last executing test programs: 24.505645199s ago: executing program 1 (id=25): syz_clone(0x65e54b32259ae034, 0x0, 0x0, 0x0, 0x0, 0x0) 22.874632673s ago: executing program 1 (id=27): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd25, 0x0, {{@in6=@private2, @in6=@mcast1, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1d}, {0x0, 0xd42, 0x0, 0x2dd}, 0x0, 0x6e6bc0}, [@tmpl={0x104, 0x5, [{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in=@broadcast, 0x0, 0x32}, 0x0, @in6=@empty}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x33}, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}]}, 0x1bc}}, 0x0) 22.110651843s ago: executing program 1 (id=30): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x4000, &(0x7f0000000040)={[{@test_dummy_encryption}, {@orlov}]}, 0x2, 0xbbf, &(0x7f0000000440)="$eJzs3M9rHOUbAPBnJptt2ub73VRErBcjIi2I26SSYotgKxUvHgS9Cg3ppoRsf5BEatIcNvoPiHoWvAhqUTzYcy+KXr1oe1U8CEVioyCikdkfSdpk09TudmL7+cC7877z7u7zPDvszrywuwHctwazmzRib0ScSCJKzf1pRBTrvb6IWuN+S4vzY78vzo8lsbz8yi9JJBFxfXF+rPVcSXO7uznoi4hvn0/igbfWx52enZscrVYrU83xgZnT5w5Mz849NXF69FTlVOXM8KFnRg6OHBo6PNKxWv/44eil3x578afanx//dfHXdz9M4mj0N+fW1tEpgzG48pqsVYiI0U4Hy0lPs561dSaFWzwo7XJSAAC0la65hnsoStETqxdvpfjyu1yTAwAAADpiuSdiGQAAALjHJdb/AAAAcI9rfQ/g+uL8WKvl+42Eu+vasYgYaNS/1GyNmULU6tu+6I2IXdeTWPuz1qTxsDs2GBE/Xj38WdaiS79D3kxtISIe3uj4J/X6B+q/4l5ffxoRQx2IP3jT+L9U/9EOxM+7fgDuT5ePNU5k689/6cr1T2xw/itscO76N/I+/7Wu/5bWXf+t1t/T5vrv5S3GuPDR++fbzWX1P3vphU9bLYufbe+oqNtwbSHikcJG9Scr9Sdt6j+xxRilv89X2s3lXf/yBxH7YuP6W5LN/5/owPhEtTLUuN0wxsI3I5+0i593/dnx39Wm/tb/P7U7/ue2GOO148c/X7fz6mp38/rTn4vJq/VesbnnjdGZmanhiGLy0vr9BzfPpXWf1nNk9e9/fPP3/0b1Z58JtebrkK0FFprbbPzmTTGfu3jhi3b5tNZ/eR7/k22O/9r6vy6sP/5vbzHGE1+9s7/d3Nr1b9ay+K21MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0pBHRH0laXumnabkcsTsiHoxdafXs9MyT42dfP3Mym4sYiN50fKJaGYqIUmOcZOPhen91fPCm8dMRsSci3ivtrI/LY2erJ/MuHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBW7I6I/krQcEWlELJXStFzOOysAAACg4wZuHBbzygMAAADonoG8EwAAAAC6zvofAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALtvz6OUrSUTUjuyst0yxOdeba2ZAt6V5JwDkpifvBIDcFPJOAMjNba7xXS7APSi5xXxf25kdHc8FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgO1r397LV5KIqB3ZWW+ZYnOuN9fMgG5L804AyE3PZpOFu5cHcPd5i8P9yxofSG4x37d6n9qNMzu6lhMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA209/vSVpOSKKzX3lcsT/ImIgepPxiWplKCL+HxHfl3p3ZOPhlUf35ZY3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnTU9Ozc5Wq1WprJOGs3Oyh6d1U7SeMVq2yUfnTvsFGNbpLFNO3l/MgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkIfp2bnJ0Wq1MjWddyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3qZn5yZHq9XKVBc7edcIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB+/gkAAP//FUoKgg==") syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) listxattr(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) 20.02014486s ago: executing program 1 (id=35): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x4000}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001780)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @broadcast}, {0x2, 0x4e20, @broadcast}, 0x55, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x1, 0x5}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, 0x0) r4 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x31) unlinkat(r4, &(0x7f0000000000)='./file0\x00', 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000011c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x1, &(0x7f0000000440)=@raw=[@call={0x85, 0x0, 0x0, 0xc}], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1a, 0x7, 0x8000, 0x1, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r5}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 18.039409723s ago: executing program 1 (id=38): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 10.926024645s ago: executing program 1 (id=51): keyctl$reject(0x13, 0x0, 0xaad2, 0x201, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x100, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x50) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x300, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0xf0, 0x138, 0x700, {}, [@common=@unspec=@limit={{0x48}, {0x10000000, 0x8000001}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x360) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) 9.392684006s ago: executing program 3 (id=55): ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x101, 0x0, [0xffffffffffffffff, 0xff, 0x4, 0xe, 0x9], [0x8, 0x4, 0x8, 0x8eba, 0xfffffffffffffffe, 0x400, 0x6, 0x5, 0x9cb7, 0x4, 0x1000, 0x0, 0x6, 0x8000, 0x7, 0x3, 0xff, 0x4, 0x117, 0x9, 0x5, 0x9, 0x677, 0x4, 0x8, 0xfffffffffffffff7, 0x3, 0xa48, 0x1b1, 0xf, 0xf, 0x10000, 0xa2ec, 0x0, 0x3, 0x7, 0xe, 0xff, 0x4, 0xa, 0x10000, 0x5355, 0x8, 0x2, 0x10001, 0x9, 0x7, 0x9, 0x3, 0x2, 0x100000001, 0x3, 0x9, 0x4, 0x80000000, 0x8, 0x3, 0xb, 0xe336, 0x8, 0xc, 0x6, 0x7f, 0x4, 0x7, 0x1, 0x8000, 0x5, 0x6, 0x9, 0x8, 0x1000, 0x80000001, 0x9, 0x8000000000000001, 0x1, 0xc63, 0x4, 0x3, 0x1000, 0x101, 0x9, 0x4, 0x0, 0x9, 0x23821779, 0x21, 0x1ff, 0x0, 0x4, 0x9, 0x101, 0x4aa3, 0x3, 0x5, 0x5dd, 0x3, 0xa, 0x400, 0x1, 0x6, 0x9238, 0x9, 0x4, 0x9, 0x0, 0x80000000, 0x4, 0x1000, 0x2, 0x800, 0xffffffffdcfbd3a1, 0x179, 0x8c7, 0x200, 0x0, 0x2, 0x9, 0x7, 0xfffffffffffffffe, 0x2e]}) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000006c0)={[{@shortname_mixed}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@shortname_win95}, {@fat=@quiet}, {@fat=@nfs_stale_rw}, {@utf8no}, {@shortname_mixed}, {@numtail}, {@shortname_winnt}, {@utf8no}, {@shortname_mixed}]}, 0x26, 0x350, &(0x7f00000001c0)="$eJzs3T9oJGUUAPC3N5vdTeBMCuHQarUT5LhELLQx4TjhMIWeLP5rXLicf7KrkMWFWGQvjWKp2Aha2V2h5dViIWJnYesJcio2XndwhyO7M9ndZCZ3OXED6u9XhC/ve2++byZDdhKSt6+uxubFubh048b1aDQqUV09uxo3K7EUJyKJzOUAAP5LbqZp/JFmRoGn7pT90ULMZaPasewOAJiF0ev/aycngfpRqk7McEcAwKwVfv4v92xp9O2ZbQsAmKHC6//D+6YP/Jq/Ov6bAADg3+v5l15+Zm094kKz2Yjovt9v9Vvx5GR+7VK8EZ3YiDOxGLejFqMHhexpYfjx6fPr5840h35Zitawot+K6A76rexJYS0Z1ddjORZjKavZe9pI0zQZ1i+P6psRcXkwWj+6lX5rLhby9X9ciI1YicW4v1AfcX793EozP0Cru1c/iNiNxt5JDPd/Ohbj+xOjTy7GsDY71jCys9xsnk3X99X3r9RHeQAAAAAAAAAAAAAAAAAAAAAAMAun5yPvntNcGve/SbuD/nsX8oRmcX7U3yebzvsD7Wb9gdL6XneeD5KD/YH29+fpt6reRQAAAAAAAAAAAAAAAAAAAAByve1atDudja3e9rubk0GtM5iKvPXtF1/Px8GcN5NJJKrZ4fbl5LGYqkpiXJ6Oy9NkX04+SCLy5Eq0r1wd73g6pz4+i0L5cFAvTFXyPbU7nZMP/fxpWdWfk0gS46lG6RKVfP2pqe59WahsP3ceVHrbK3fJuZam6WHlO58Uq6IRUS184f6JwTfXX3/gsd6px3uV6mb7q7zpwyOPLr5w7ePPf9tsdyK/NJ1Obat3O/3bayVT908lv86VkjuhfLA7iexu9bbbyQ+/v/jgh98dSE7K7590OvLO4Wt9eTBS29hK8z0e5UznSm7+8sErt8Z3771fzFOfrbav7vz0697FvFvV1DcJjToAAAAAAAAAAAAAAAAAAOBYTP2v+D144rnZ7QgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjt/k/f+nBruFyFEGtwZRnKpvbPUOXXz+WE8VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sb8CAAD//xDwccQ=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2440c2, 0x8c) 9.028421857s ago: executing program 3 (id=56): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none, 0x4}, 0xe) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0xe00) 9.026404617s ago: executing program 0 (id=57): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) socket$inet(0x2, 0x3, 0x8) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2810400, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8.000099034s ago: executing program 3 (id=58): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x203, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfb3, @loopback, 0x2000003}, 0x1c) write(r0, &(0x7f0000000000)='>', 0x1) shutdown(r0, 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/23, 0x17, 0x0, 0x0}, &(0x7f0000000180)=0x40) 7.985577975s ago: executing program 2 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 7.686713103s ago: executing program 3 (id=60): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 6.696812839s ago: executing program 0 (id=61): syz_usb_connect$cdc_ecm(0x0, 0x55, &(0x7f0000006040)=ANY=[@ANYBLOB="12010000020000202505a1a4400000000101090243000101000000090400001202060000052406000005240014000d240f010000000000000000000424130904241306090582022000000000090503020002000000efae7db0871ef6be2d23c8c85dac978e806d9c33818b0ff2feba5e20334a608ccfa829e5c7d93bcf08371cbbe84a3f217b1c6679a41a0a8dd84b68"], 0x0) syz_create_resource$binfmt(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002100)=0x8) fcntl$setownex(r0, 0xf, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000840), &(0x7f0000000940), 0x23, r4}, 0x38) 6.134344474s ago: executing program 2 (id=62): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x82002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) io_setup(0x205, &(0x7f0000002500)=0x0) io_submit(r2, 0x0, 0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x3}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xfffffffd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404e404}, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x3, 0xc, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xa}, @mcast2, 0x20, 0x8, 0xfffffffb, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r8, r0, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) 6.050140507s ago: executing program 3 (id=63): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000001400)) r3 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x7fffefff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 4.605483416s ago: executing program 2 (id=64): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_PREFSRC={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}}, 0x0) 3.846817566s ago: executing program 2 (id=65): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x337, 0x4) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf", 0x5, 0x0, 0x0, 0x0) 3.634269952s ago: executing program 2 (id=66): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x65e54b32259ae034, 0x0, 0x0, 0x0, 0x0, 0x0) 922.198975ms ago: executing program 0 (id=67): r0 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000140)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) 791.586099ms ago: executing program 2 (id=68): syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0xdd}]}, 0x24}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dstopts_2292={{0xb8, 0x29, 0x4, {0x4, 0x13, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x64, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989"}, @generic={0x80, 0x12, "09e12e5f0b6bdcf72f2ec7008a15fa88b025"}, @calipso={0x7, 0x8, {0x1, 0x0, 0x7a, 0x8001}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @generic={0x93, 0x6, "e80ee304ecb7"}]}}}, @hopopts_2292={{0x88, 0x29, 0x36, {0x3b, 0xd, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @padn, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x38, {0x3, 0xc, 0x6c, 0x8, [0x2, 0xfffffffffffffff7, 0x6, 0x7fff, 0x6, 0x7]}}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn]}}}, @hopopts={{0x50, 0x29, 0x36, {0x5e, 0x6, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x28, {0x3, 0x8, 0x0, 0xfff, [0x2, 0x966, 0x1, 0x1]}}, @generic={0x8}, @generic={0x1, 0x1, '+'}]}}}], 0x190}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 546.829285ms ago: executing program 0 (id=69): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="20000000387d05001400030076657468315f766c616e0000000000000c00168008"], 0x40}, 0x1, 0x0, 0x0, 0xd1}, 0x8804) 371.60712ms ago: executing program 0 (id=70): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8d}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) 49.012109ms ago: executing program 0 (id=71): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r0 = socket$packet(0x11, 0x2, 0x300) socket(0x840000000002, 0x3, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) clock_nanosleep(0x2, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x2, 0x2, 0xfffffff7, 0x8, 0xbb9, 0xffffffffffffffff}) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) 0s ago: executing program 3 (id=72): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0xa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x82002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) io_setup(0x205, &(0x7f0000002500)=0x0) io_submit(r2, 0x0, 0x0) io_pgetevents(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.current\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x30, 0x68, 0x309, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0x3}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_IIF={0x8, 0x6, 0xfffffffd}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2404e404}, 0x0) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000780)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x29, 0x3, 0xc, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0xa}, @mcast2, 0x20, 0x8, 0xfffffffb, 0xdc66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) ioctl$int_in(r5, 0x5452, &(0x7f0000000000)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r8, r0, 0x0) request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 77.689513][ T5759] cgroup: Unknown subsys name 'net' [ 77.828045][ T5759] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.624309][ T5759] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.243002][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.252887][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.261423][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.280893][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.289145][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.296206][ T5784] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.296800][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.305483][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.312461][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.319409][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.334119][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.334300][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.349747][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.350803][ T5785] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.361354][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.366070][ T5785] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.372458][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.379270][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.387703][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 81.403646][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.416025][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.425460][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.458107][ T52] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.466217][ T5783] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.874670][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 82.007023][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 82.049114][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 82.087156][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 82.165635][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.176320][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.184517][ T5772] bridge_slave_0: entered allmulticast mode [ 82.191964][ T5772] bridge_slave_0: entered promiscuous mode [ 82.238564][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.246128][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.253696][ T5772] bridge_slave_1: entered allmulticast mode [ 82.261003][ T5772] bridge_slave_1: entered promiscuous mode [ 82.318579][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.326196][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.336328][ T5774] bridge_slave_0: entered allmulticast mode [ 82.343958][ T5774] bridge_slave_0: entered promiscuous mode [ 82.351413][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.358578][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.366970][ T5773] bridge_slave_0: entered allmulticast mode [ 82.374461][ T5773] bridge_slave_0: entered promiscuous mode [ 82.384331][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.391819][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.399715][ T5773] bridge_slave_1: entered allmulticast mode [ 82.406923][ T5773] bridge_slave_1: entered promiscuous mode [ 82.440595][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.447986][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.456086][ T5774] bridge_slave_1: entered allmulticast mode [ 82.463521][ T5774] bridge_slave_1: entered promiscuous mode [ 82.503859][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.517950][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.549849][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.571835][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.579173][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.589251][ T5771] bridge_slave_0: entered allmulticast mode [ 82.596411][ T5771] bridge_slave_0: entered promiscuous mode [ 82.606256][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.613964][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.621343][ T5771] bridge_slave_1: entered allmulticast mode [ 82.628300][ T5771] bridge_slave_1: entered promiscuous mode [ 82.638555][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.651397][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.662700][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.686954][ T5772] team0: Port device team_slave_0 added [ 82.728141][ T5772] team0: Port device team_slave_1 added [ 82.777899][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.793274][ T5774] team0: Port device team_slave_0 added [ 82.805250][ T5773] team0: Port device team_slave_0 added [ 82.823898][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.844101][ T5774] team0: Port device team_slave_1 added [ 82.870937][ T5773] team0: Port device team_slave_1 added [ 82.878001][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.885602][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.913651][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.946844][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.955403][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.982742][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.006938][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.019739][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.047531][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.061987][ T5771] team0: Port device team_slave_0 added [ 83.076299][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.083414][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.110638][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.137206][ T5771] team0: Port device team_slave_1 added [ 83.163538][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.173768][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.200620][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.224641][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.232266][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.258568][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.305558][ T5772] hsr_slave_0: entered promiscuous mode [ 83.312735][ T5772] hsr_slave_1: entered promiscuous mode [ 83.323194][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.330474][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.359536][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.373327][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.380882][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.407327][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.421139][ T52] Bluetooth: hci3: command tx timeout [ 83.483255][ T5774] hsr_slave_0: entered promiscuous mode [ 83.489957][ T5774] hsr_slave_1: entered promiscuous mode [ 83.490755][ T52] Bluetooth: hci0: command tx timeout [ 83.501999][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.502025][ T5781] Bluetooth: hci1: command tx timeout [ 83.515789][ T5774] Cannot create hsr debugfs directory [ 83.561795][ T5773] hsr_slave_0: entered promiscuous mode [ 83.568772][ T5773] hsr_slave_1: entered promiscuous mode [ 83.575297][ T52] Bluetooth: hci2: command tx timeout [ 83.582202][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.589998][ T5773] Cannot create hsr debugfs directory [ 83.647927][ T5771] hsr_slave_0: entered promiscuous mode [ 83.654477][ T5771] hsr_slave_1: entered promiscuous mode [ 83.663539][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.671671][ T5771] Cannot create hsr debugfs directory [ 84.084004][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.098335][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.108301][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.118706][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.216632][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.229538][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.239441][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.256930][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.345735][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.359221][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.381118][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.391287][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.432659][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.495930][ T5771] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.508906][ T5771] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.535658][ T5771] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.554813][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.566619][ T5771] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.599427][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.606931][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.619773][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.626994][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.749088][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.819415][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.857079][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.876065][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.883432][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.913849][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.941562][ T1013] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.948836][ T1013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.987231][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.025197][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.064723][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.072154][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.090109][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.097430][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.140213][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.147531][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.187110][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.194374][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.284483][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.470065][ T5773] veth0_vlan: entered promiscuous mode [ 85.495505][ T52] Bluetooth: hci3: command tx timeout [ 85.510134][ T5773] veth1_vlan: entered promiscuous mode [ 85.572036][ T5781] Bluetooth: hci1: command tx timeout [ 85.577811][ T52] Bluetooth: hci0: command tx timeout [ 85.603275][ T5773] veth0_macvtap: entered promiscuous mode [ 85.653665][ T52] Bluetooth: hci2: command tx timeout [ 85.665845][ T5773] veth1_macvtap: entered promiscuous mode [ 85.767523][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.812960][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.858200][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.890099][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.904103][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.916960][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.927082][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.938321][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.985740][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.082510][ T5774] veth0_vlan: entered promiscuous mode [ 86.141044][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.145085][ T5774] veth1_vlan: entered promiscuous mode [ 86.149948][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.185496][ T5774] veth0_macvtap: entered promiscuous mode [ 86.197589][ T5774] veth1_macvtap: entered promiscuous mode [ 86.237097][ T5772] veth0_vlan: entered promiscuous mode [ 86.277382][ T5771] veth0_vlan: entered promiscuous mode [ 86.303816][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.307756][ T5771] veth1_vlan: entered promiscuous mode [ 86.318045][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.329369][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.341690][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.354176][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.362976][ T5772] veth1_vlan: entered promiscuous mode [ 86.391932][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.402621][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.414480][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.439435][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.448815][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.458955][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.468031][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.489542][ T5771] veth0_macvtap: entered promiscuous mode [ 86.519329][ T5771] veth1_macvtap: entered promiscuous mode [ 86.579182][ T5772] veth0_macvtap: entered promiscuous mode [ 86.624095][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.667789][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.686205][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.706225][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.719305][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.749596][ T5772] veth1_macvtap: entered promiscuous mode [ 86.789868][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.803773][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.815948][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.827745][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.842144][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.874890][ T5771] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.884071][ T5771] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.894857][ T5771] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.907945][ T5771] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.926617][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.945104][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.965749][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.979571][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.996379][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.013244][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.025023][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.038294][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.056997][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.088156][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.106822][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.117370][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.129198][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.139795][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.151160][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.164217][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.221612][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.237390][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.247433][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.263775][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.290094][ T30] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.314921][ T30] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.428564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.462419][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.570487][ T52] Bluetooth: hci3: command tx timeout [ 87.619838][ T1082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.650696][ T52] Bluetooth: hci0: command tx timeout [ 87.658545][ T5781] Bluetooth: hci1: command tx timeout [ 87.730710][ T52] Bluetooth: hci2: command tx timeout [ 87.840543][ T1082] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.959990][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.979767][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.976705][ T1082] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.986987][ T1082] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.527868][ T5857] syz.3.4[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.554647][ T5857] loop3: detected capacity change from 0 to 256 [ 89.632291][ T5857] ======================================================= [ 89.632291][ T5857] WARNING: The mand mount option has been deprecated and [ 89.632291][ T5857] and is ignored by this kernel. Remove the mand [ 89.632291][ T5857] option from the mount to silence this warning. [ 89.632291][ T5857] ======================================================= [ 89.677329][ T52] Bluetooth: hci3: command tx timeout [ 89.740290][ T52] Bluetooth: hci0: command tx timeout [ 89.746670][ T52] Bluetooth: hci1: command tx timeout [ 89.830340][ T52] Bluetooth: hci2: command tx timeout [ 89.864678][ T5819] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.347628][ T5857] FAT-fs (loop3): Directory bread(block 64) failed [ 90.718002][ T5857] FAT-fs (loop3): Directory bread(block 65) failed [ 90.758670][ T5857] FAT-fs (loop3): Directory bread(block 66) failed [ 90.785704][ T5857] FAT-fs (loop3): Directory bread(block 67) failed [ 90.840488][ T5857] FAT-fs (loop3): Directory bread(block 68) failed [ 90.871642][ T5857] FAT-fs (loop3): Directory bread(block 69) failed [ 90.909476][ T5857] FAT-fs (loop3): Directory bread(block 70) failed [ 90.930580][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 90.952231][ T5819] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 90.963763][ T5857] FAT-fs (loop3): Directory bread(block 71) failed [ 90.973168][ T5819] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 90.987064][ T5857] FAT-fs (loop3): Directory bread(block 72) failed [ 90.997151][ T5819] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.008191][ T5857] FAT-fs (loop3): Directory bread(block 73) failed [ 91.016607][ T5819] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 91.039475][ T5819] usb 3-1: SerialNumber: syz [ 91.068293][ T5854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 91.097225][ T5819] usb 3-1: bad CDC descriptors [ 91.504924][ T5871] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.404479][ T5870] loop0: detected capacity change from 0 to 4096 [ 92.422594][ T5870] EXT4-fs: inline encryption not supported [ 92.544696][ T43] cfg80211: failed to load regulatory.db [ 92.656701][ T9] usb 3-1: USB disconnect, device number 2 [ 93.789804][ T5880] loop2: detected capacity change from 0 to 512 [ 93.914532][ T5870] EXT4-fs (loop0): Test dummy encryption mode enabled [ 93.925720][ T5882] loop1: detected capacity change from 0 to 512 [ 93.979928][ T5880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.984450][ T5870] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 94.001628][ T5870] System zones: 0-5 [ 94.010577][ T5882] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 94.039704][ T5870] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.070505][ T5880] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.255807][ T5882] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 94.339054][ T5882] Quota error (device loop1): write_blk: dquota write failed [ 94.347503][ T5882] Quota error (device loop1): find_free_dqentry: Can't write quota data block 5 [ 94.357753][ T5882] Quota error (device loop1): write_blk: dquota write failed [ 94.374888][ T5882] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 94.385376][ T5882] EXT4-fs error (device loop1): ext4_acquire_dquot:6953: comm syz.1.12: Failed to acquire dquot type 1 [ 94.445914][ T5882] EXT4-fs (loop1): 1 truncate cleaned up [ 95.622688][ T5886] sched: RT throttling activated [ 95.647264][ T5893] EXT4-fs error (device loop0): ext4_map_blocks:610: inode #4: block 65: comm syz.0.9: lblock 1 mapped to illegal pblock 65 (length 1) [ 96.630842][ T5889] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1995710563131243837 [ 97.955912][ T5882] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.001501][ T5889] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:487: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1995710563131243837 [ 98.049403][ T5893] Quota error (device loop0): qtree_read_dquot: Error while reading quota structure for id 0 [ 98.112809][ T5893] EXT4-fs error (device loop0): ext4_acquire_dquot:6953: comm syz.0.9: Failed to acquire dquot type 1 [ 98.302976][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.462637][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.474769][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.014726][ T5907] loop1: detected capacity change from 0 to 128 [ 100.085282][ T5907] EXT4-fs (loop1): Test dummy encryption mode enabled [ 100.181879][ T5907] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 100.279685][ T5907] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.327260][ T5914] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.729616][ T5923] loop2: detected capacity change from 0 to 512 [ 100.790317][ T5923] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 100.920356][ T5923] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 100.990830][ T5923] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.21: bad orphan inode 131083 [ 101.101273][ T5923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.393913][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.442048][ T5771] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. Stopping sshd: stopped /usr/sbin/sshd (pid 5530) OK Stopping crond: stopped /usr/sbin/crond (pid 5510) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5431) Stopping network: [ 105.249916][ T5976] loop1: detected capacity change from 0 to 4096 [ 105.311487][ T5976] EXT4-fs: Ignoring removed orlov option [ 105.343722][ T5976] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.566102][ T5976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.571568][ T5976] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 106.906467][ T5771] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. OK Stopping iptables: OK [ 110.740542][ T6050] syz.1.38: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 110.970326][ T6050] CPU: 1 PID: 6050 Comm: syz.1.38 Not tainted syzkaller #0 [ 110.977747][ T6050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 110.988127][ T6050] Call Trace: [ 110.991463][ T6050] [ 110.994455][ T6050] dump_stack_lvl+0x18c/0x250 [ 110.999490][ T6050] ? show_regs_print_info+0x20/0x20 [ 111.004790][ T6050] ? load_image+0x420/0x420 [ 111.009553][ T6050] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 111.016131][ T6050] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 111.022816][ T6050] warn_alloc+0x246/0x340 [ 111.027319][ T6050] ? zone_watermark_ok_safe+0x230/0x230 [ 111.034010][ T6050] ? _raw_spin_unlock+0x28/0x40 [ 111.039175][ T6050] __vmalloc_node_range+0x662/0x1330 [ 111.045267][ T6050] ? __alloc_pages+0xae/0x460 [ 111.050184][ T6050] ? free_vm_area+0x50/0x50 [ 111.054760][ T6050] ? packet_set_ring+0x720/0x23f0 [ 111.059941][ T6050] vzalloc+0x79/0x90 [ 111.064171][ T6050] ? packet_set_ring+0x720/0x23f0 [ 111.069265][ T6050] packet_set_ring+0x720/0x23f0 [ 111.074215][ T6050] ? packet_mmap+0x510/0x510 [ 111.078867][ T6050] ? __lock_acquire+0x7d40/0x7d40 [ 111.083997][ T6050] ? __local_bh_enable_ip+0x13a/0x1c0 [ 111.089443][ T6050] ? lockdep_hardirqs_on+0x98/0x150 [ 111.094737][ T6050] ? __might_fault+0xaa/0x120 [ 111.099705][ T6050] ? __might_fault+0xc6/0x120 [ 111.104624][ T6050] ? __might_fault+0xaa/0x120 [ 111.109392][ T6050] ? _copy_from_user+0xa5/0xe0 [ 111.114292][ T6050] packet_setsockopt+0xdb0/0x1500 [ 111.119479][ T6050] ? packet_ioctl+0x340/0x340 [ 111.124244][ T6050] ? aa_sk_perm+0x83c/0x970 [ 111.128833][ T6050] ? __fget_files+0x28/0x4b0 [ 111.133525][ T6050] ? aa_af_perm+0x330/0x330 [ 111.138131][ T6050] ? __fget_files+0x28/0x4b0 [ 111.143372][ T6050] ? __fget_files+0x28/0x4b0 [ 111.148040][ T6050] ? aa_sock_opt_perm+0x74/0x100 [ 111.153260][ T6050] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 111.158895][ T6050] ? security_socket_setsockopt+0x7e/0xa0 [ 111.164704][ T6050] ? packet_ioctl+0x340/0x340 [ 111.169470][ T6050] do_sock_setsockopt+0x175/0x1a0 [ 111.174653][ T6050] ? __fdget+0x180/0x210 [ 111.178978][ T6050] __x64_sys_setsockopt+0x182/0x200 [ 111.184347][ T6050] do_syscall_64+0x55/0xa0 [ 111.189061][ T6050] ? clear_bhb_loop+0x40/0x90 [ 111.194097][ T6050] ? clear_bhb_loop+0x40/0x90 [ 111.198872][ T6050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 111.204846][ T6050] RIP: 0033:0x7f2d1bd9cdd9 [ 111.209417][ T6050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.229265][ T6050] RSP: 002b:00007f2d1cc5c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.237758][ T6050] RAX: ffffffffffffffda RBX: 00007f2d1c015fa0 RCX: 00007f2d1bd9cdd9 [ 111.246147][ T6050] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000003 [ 111.254186][ T6050] RBP: 00007f2d1be32d69 R08: 000000000000001c R09: 0000000000000000 [ 111.262948][ T6050] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 111.272151][ T6050] R13: 00007f2d1c016038 R14: 00007f2d1c015fa0 R15: 00007fff1dd9f8a8 [ 111.280407][ T6050] Stopping system message bus: [ 111.424536][ T6050] Mem-Info: [ 111.437509][ T6050] active_anon:14979 inactive_anon:0 isolated_anon:0 [ 111.437509][ T6050] active_file:12758 inactive_file:39956 isolated_file:0 [ 111.437509][ T6050] unevictable:768 dirty:136 writeback:0 [ 111.437509][ T6050] slab_reclaimable:10472 slab_unreclaimable:91932 [ 111.437509][ T6050] mapped:33566 shmem:11131 pagetables:549 [ 111.437509][ T6050] sec_pagetables:0 bounce:0 [ 111.437509][ T6050] kernel_misc_reclaimable:0 [ 111.437509][ T6050] free:1340309 free_pcp:13899 free_cma:0 [ 111.653645][ T6050] Node 0 active_anon:60296kB inactive_anon:0kB active_file:51892kB inactive_file:159640kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:135100kB dirty:556kB writeback:0kB shmem:43832kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10832kB pagetables:2084kB sec_pagetables:0kB all_unreclaimable? no [ 111.687563][ T6050] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 111.823973][ T6050] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 112.166514][ T6050] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 112.225799][ T6106] loop2: detected capacity change from 0 to 512 [ 112.232980][ T6050] Node 0 DMA32 free:1464548kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:68852kB inactive_anon:0kB active_file:52692kB inactive_file:158824kB unevictable:1536kB writepending:556kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:9548kB local_pcp:8532kB free_cma:0kB [ 112.281445][ T6106] EXT4-fs: Ignoring removed orlov option [ 112.300075][ T6106] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.327739][ T6106] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.350319][ T6050] lowmem_reserve[]: 0 0 0 0 0 [ 112.374769][ T6106] EXT4-fs (loop2): 1 truncate cleaned up [ 112.383973][ T6050] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 112.439410][ T6106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.584471][ T6112] capability: warning: `syz.0.46' uses 32-bit capabilities (legacy support in use) done [ 113.980299][ T6050] lowmem_reserve[]: 0 0 0 0 0 [ 113.985144][ T6050] Node 1 Normal free:3896024kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20800kB local_pcp:10400kB free_cma:0kB [ 114.053581][ T6113] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 114.372089][ T6115] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 114.380903][ T6050] lowmem_reserve[]: 0 0 0 0 0 [ 114.386798][ T6050] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.412571][ T6050] Node 0 DMA32: 543*4kB (UE) 564*8kB (UME) 601*16kB (UME) 122*32kB (UME) 34*64kB (UME) 34*128kB (UE) 24*256kB (UM) 10*512kB (UM) 6*1024kB (UME) 5*2048kB (UM) 340*4096kB (M) = 1447020kB [ 114.470222][ T6050] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.550232][ T6050] Node 1 Normal: 250*4kB (UE) 64*8kB (UE) 43*16kB (UE) 40*32kB (UE) 11*64kB (UME) 5*128kB (UME) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3896024kB [ 114.774362][ T6050] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.827095][ T6050] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.836935][ T6050] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.846702][ T6050] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.858160][ T6050] 72820 total pagecache pages [ 114.869633][ T6050] 0 pages in swap cache [ 114.897830][ T6050] Free swap = 124996kB [ 114.912426][ T6050] Total swap = 124996kB [ 114.958676][ T6050] 2097051 pages RAM [ 114.981447][ T6130] xt_CONNSECMARK: invalid mode: 66 [ 115.114418][ T6050] 0 pages HighMem/MovableOnly [ 115.255778][ T6050] 416927 pages reserved [ 115.730484][ T6050] 0 pages cma reserved [ 115.855250][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.720877][ T6142] loop3: detected capacity change from 0 to 256 [ 117.413669][ T6135] loop2: detected capacity change from 0 to 131072 [ 117.510434][ T6135] F2FS-fs (loop2): Found nat_bits in checkpoint [ 117.570646][ T6135] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 118.859926][ T6158] loop0: detected capacity change from 0 to 128 [ 119.013965][ T6158] syz.0.57: attempt to access beyond end of device [ 119.013965][ T6158] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 119.086225][ T6158] syz.0.57: attempt to access beyond end of device [ 119.086225][ T6158] loop0: rw=524288, sector=138, nr_sectors = 112 limit=128 [ 119.151738][ T6158] syz.0.57: attempt to access beyond end of device [ 119.151738][ T6158] loop0: rw=0, sector=138, nr_sectors = 8 limit=128 Stopping klogd: OK Stopping acpid: [ 120.646495][ T5778] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 120.860813][ T5778] usb 1-1: Using ep0 maxpacket: 32 [ 121.090527][ T5778] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 121.104304][ T5778] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.119745][ T5778] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 121.129053][ T5778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 121.137222][ T5778] usb 1-1: SerialNumber: syz [ 121.145282][ T6175] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 121.164268][ T5778] usb 1-1: bad CDC descriptors OK Stopping syslogd: stopped /sbin/syslogd (pid 5119) OK [ 125.677499][ T9] usb 1-1: USB disconnect, device number 2 umount: can't remount debugfs read-only serialport: VM disconnected.