [ 169.429712][ T5889] binder: 5886:5889 ioctl 4018620d 2000000002c0 returned -16 [ 170.300483][ T5905] netlink: 44 bytes leftover after parsing attributes in process `syz.0.398'. [ 170.405759][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.413235][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.662495][ T5935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'. [ 172.942328][ T5946] loop0: detected capacity change from 0 to 1024 [ 172.985283][ T5948] netlink: 'syz.1.411': attribute type 10 has an invalid length. [ 173.004593][ T5948] device macvlan0 entered promiscuous mode [ 173.029936][ T5946] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 173.037959][ T5948] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 173.109138][ T5946] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3876: comm syz.0.410: Allocating blocks 385-513 which overlap fs metadata [ 173.134357][ T5952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.139295][ T5946] EXT4-fs (loop0): pa ffff888020f4d000: logic 16, phys. 129, len 24 [ 173.151191][ T5946] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4893: group 0, free 0, pa_free 8 [ 173.183476][ T5952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.207593][ T5952] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 173.245305][ T5952] bond0 (unregistering): Released all slaves [ 173.757662][ T5973] capability: warning: `syz.6.418' uses 32-bit capabilities (legacy support in use) [ 174.261947][ T5977] netlink: 'syz.5.420': attribute type 1 has an invalid length. [ 176.269847][ T5989] loop0: detected capacity change from 0 to 512 [ 176.484902][ T5989] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.313370][ T5989] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 177.414191][ T5989] System zones: 1-12 [ 177.479396][ T5989] EXT4-fs (loop0): 1 truncate cleaned up [ 177.527363][ T5989] EXT4-fs (loop0): mounted filesystem without journal. Opts: nolazytime,init_itable=0x000000007fffffff,debug,lazytime,nombcache,noload,,errors=continue. Quota mode: none. [ 177.582309][ T5989] EXT4-fs (loop0): shut down requested (2) [ 179.341573][ T6058] netlink: 60 bytes leftover after parsing attributes in process `syz.5.441'. [ 179.423222][ T6064] batman_adv: Cannot find parent device [ 179.443479][ T6064] batman_adv: batadv0: Adding interface: ip6gretap1 [ 179.466319][ T6064] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.501127][ T6064] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 179.514686][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 179.523683][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.548896][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.587609][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.605199][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.629983][ T6068] batman_adv: batadv0: Removing interface: ip6gretap1 [ 179.645919][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz.5.444'. [ 180.737612][ T4266] Bluetooth: hci3: command 0x0406 tx timeout [ 180.743751][ T4266] Bluetooth: hci0: command 0x0406 tx timeout [ 180.749877][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 180.975996][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.5.450'. [ 181.960254][ T6108] device vlan0 entered promiscuous mode [ 182.021375][ T6108] team0: Port device vlan0 added [ 182.108466][ T6111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.453'. [ 182.210740][ T6116] loop0: detected capacity change from 0 to 1024 [ 182.473728][ T6116] EXT4-fs (loop0): Invalid want_extra_isize 7 [ 182.882385][ T6111] team0 (unregistering): Port device team_slave_0 removed [ 182.978286][ T6111] team0 (unregistering): Port device team_slave_1 removed [ 183.011347][ T6111] team0 (unregistering): Port device vlan0 removed [ 184.274866][ T4266] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.322291][ T6153] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 184.322291][ T6153] program syz.6.462 not setting count and/or reply_len properly [ 184.529248][ T6156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.463'. [ 184.544897][ T4266] usb 2-1: Using ep0 maxpacket: 16 [ 184.666586][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.802392][ T4266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.132344][ T4266] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 185.141773][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.165290][ T4266] usb 2-1: config 0 descriptor?? [ 186.100577][ T4266] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 186.435223][ T4266] usb 2-1: USB disconnect, device number 4 [ 187.439009][ T6179] fido_id[6179]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 188.205449][ T5355] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 188.645374][ T5355] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.039348][ T5355] usb 2-1: not running at top speed; connect to a high speed hub [ 189.092624][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 189.133159][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.5.481'. [ 189.142480][ T5355] usb 2-1: config 0 has no interfaces? [ 189.335070][ T5355] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 189.357555][ T5355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.390714][ T5355] usb 2-1: Product: syz [ 189.400154][ T5355] usb 2-1: Manufacturer: syz [ 189.412300][ T5355] usb 2-1: SerialNumber: syz [ 189.426334][ T5355] usb 2-1: config 0 descriptor?? [ 189.436482][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.4.484'. [ 189.448060][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.4.484'. [ 189.528173][ T6251] netlink: 3 bytes leftover after parsing attributes in process `syz.4.484'. [ 189.583649][ T6256] loop0: detected capacity change from 0 to 256 [ 189.622302][ T6256] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 189.964183][ T21] usb 2-1: USB disconnect, device number 5 [ 191.267563][ T6294] netlink: 156 bytes leftover after parsing attributes in process `syz.0.492'. [ 191.365176][ T26] audit: type=1326 audit(1747975339.355:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6286 comm="syz.0.492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x0 [ 195.212675][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.572706][ T6360] loop5: detected capacity change from 0 to 16 [ 195.792468][ T6360] erofs: (device loop5): mounted with root inode @ nid 36. [ 196.332428][ T6371] loop0: detected capacity change from 0 to 8 [ 196.509268][ T6371] SQUASHFS error: zlib decompression failed, data probably corrupt [ 196.517775][ T6371] SQUASHFS error: Failed to read block 0x4e8: -5 [ 196.754435][ T6371] SQUASHFS error: zlib decompression failed, data probably corrupt [ 196.848854][ T6371] SQUASHFS error: Failed to read block 0x4ee: -5 [ 197.888157][ T26] audit: type=1800 audit(1747975345.875:14): pid=6371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.514" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 197.986471][ T6375] loop1: detected capacity change from 0 to 2048 [ 198.071465][ T5689] loop1: p1 < > p3 [ 198.112535][ T5689] loop1: p3 size 134217728 extends beyond EOD, truncated [ 198.194744][ T6375] loop1: p1 < > p3 [ 198.238360][ T6375] loop1: p3 size 134217728 extends beyond EOD, truncated [ 198.379858][ T6404] netlink: 12 bytes leftover after parsing attributes in process `syz.5.520'. [ 198.714959][ T4217] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 199.034929][ T4217] usb 1-1: Using ep0 maxpacket: 8 [ 199.104760][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 199.175544][ T4217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.346378][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 199.362138][ T4217] usb 1-1: config 0 has no interfaces? [ 199.457893][ T4158] udevd[4158]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 199.468020][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 199.545042][ T4217] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 199.573809][ T4217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.590807][ T6424] netlink: 108 bytes leftover after parsing attributes in process `syz.1.529'. [ 199.626990][ T4217] usb 1-1: Product: syz [ 199.631286][ T4217] usb 1-1: Manufacturer: syz [ 199.644052][ T26] audit: type=1326 audit(1747975347.625:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 199.644170][ T4217] usb 1-1: SerialNumber: syz [ 199.715187][ T26] audit: type=1326 audit(1747975347.625:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 199.756567][ T4217] usb 1-1: config 0 descriptor?? [ 199.830439][ T26] audit: type=1326 audit(1747975347.655:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 199.881942][ T26] audit: type=1326 audit(1747975347.655:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 199.929060][ T6433] loop1: detected capacity change from 0 to 4096 [ 199.942918][ T26] audit: type=1326 audit(1747975347.655:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 200.084473][ T6433] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 200.510824][ T26] audit: type=1326 audit(1747975347.655:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 200.905781][ T26] audit: type=1326 audit(1747975347.655:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 200.964778][ T26] audit: type=1326 audit(1747975347.665:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 201.079413][ T6433] ntfs3: loop1: Failed to load $UpCase. [ 201.134836][ T21] usb 1-1: USB disconnect, device number 5 [ 201.171802][ T26] audit: type=1326 audit(1747975347.665:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6427 comm="syz.5.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 201.500287][ T6453] device syz_tun entered promiscuous mode [ 201.549849][ T6453] device batadv_slave_0 entered promiscuous mode [ 201.587306][ T696] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 201.666016][ T6460] loop5: detected capacity change from 0 to 512 [ 201.740538][ T6460] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 202.076234][ T6477] netlink: 'syz.1.538': attribute type 39 has an invalid length. [ 202.084092][ T6477] device macvlan0 left promiscuous mode [ 202.935559][ T6460] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.537: corrupted inode contents [ 202.967900][ T6483] tipc: Started in network mode [ 202.983357][ T6483] tipc: Node identity ac14140f, cluster identity 4711 [ 202.992655][ T6460] EXT4-fs error (device loop5): ext4_dirty_inode:6039: inode #16: comm syz.5.537: mark_inode_dirty error [ 203.005944][ T6483] tipc: New replicast peer: 255.255.255.255 [ 203.024117][ T6483] tipc: Enabled bearer , priority 10 [ 203.034297][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 203.045348][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.052025][ T6460] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.537: corrupted inode contents [ 203.058158][ T6486] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.066364][ T6460] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #16: comm syz.5.537: mark_inode_dirty error [ 203.081345][ T6486] device bridge_slave_0 left promiscuous mode [ 203.087966][ T6460] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.537: corrupted inode contents [ 203.092156][ T6486] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.110750][ T6460] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 203.124006][ T6460] EXT4-fs error (device loop5): ext4_do_update_inode:5203: inode #16: comm syz.5.537: corrupted inode contents [ 203.137011][ T6460] EXT4-fs error (device loop5): ext4_truncate:4273: inode #16: comm syz.5.537: mark_inode_dirty error [ 203.144346][ T6486] device bridge_slave_1 left promiscuous mode [ 203.149392][ T6460] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 203.154392][ T6486] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.175104][ T6460] EXT4-fs (loop5): 1 truncate cleaned up [ 203.181141][ T6460] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,user_xattr,data=journal,resgid=0x0000000000000000,grpjquota=./file2,,errors=continue. Quota mode: writeback. [ 203.203456][ T6460] ext4 filesystem being mounted at /62/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.237190][ T6494] netlink: zone id is out of range [ 203.252751][ T6494] netlink: zone id is out of range [ 203.259912][ T6486] team0: Port device team_slave_0 removed [ 203.267905][ T6494] netlink: zone id is out of range [ 203.293175][ T6486] team0: Port device team_slave_1 removed [ 203.301675][ T6494] netlink: zone id is out of range [ 203.310713][ T6494] netlink: zone id is out of range [ 203.316912][ T6494] netlink: zone id is out of range [ 203.359256][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 203.376362][ T6489] tipc: Disabling bearer [ 203.411281][ T6488] team0: Mode changed to "loadbalance" [ 203.420775][ T6491] batman_adv: batadv0: Adding interface: dummy0 [ 203.427747][ T6491] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.471736][ T6491] batman_adv: batadv0: Interface activated: dummy0 [ 203.483789][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.544'. [ 203.627685][ T6493] batadv0: mtu less than device minimum [ 203.647056][ T6493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.660144][ T6493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 203.672750][ T6493] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 204.903618][ T13] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 205.394972][ T13] usb 7-1: Using ep0 maxpacket: 8 [ 205.938899][ T6534] netlink: 'syz.4.555': attribute type 39 has an invalid length. [ 207.864878][ T13] usb 7-1: device descriptor read/all, error -71 [ 208.368955][ T6551] netlink: 20 bytes leftover after parsing attributes in process `syz.1.559'. [ 209.032274][ T6551] Can't find ip_set type [ 209.086888][ T6559] loop0: detected capacity change from 0 to 512 [ 209.141491][ T6565] loop5: detected capacity change from 0 to 8 [ 209.164915][ T6559] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 209.200973][ T6565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 209.209228][ T6565] SQUASHFS error: Failed to read block 0x4e8: -5 [ 209.218965][ T6565] SQUASHFS error: zlib decompression failed, data probably corrupt [ 209.223722][ T6570] net_ratelimit: 16 callbacks suppressed [ 209.223737][ T6570] netlink: zone id is out of range [ 209.227931][ T6565] SQUASHFS error: Failed to read block 0x4ee: -5 [ 209.261496][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 209.261509][ T26] audit: type=1800 audit(1747975357.245:35): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.563" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 209.286910][ T6570] netlink: zone id is out of range [ 209.292194][ T6570] netlink: zone id is out of range [ 209.299354][ T6570] netlink: zone id is out of range [ 209.337989][ T6570] netlink: zone id is out of range [ 209.343275][ T6570] netlink: zone id is out of range [ 209.400933][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.561: corrupted inode contents [ 209.417197][ T6559] EXT4-fs error (device loop0): ext4_dirty_inode:6039: inode #16: comm syz.0.561: mark_inode_dirty error [ 209.436547][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.561: corrupted inode contents [ 209.481990][ T6559] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #16: comm syz.0.561: mark_inode_dirty error [ 209.506575][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.561: corrupted inode contents [ 209.587933][ T6559] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 209.655010][ T6559] EXT4-fs error (device loop0): ext4_do_update_inode:5203: inode #16: comm syz.0.561: corrupted inode contents [ 209.748570][ T6559] EXT4-fs error (device loop0): ext4_truncate:4273: inode #16: comm syz.0.561: mark_inode_dirty error [ 209.770644][ T6559] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 209.903321][ T6559] EXT4-fs (loop0): 1 truncate cleaned up [ 209.909259][ T6559] EXT4-fs (loop0): mounted filesystem without journal. Opts: discard,user_xattr,data=journal,resgid=0x0000000000000000,grpjquota=./file2,,errors=continue. Quota mode: writeback. [ 210.677757][ T6559] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.832821][ T4217] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 211.132576][ T4217] usb 2-1: Using ep0 maxpacket: 8 [ 211.241119][ T6622] netlink: 'syz.5.574': attribute type 39 has an invalid length. [ 211.317518][ T6607] loop6: detected capacity change from 0 to 128 [ 211.980801][ T6607] qnx6: superblock #1 checksum error [ 211.992497][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.005211][ T4217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.031672][ T4217] usb 2-1: config 0 has no interfaces? [ 212.048613][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.059768][ T6626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 212.069839][ T6626] device bridge_slave_0 left promiscuous mode [ 212.082999][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.109457][ T6626] device bridge_slave_1 left promiscuous mode [ 212.118645][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.187686][ T6626] bond0: (slave bond_slave_0): Releasing backup interface [ 212.218670][ T6626] bond0: (slave bond_slave_1): Releasing backup interface [ 212.268258][ T4217] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 212.282183][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.302746][ T4217] usb 2-1: Product: syz [ 212.316206][ T4217] usb 2-1: Manufacturer: syz [ 212.329699][ T4217] usb 2-1: SerialNumber: syz [ 212.352414][ T4217] usb 2-1: config 0 descriptor?? [ 212.363994][ T6626] team0: Port device team_slave_0 removed [ 212.412303][ T6626] team0: Port device team_slave_1 removed [ 212.429760][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.447907][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.474034][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.578'. [ 212.489956][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.498486][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.521956][ T6640] netlink: 20 bytes leftover after parsing attributes in process `syz.5.578'. [ 212.532730][ T6626] bond1: (slave geneve2): Releasing active interface [ 212.563476][ T6630] team0: Mode changed to "loadbalance" [ 212.589723][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.575'. [ 212.610786][ T4267] usb 2-1: USB disconnect, device number 6 [ 212.862193][ T6651] netlink: zone id is out of range [ 212.872377][ T6651] netlink: zone id is out of range [ 212.887622][ T6651] netlink: zone id is out of range [ 212.893912][ T6651] netlink: zone id is out of range [ 212.911024][ T6662] netlink: 24 bytes leftover after parsing attributes in process `syz.5.583'. [ 213.015388][ T6659] netlink: 40 bytes leftover after parsing attributes in process `syz.5.583'. [ 213.016280][ T6667] loop1: detected capacity change from 0 to 256 [ 213.164319][ T6667] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 213.214870][ T6667] FAT-fs (loop1): Filesystem has been set read-only [ 213.226503][ T6667] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 213.243490][ T6679] loop6: detected capacity change from 0 to 128 [ 213.261453][ T6667] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 213.286313][ T6682] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'. [ 213.309438][ T26] audit: type=1800 audit(1747975361.295:36): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.585" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 213.349398][ T6667] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 213.382369][ T6682] 8021q: adding VLAN 0 to HW filter on device team1 [ 213.456504][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 213.649262][ T6689] device syzkaller0 entered promiscuous mode [ 213.744788][ T21] usb 6-1: Using ep0 maxpacket: 8 [ 213.925050][ T21] usb 6-1: unable to get BOS descriptor or descriptor too short [ 214.028388][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 214.036136][ T21] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x82 has invalid maxpacket 32 [ 214.056671][ T21] usb 6-1: config 1 interface 0 altsetting 129 bulk endpoint 0x3 has invalid maxpacket 1023 [ 214.059690][ T6711] loop1: detected capacity change from 0 to 8 [ 214.076755][ T6708] batman_adv: batadv0: Interface deactivated: dummy0 [ 214.094836][ T21] usb 6-1: config 1 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.124408][ T6711] SQUASHFS error: zlib decompression failed, data probably corrupt [ 214.132516][ T6711] SQUASHFS error: Failed to read block 0x4e8: -5 [ 214.133934][ T6708] batman_adv: batadv0: Removing interface: dummy0 [ 214.140839][ T6711] SQUASHFS error: zlib decompression failed, data probably corrupt [ 214.153676][ T6711] SQUASHFS error: Failed to read block 0x4ee: -5 [ 214.154762][ T21] usb 6-1: config 1 interface 0 has no altsetting 0 [ 214.160993][ T26] audit: type=1800 audit(1747975362.155:37): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.593" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 214.207554][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 214.229427][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.237494][ T6711] SQUASHFS error: Failed to read block 0x6e6: -5 [ 214.244288][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.252058][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.260359][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.267721][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.274593][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.281978][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.288896][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.296326][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.303257][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.312407][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.319280][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.326691][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.333546][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.340929][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.347801][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.355197][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.358543][ T6708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.362721][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.377100][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.385788][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.393438][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.402781][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.410209][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.417075][ T6711] SQUASHFS error: Unable to read metadata cache entry [6e4] [ 214.424483][ T6711] SQUASHFS error: read_indexes: reading block [6e4:0] [ 214.457990][ T6708] device bridge_slave_0 left promiscuous mode [ 214.464548][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.465066][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.494144][ T6708] device bridge_slave_1 left promiscuous mode [ 214.502818][ T21] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.513722][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.525083][ T21] usb 6-1: Product: syz [ 214.529368][ T21] usb 6-1: Manufacturer: syz [ 214.534173][ T21] usb 6-1: SerialNumber: syz [ 214.545576][ T6708] bond0: (slave bond_slave_0): Releasing backup interface [ 214.575077][ T6675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 214.582369][ T6675] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 214.591026][ T6708] bond0: (slave bond_slave_1): Releasing backup interface [ 214.611821][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.622168][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.631703][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.639815][ T6708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.720619][ T6712] loop0: detected capacity change from 0 to 128 [ 214.767927][ T6712] qnx6: superblock #1 checksum error [ 214.815457][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.6.595'. [ 214.867107][ T6737] netlink: 20 bytes leftover after parsing attributes in process `syz.6.595'. [ 214.937996][ T21] usb 6-1: bad CDC descriptors [ 215.007212][ T21] usb 6-1: USB disconnect, device number 2 [ 215.050789][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.6.598'. [ 215.843388][ T6750] netlink: 40 bytes leftover after parsing attributes in process `syz.6.598'. [ 216.171101][ T6756] device syzkaller0 entered promiscuous mode [ 216.267491][ T6759] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.347828][ T6762] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.382872][ T6759] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.446533][ T6759] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.508692][ T6759] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.615827][ T6759] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.631916][ T6759] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.646250][ T6759] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.659749][ T6759] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.732199][ T6765] device bridge_slave_0 left promiscuous mode [ 216.743857][ T6769] loop0: detected capacity change from 0 to 256 [ 216.750827][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.764182][ T6770] loop1: detected capacity change from 0 to 512 [ 216.772874][ T6765] device bridge_slave_1 left promiscuous mode [ 216.780739][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.791616][ T6765] bond0: (slave bond_slave_0): Releasing backup interface [ 216.793069][ T6772] loop6: detected capacity change from 0 to 8 [ 216.807163][ T6765] bond0: (slave bond_slave_1): Releasing backup interface [ 216.826218][ T6770] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 216.867509][ T6772] SQUASHFS error: zlib decompression failed, data probably corrupt [ 216.872600][ T6769] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 216.876776][ T6772] SQUASHFS error: Failed to read block 0x4e8: -5 [ 216.892675][ T6772] SQUASHFS error: zlib decompression failed, data probably corrupt [ 216.894329][ T6765] team0: Port device team_slave_0 removed [ 216.900982][ T6772] SQUASHFS error: Failed to read block 0x4ee: -5 [ 216.915074][ T26] audit: type=1800 audit(1747975364.905:38): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.606" name="file1" dev="loop6" ino=5 res=0 errno=0 [ 216.928485][ T6770] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 216.935044][ T6769] FAT-fs (loop0): Filesystem has been set read-only [ 216.954314][ T6769] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 216.966602][ T6769] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 216.978047][ T26] audit: type=1800 audit(1747975364.965:39): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.616" name="file1" dev="loop0" ino=1048619 res=0 errno=0 [ 216.999956][ T6769] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 217.015304][ T6765] team0: Port device team_slave_1 removed [ 217.043254][ T6770] EXT4-fs (loop1): 1 truncate cleaned up [ 217.055382][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 217.104197][ T6773] team0: Mode changed to "loadbalance" [ 217.113189][ T6770] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 217.397067][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 217.720063][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.734162][ T6784] __nla_validate_parse: 2 callbacks suppressed [ 217.734179][ T6784] netlink: 20 bytes leftover after parsing attributes in process `syz.0.610'. [ 217.791280][ T23] usb 6-1: config 0 has no interfaces? [ 217.880140][ T6781] netlink: 20 bytes leftover after parsing attributes in process `syz.0.610'. [ 218.018885][ T23] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.043638][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.054106][ T23] usb 6-1: Product: syz [ 218.058791][ T23] usb 6-1: Manufacturer: syz [ 218.089679][ T23] usb 6-1: SerialNumber: syz [ 218.109153][ T6791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.615'. [ 218.120095][ T23] usb 6-1: config 0 descriptor?? [ 218.779885][ T6800] netlink: 40 bytes leftover after parsing attributes in process `syz.4.615'. [ 219.109331][ T23] usb 6-1: USB disconnect, device number 3 [ 219.194130][ T6806] device syzkaller0 entered promiscuous mode [ 219.382047][ T6812] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.409415][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.1.619'. [ 219.440849][ T6815] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.453352][ T6818] device geneve3 entered promiscuous mode [ 219.615755][ T6812] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.672798][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.624'. [ 219.978414][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.058104][ T6826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.391083][ T6826] device bridge_slave_0 left promiscuous mode [ 220.400556][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.417551][ T6826] device bridge_slave_1 left promiscuous mode [ 220.424149][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.500506][ T6826] bond0: (slave bond_slave_0): Releasing backup interface [ 220.526466][ T6826] bond0: (slave bond_slave_1): Releasing backup interface [ 220.564002][ T6826] team0: Port device team_slave_0 removed [ 220.573631][ T6826] team0: Port device team_slave_1 removed [ 220.592683][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.600564][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.619904][ T6826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.628049][ T6826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.649755][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.624'. [ 220.674887][ T6824] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 220.682618][ T6830] netlink: 4 bytes leftover after parsing attributes in process `syz.5.623'. [ 220.796106][ T6812] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.848294][ T6812] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.912976][ T6812] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.928021][ T6812] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.940588][ T6812] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.953863][ T6812] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.004050][ T6838] loop6: detected capacity change from 0 to 8 [ 221.026726][ T6844] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 221.079300][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.4.627'. [ 221.093094][ T6840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.116391][ T6850] SQUASHFS error: Unable to read inode 0xa7 [ 221.212607][ T6847] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.242344][ T6840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.324389][ T6840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.414868][ T6840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.541530][ T6840] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.581929][ T6840] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.610949][ T6840] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.636255][ T5467] Bluetooth: hci1: command 0x0406 tx timeout [ 221.653447][ T6840] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.961476][ T6867] __nla_validate_parse: 1 callbacks suppressed [ 222.961492][ T6867] netlink: 24 bytes leftover after parsing attributes in process `syz.0.630'. [ 223.071256][ T6870] device geneve2 entered promiscuous mode [ 223.124474][ T6867] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 223.225242][ T26] audit: type=1326 audit(1747975371.195:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.275011][ T6876] futex_wake_op: syz.5.637 tries to shift op by -1; fix this program [ 223.321623][ T26] audit: type=1326 audit(1747975371.255:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.366067][ T26] audit: type=1326 audit(1747975371.255:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.405526][ T4267] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 223.414955][ T26] audit: type=1326 audit(1747975371.255:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.458087][ T26] audit: type=1326 audit(1747975371.255:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.518921][ T26] audit: type=1326 audit(1747975371.255:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.569200][ T26] audit: type=1326 audit(1747975371.255:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.592113][ T26] audit: type=1326 audit(1747975371.255:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.616725][ T26] audit: type=1326 audit(1747975371.255:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.674853][ T4267] usb 7-1: Using ep0 maxpacket: 8 [ 223.698268][ T26] audit: type=1326 audit(1747975371.255:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6875 comm="syz.5.637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11c4f4f969 code=0x7ffc0000 [ 223.748794][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.768749][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.783198][ T6891] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.804967][ T4267] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.833654][ T4267] usb 7-1: config 0 has no interfaces? [ 223.910095][ T6893] team0: Mode changed to "loadbalance" [ 224.005267][ T4267] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 224.020522][ T4267] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.037517][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.647'. [ 224.049529][ T4267] usb 7-1: Product: syz [ 224.058577][ T4267] usb 7-1: Manufacturer: syz [ 224.066139][ T4267] usb 7-1: SerialNumber: syz [ 224.076179][ T4267] usb 7-1: config 0 descriptor?? [ 224.335252][ T23] usb 7-1: USB disconnect, device number 5 [ 224.695597][ T6899] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.713977][ T6902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.648'. [ 224.787079][ T6902] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.886356][ T6899] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.873689][ T6913] futex_wake_op: syz.6.654 tries to shift op by -1; fix this program [ 225.910646][ T6911] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.955441][ T6911] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.964178][ T6911] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.976552][ T6911] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.004952][ T6911] device geneve2 entered promiscuous mode [ 226.125972][ T6899] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.244322][ T6899] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.367725][ T6899] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.386597][ T6899] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.411455][ T6899] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.468632][ T6899] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.666075][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.681043][ T6935] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.965021][ T4217] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 227.023379][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.662'. [ 227.224770][ T4217] usb 2-1: Using ep0 maxpacket: 8 [ 227.347402][ T6945] futex_wake_op: syz.4.666 tries to shift op by -1; fix this program [ 228.115788][ T4217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.126120][ T4217] usb 2-1: config 0 has no interfaces? [ 228.269341][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 228.277692][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 228.285937][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 228.294963][ T4217] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 228.295026][ T6955] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 228.335267][ T6957] team0: Mode changed to "loadbalance" [ 228.370066][ T4217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.378249][ T4217] usb 2-1: Product: syz [ 228.378601][ T6955] netlink: 4 bytes leftover after parsing attributes in process `syz.6.680'. [ 228.382421][ T4217] usb 2-1: Manufacturer: syz [ 228.382440][ T4217] usb 2-1: SerialNumber: syz [ 228.384398][ T4217] usb 2-1: config 0 descriptor?? [ 228.482683][ T6958] device geneve2 entered promiscuous mode [ 228.818218][ T5467] usb 2-1: USB disconnect, device number 7 [ 230.092240][ T6980] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.176768][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.6.674'. [ 230.196736][ T6983] 8021q: adding VLAN 0 to HW filter on device team0 [ 230.284591][ T6980] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.439088][ T6980] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.517294][ T6980] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.581760][ T6980] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.594124][ T6980] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.608378][ T6980] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.620730][ T6980] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.856281][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 230.856297][ T26] audit: type=1326 audit(1747975378.845:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.295618][ T6998] futex_wake_op: syz.0.678 tries to shift op by -1; fix this program [ 232.473984][ T26] audit: type=1326 audit(1747975378.885:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.534428][ T7019] device geneve2 entered promiscuous mode [ 232.590127][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.684'. [ 232.659846][ T26] audit: type=1326 audit(1747975379.975:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.734816][ T26] audit: type=1326 audit(1747975380.015:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.764443][ T26] audit: type=1326 audit(1747975380.015:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.791520][ T26] audit: type=1326 audit(1747975380.035:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.815651][ T26] audit: type=1326 audit(1747975380.045:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.843332][ T26] audit: type=1326 audit(1747975380.045:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.843856][ T7028] loop6: detected capacity change from 0 to 512 [ 232.870074][ T26] audit: type=1326 audit(1747975380.085:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 232.899228][ T26] audit: type=1326 audit(1747975380.125:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6997 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b11397969 code=0x7ffc0000 [ 233.019286][ T7028] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 233.031522][ T7028] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.274849][ T5355] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 234.668537][ T5355] usb 2-1: Using ep0 maxpacket: 8 [ 234.906062][ T5355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.993124][ T5355] usb 2-1: config 0 has no interfaces? [ 235.266020][ T5355] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.466399][ T5355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.488287][ T5355] usb 2-1: Product: syz [ 236.922572][ T5355] usb 2-1: Manufacturer: syz [ 236.940484][ T5355] usb 2-1: SerialNumber: syz [ 237.077447][ T5355] usb 2-1: config 0 descriptor?? [ 237.254804][ T5355] usb 2-1: can't set config #0, error -71 [ 237.401884][ T5355] usb 2-1: USB disconnect, device number 8 [ 237.754777][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 237.754794][ T26] audit: type=1326 audit(1747975385.735:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 237.790152][ T7067] futex_wake_op: syz.1.700 tries to shift op by -1; fix this program [ 237.834183][ T7071] loop1: detected capacity change from 0 to 2048 [ 237.920465][ T3545] loop1: p1 < > p4 [ 237.931595][ T3545] loop1: p4 size 8388608 extends beyond EOD, truncated [ 237.959835][ T26] audit: type=1326 audit(1747975385.735:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 238.040185][ T26] audit: type=1326 audit(1747975385.765:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 238.077726][ T7071] loop1: p1 < > p4 [ 238.079829][ T26] audit: type=1326 audit(1747975385.765:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 238.104308][ T7071] loop1: p4 size 8388608 extends beyond EOD, truncated [ 238.148043][ T26] audit: type=1326 audit(1747975385.765:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 238.248268][ T7082] device vlan2 entered promiscuous mode [ 238.359716][ T26] audit: type=1326 audit(1747975385.765:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 238.515834][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.527643][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 238.537966][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.546250][ T7087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.871687][ T7091] team0: Mode changed to "loadbalance" [ 238.917249][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 238.953516][ T26] audit: type=1326 audit(1747975385.775:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 238.988045][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 239.032836][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 239.048684][ T26] audit: type=1326 audit(1747975385.775:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 239.138648][ T26] audit: type=1326 audit(1747975385.775:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 239.174953][ T26] audit: type=1326 audit(1747975385.775:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.1.700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6dae41e969 code=0x7ffc0000 [ 239.232296][ T7103] loop0: detected capacity change from 0 to 16 [ 239.312724][ T7095] netlink: 12 bytes leftover after parsing attributes in process `syz.5.711'. [ 239.323704][ T7103] erofs: Unknown parameter 'ÿÿÿÿvΡeçú1ûì' [ 239.427551][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 239.449489][ T5689] udevd[5689]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 239.954694][ T7114] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 239.994682][ T7114] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 240.923609][ T7116] loop5: detected capacity change from 0 to 8 [ 240.964810][ T7118] loop0: detected capacity change from 0 to 512 [ 241.199740][ T7118] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 241.216988][ T7122] netlink: 60 bytes leftover after parsing attributes in process `syz.6.719'. [ 241.251591][ T7116] SQUASHFS error: Unable to read inode 0xa7 [ 241.298306][ T4185] udevd[4185]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 241.314861][ C1] general protection fault, probably for non-canonical address 0xdffffc000000006c: 0000 [#1] PREEMPT SMP KASAN [ 241.318934][ T5689] udevd[5689]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 241.326610][ C1] KASAN: null-ptr-deref in range [0x0000000000000360-0x0000000000000367] [ 241.326629][ C1] CPU: 1 PID: 3545 Comm: udevd Not tainted 5.15.184-syzkaller #0 [ 241.326648][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.326671][ C1] RIP: 0010:find_match+0xa3/0xc30 [ 241.326706][ C1] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 bf 8c 33 f9 48 89 d8 bb 60 03 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 9e 8c 33 f9 48 8b 1b e8 f6 87 17 [ 241.326723][ C1] RSP: 0000:ffffc90002e0e838 EFLAGS: 00010206 [ 241.326742][ C1] RAX: 000000000000006c RBX: 0000000000000360 RCX: ffff88807cfb0000 [ 241.384232][ T7130] loop6: detected capacity change from 0 to 512 [ 241.387256][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 241.387273][ C1] RBP: 1ffff11004d5b5c4 R08: ffffc90002e0ebc0 R09: ffffc90002e0ebd0 [ 241.387288][ C1] R10: fffff520005c1d46 R11: 1ffff920005c1d44 R12: dffffc0000000000 [ 241.387303][ C1] R13: 0000000000000002 R14: 1ffff11004d5b5c5 R15: ffff888026adae2f [ 241.387318][ C1] FS: 00007f1b1aa9d880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 241.397380][ T7118] EXT4-fs (loop0): 1 truncate cleaned up [ 241.401336][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 241.407723][ T7118] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 241.415523][ C1] CR2: 000055555debd808 CR3: 000000007cfe0000 CR4: 00000000003506e0 [ 241.415543][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 241.415555][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 241.475120][ T7133] device vlan2 entered promiscuous mode [ 241.481465][ C1] Call Trace: [ 241.481477][ C1] [ 241.517203][ C1] rt6_nh_find_match+0xd5/0x140 [ 241.522079][ C1] nexthop_for_each_fib6_nh+0x1be/0x3e0 [ 241.527643][ C1] ? __find_rr_leaf+0x6c0/0x6c0 [ 241.532515][ C1] __find_rr_leaf+0x45e/0x6c0 [ 241.537216][ C1] ? rt6_remove_exception+0x280/0x280 [ 241.542633][ C1] fib6_table_lookup+0x39c/0xa70 [ 241.547580][ C1] ? fib6_nh_age_exceptions+0x5c0/0x5c0 [ 241.553138][ C1] ip6_pol_route+0x209/0x1290 [ 241.557815][ C1] ? trace_fib6_table_lookup+0x1b0/0x1b0 [ 241.563457][ C1] ? mark_lock+0x94/0x320 [ 241.567788][ C1] ? mark_lock+0x94/0x320 [ 241.572116][ C1] fib6_rule_lookup+0x2fc/0x570 [ 241.576983][ C1] ? ip6_route_output_flags_noref+0x390/0x390 [ 241.583053][ C1] ? fib6_lookup+0x2c0/0x2c0 [ 241.587649][ C1] ? mark_lock+0x94/0x320 [ 241.592035][ C1] ? read_lock_is_recursive+0x10/0x10 [ 241.597422][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 241.602652][ C1] ? __ipv6_addr_type+0x149/0x2f0 [ 241.607680][ C1] ? ip6_route_output_flags_noref+0x230/0x390 [ 241.613835][ C1] ip6_route_output_flags+0xbf/0x300 [ 241.619203][ C1] ip6_dst_lookup_tail+0x194/0x1200 [ 241.624402][ C1] ? verify_lock_unused+0x140/0x140 [ 241.629602][ C1] ? ip6_dst_lookup+0x60/0x60 [ 241.634273][ C1] ? mark_lock+0x94/0x320 [ 241.638599][ C1] ? __lock_acquire+0x12d9/0x7c60 [ 241.643618][ C1] ? __siphash_unaligned+0x25c/0x3a0 [ 241.648910][ C1] ip6_dst_lookup_flow+0x44/0xd0 [ 241.653845][ C1] ? ip6_dst_lookup_tail+0x1200/0x1200 [ 241.659299][ C1] geneve_get_v6_dst+0x7da/0xb80 [ 241.664236][ C1] ? skb_vlan_inet_prepare+0x630/0x630 [ 241.669695][ C1] geneve_xmit+0x935/0x3070 [ 241.674200][ C1] ? geneve_stop+0x1b0/0x1b0 [ 241.678797][ C1] ? skb_network_protocol+0x501/0x740 [ 241.684162][ C1] ? validate_xmit_xfrm+0xb7/0xff0 [ 241.689271][ C1] ? mark_lock+0x94/0x320 [ 241.693595][ C1] ? __lock_acquire+0x13ad/0x7c60 [ 241.698612][ C1] ? rcu_lock_release+0x20/0x20 [ 241.703466][ C1] dev_hard_start_xmit+0x2a5/0x7e0 [ 241.708576][ C1] __dev_queue_xmit+0x19df/0x2ed0 [ 241.713602][ C1] ? dev_queue_xmit+0x20/0x20 [ 241.718273][ C1] ? mark_lock+0x94/0x320 [ 241.722601][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 241.728577][ C1] ? lock_chain_count+0x20/0x20 [ 241.733423][ C1] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 241.739222][ C1] ? ip6_finish_output2+0xcb2/0x1500 [ 241.744513][ C1] ip6_finish_output2+0x1035/0x1500 [ 241.749707][ C1] ? __ip6_finish_output+0x7d0/0x7d0 [ 241.754990][ C1] ndisc_send_skb+0xbea/0x14a0 [ 241.759753][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 241.764684][ C1] ? rcu_lock_release+0x20/0x20 [ 241.769547][ C1] ? ndisc_send_rs+0x544/0x730 [ 241.774306][ C1] addrconf_rs_timer+0x2b8/0x600 [ 241.779239][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 241.785302][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 241.791361][ C1] call_timer_fn+0x16c/0x530 [ 241.795949][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 241.802021][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 241.808021][ C1] ? __run_timers+0x7c0/0x7c0 [ 241.812791][ C1] ? rcu_is_watching+0x11/0xa0 [ 241.817565][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 241.822757][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 241.827952][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 241.834010][ C1] __run_timers+0x525/0x7c0 [ 241.838509][ C1] ? detach_timer+0x2b0/0x2b0 [ 241.843178][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 241.849156][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 241.854004][ C1] run_timer_softirq+0x63/0xf0 [ 241.858856][ C1] handle_softirqs+0x328/0x820 [ 241.863613][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 241.868456][ C1] ? do_softirq+0x200/0x200 [ 241.872962][ C1] __irq_exit_rcu+0x12f/0x220 [ 241.877746][ C1] ? irq_exit_rcu+0x20/0x20 [ 241.882247][ C1] irq_exit_rcu+0x5/0x20 [ 241.886483][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 241.892125][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 241.898102][ C1] RIP: 0033:0x7f1b1ab2c100 [ 241.902515][ C1] Code: 68 2e 00 00 00 e9 20 ff ff ff ff 25 1a 8b 1a 00 68 02 00 00 00 e9 10 ff ff ff ff 25 12 8b 1a 00 68 2d 00 00 00 e9 00 ff ff ff 25 0a 8b 1a 00 68 2c 00 00 00 e9 f0 fe ff ff ff 25 02 8b 1a 00 [ 241.922119][ C1] RSP: 002b:00007ffea24c7818 EFLAGS: 00000246 [ 241.928181][ C1] RAX: 00007f1b1acd3ea0 RBX: 00007ffea24c7870 RCX: 0000000000000000 [ 241.936147][ C1] RDX: 0000000000000000 RSI: 00007ffea24c7eb0 RDI: 00007ffea24c7eb0 [ 241.944121][ C1] RBP: 000055fe06f39b10 R08: 0000000000000000 R09: 0000000000000000 [ 241.952084][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffea24c7eb0 [ 241.960048][ C1] R13: 0000000000000000 R14: 0000000000000007 R15: 00007ffea24c86d0 [ 241.968015][ C1] [ 241.971038][ C1] Modules linked in: [ 241.975018][ C1] ---[ end trace 7bdac43e3251ee9b ]--- [ 241.980486][ C1] RIP: 0010:find_match+0xa3/0xc30 [ 241.985566][ C1] Code: 00 00 00 00 00 fc ff df 42 80 7c 25 00 00 74 08 48 89 df e8 bf 8c 33 f9 48 89 d8 bb 60 03 00 00 48 03 18 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 9e 8c 33 f9 48 8b 1b e8 f6 87 17 [ 242.005234][ C1] RSP: 0000:ffffc90002e0e838 EFLAGS: 00010206 [ 242.011343][ C1] RAX: 000000000000006c RBX: 0000000000000360 RCX: ffff88807cfb0000 [ 242.019368][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.027384][ C1] RBP: 1ffff11004d5b5c4 R08: ffffc90002e0ebc0 R09: ffffc90002e0ebd0 [ 242.035397][ C1] R10: fffff520005c1d46 R11: 1ffff920005c1d44 R12: dffffc0000000000 [ 242.043377][ C1] R13: 0000000000000002 R14: 1ffff11004d5b5c5 R15: ffff888026adae2f [ 242.051389][ C1] FS: 00007f1b1aa9d880(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 242.060367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 242.066987][ C1] CR2: 000055555debd808 CR3: 000000007cfe0000 CR4: 00000000003506e0 [ 242.074996][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 242.082977][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 242.090999][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 242.098293][ C1] Kernel Offset: disabled [ 242.102616][ C1] Rebooting in 86400 seconds..