last executing test programs: 4m5.331582901s ago: executing program 4 (id=118): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019c80)=""/102400, 0x19000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='net/dev_mcast\x00') pread64(r1, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 4m2.797178436s ago: executing program 4 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a1", 0xa}], 0x1}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x6, 0x9d, 0x1, 0x7, 0xfe, 0x8, 0x7, 0x5, 0xb2, 0xc, 0x4, 0x58, 0x5, 0x0, 0x6, 0xfe}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffe, 0x0, 0xb, 0x8000000000000000, 0x2, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r6 = openat$urandom(0xffffffffffffff9c, 0x0, 0x442, 0x0) writev(r6, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, 0x0, 0x90) syz_open_procfs(0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x150, 0x168, 0x9, 0x150, 0xb, 0x290, 0x250, 0x250, 0x290, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@ah={{0x30}, {[0x4d6, 0x4d4], 0x742d, 0x58, 0x3}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private=0xa010100, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x110, 0x140, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@rand_addr=0x64010101, @ipv4=@local, @ipv6=@mcast2, 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) fanotify_mark(0xffffffffffffffff, 0x0, 0x21, 0xffffffffffffffff, &(0x7f0000000140)='./file0\x00') timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x0) 4m1.535094538s ago: executing program 4 (id=127): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_CONFIGURE(r0, 0xc030128a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a31000000000800034000000001090001007379"], 0x34}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x50, 0x0, &(0x7f0000000080)=0xffffffffffffff33) 4m0.489846107s ago: executing program 4 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x25a5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m0.217921063s ago: executing program 4 (id=131): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$unix(r0, 0x0, 0xc800) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETVESABLANK(r6, 0x560e, &(0x7f0000000140)) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000700)=@delchain={0x24, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0x8}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}}, 0x0) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) write$sndseq(r10, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f00000000c0)={0x372, @time={0x7665642f, 0x6}, 0x0, {}, 0x1, 0x1, 0x70}) sendto$inet(r7, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r7, 0x0) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) 3m58.853774811s ago: executing program 4 (id=133): syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m43.701976926s ago: executing program 32 (id=133): syz_open_procfs(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x8000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7ed1}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m44.512272589s ago: executing program 0 (id=325): dup(0xffffffffffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 2m43.833959798s ago: executing program 0 (id=327): r0 = socket$netlink(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)={0x10, 0x12, 0x1}, 0x10}], 0x1}, 0x0) 2m43.655320158s ago: executing program 0 (id=330): r0 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x10, &(0x7f00000000c0)=0x6, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) getgroups(0xfffe, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}}, 0x128}}, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000000000)={r0, r4, 0x8001}) 2m42.204735701s ago: executing program 0 (id=334): fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m41.663224792s ago: executing program 0 (id=336): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r5 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) 2m40.990311081s ago: executing program 0 (id=340): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x2b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d41787454"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200), 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m40.720573686s ago: executing program 33 (id=340): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ec0)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x80, 0x29, 0x4, {0x4, 0xc, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe, 0x2b, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d41787454"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x5e, 0x2, '\x00', [@generic={0xff}, @pad1, @pad1, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}]}}}], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200), 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x1, 0x24088804) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m30.474734811s ago: executing program 5 (id=372): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) 2m29.164323166s ago: executing program 5 (id=373): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000200), 0x27) 2m25.131369377s ago: executing program 5 (id=386): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) sync() bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0200000004000000050000004301000014", @ANYRES32, @ANYRESOCT], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1800, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 2m24.055546768s ago: executing program 5 (id=389): fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m23.200679497s ago: executing program 1 (id=391): dup(0xffffffffffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000380)={0x40, 0x0, 0x4, 0x70bd28, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x4}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 2m22.170579746s ago: executing program 1 (id=393): syz_read_part_table(0x593, &(0x7f00000005c0)="$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") openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) socket(0x40000000015, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc8a43, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x384203, 0x0) fanotify_init(0xf00, 0x0) pselect6(0x40, &(0x7f00000001c0)={0xfffffffffffffffe, 0x0, 0x3, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x1000401000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x3, 0x5, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x260cc3, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000001c0)='./file0\x00', 0x4000127) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000b80)='./file1\x00', 0x300000, 0x33) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0), &(0x7f0000000500)=[0x0, 0x0], 0x4, 0x9, 0x0, 0x2}) utimensat(r3, 0x0, &(0x7f0000000880)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000480)=[0x2, 0x8001, 0x9, 0xfffffffc, 0x6, 0x10], 0x0, &(0x7f0000000180)=[0x31], 0x0, 0x800000000000a}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000040)={&(0x7f0000000240)}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r1, 0xc00864c0, &(0x7f00000001c0)={r4}) 2m21.693759313s ago: executing program 5 (id=395): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r2, &(0x7f0000000200), 0x27) 2m19.942767053s ago: executing program 5 (id=400): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 2m19.448162551s ago: executing program 34 (id=400): write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x4, r3}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r6, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) 2m19.210702265s ago: executing program 1 (id=404): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000800, 0x300) 2m18.534603494s ago: executing program 1 (id=405): fsopen(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000004c0)='./file1\x00', 0xe, &(0x7f0000000540)={[{@init_itable}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000040)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2m18.159944655s ago: executing program 1 (id=408): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) 2m16.738679426s ago: executing program 1 (id=411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) sync() bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0200000004000000050000004301000014", @ANYRES32, @ANYRESOCT], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1800, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 2m16.547842687s ago: executing program 35 (id=411): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) sync() bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0200000004000000050000004301000014", @ANYRES32, @ANYRESOCT], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x1800, 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) 1m3.345386791s ago: executing program 3 (id=604): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000680000000000000029000000040000000409000000000000fe2bf4e12b9826287997a6b33d89f3d60da1641d9fe3896c421b6c130ef4f01be8f5836d41787454800809e12e5f0b6bdcf705020bf4c910fc02000000000000000000000000000000000014000000000000002900000034000000000000000000000030000000000000002900000036"], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f5562347", 0xcf}, {&(0x7f0000002840)="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", 0x6fa}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m1.25085377s ago: executing program 3 (id=614): r0 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000380)=0xc, 0x4) recvmsg$inet_nvme(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/246, 0xf6}, 0x40000000) 1m1.018798723s ago: executing program 3 (id=617): r0 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r2, 0x0, 0x10, &(0x7f00000000c0)=0x6, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) getgroups(0xfffe, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x22048a0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, 0xfffffff9}}, 0x128}}, 0x0) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r3, &(0x7f0000000000)={r0, r4, 0x8001}) 1m0.769682357s ago: executing program 3 (id=619): dup(0xffffffffffffffff) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x265, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001800410100000000ffdbdf2502180000ff0000080000000208000100ac1414"], 0x3c}}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000000680)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4, 0x2}}}}}}, 0x0) 59.718363448s ago: executing program 3 (id=625): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r0, 0x5) close_range(r0, 0xffffffffffffffff, 0x0) 59.596832405s ago: executing program 3 (id=626): syz_clone(0x443c8200, 0x0, 0x0, 0x0, 0x0, 0x0) 44.427392691s ago: executing program 36 (id=626): syz_clone(0x443c8200, 0x0, 0x0, 0x0, 0x0, 0x0) 17.814117762s ago: executing program 6 (id=759): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) 17.809429312s ago: executing program 9 (id=680): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0xa, 0x8001) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 16.80898179s ago: executing program 9 (id=761): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 14.831609942s ago: executing program 8 (id=763): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8024) sendto$inet(r0, &(0x7f0000000f00)="8995b3c271bab84f6e841cd28301f2e02519276836b2ab14ba300f39a71758d74d011771db342aa6df71dc54faabe6ccc2dae1fdf17d4c74618af0933c8c800ec3ce49bd4af9b8cf0b15e8ad756f12238f6649d204a1065dad7cffef082a59ee2b21eb73656d3dc03547888735", 0x6d, 0x4c840, 0x0, 0x0) 14.645895253s ago: executing program 6 (id=765): socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r3, 0x0, 0x100000000000000}, 0x38) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$read(0xb, 0x0, &(0x7f00000010c0)=""/4095, 0xfff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x240008c4) sendmsg$IPSET_CMD_LIST(r4, 0x0, 0x48000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 14.310870252s ago: executing program 2 (id=766): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) 13.144622239s ago: executing program 2 (id=767): syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 12.365262924s ago: executing program 8 (id=769): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r3, &(0x7f00000000c0), 0x0) 11.648859814s ago: executing program 9 (id=770): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x1109, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 11.491149743s ago: executing program 8 (id=771): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0xa, 0x8001) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11.414979218s ago: executing program 7 (id=772): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.540696368s ago: executing program 2 (id=773): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) unshare(0x80) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)='ns/time_for_children\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) unshare(0x8010000) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x1, @null, @bpq0, 0xe, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffeff, 0x0, [@bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0}, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {0x0, 0x0, 0x0, 0x9}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x4, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0xffffffff, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x5795, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x4ec5, 0xfffffffa, 0x0, 0x80000040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0xffffffff], [0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc045, 0x0, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) 9.572337813s ago: executing program 9 (id=774): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000700), r4) sendmsg$IEEE802154_LLSEC_SETPARAMS(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x28, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x880) 9.572153793s ago: executing program 7 (id=775): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) 9.521397036s ago: executing program 8 (id=776): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) 9.514825467s ago: executing program 6 (id=777): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000680000000000000029000000040000000409000000000000fe2bf4e12b9826287997a6b33d89f3d60da1641d9fe3896c421b6c130ef4f01be8f5836d41787454800809e12e5f0b6bdcf705020bf4c910fc02000000000000000000000000000000000014000000000000002900000034000000000000000000000030000000000000002900000036"], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f5562347", 0xcf}, {&(0x7f0000002840)="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", 0x6fa}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.681872289s ago: executing program 9 (id=778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000100)='ecryptfs\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_mount_image$hfs(&(0x7f0000000100), &(0x7f00000062c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="747970653d704351852c636f6465706167653d63703836332c00000000746f723db84f842468f8c5568bcf21a304fee0a339572c6469725f756d61736b3d30303030303030313030303030303030303030303030313000"], 0x1, 0x2e6, &(0x7f00000027c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x8800) 6.503503239s ago: executing program 2 (id=779): bpf$ENABLE_STATS(0x20, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000200), 0x27) 6.410725034s ago: executing program 6 (id=780): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x42002, 0x0) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0xdba38ffc9b2a10c8, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r5, 0x0, 0x20000023892) 6.29415009s ago: executing program 7 (id=781): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ptrace(0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x40080b4) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x346, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_setup(0x80000001, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) write(r3, &(0x7f00000000c0), 0x0) 5.667157487s ago: executing program 7 (id=782): r0 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x100) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x100000000) 5.485824127s ago: executing program 6 (id=783): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x60008090) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002280)={0x28, 0x7, 0x6, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x6, 0x10002) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaa"], 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') lstat(0x0, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x44) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) 4.832794604s ago: executing program 7 (id=784): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) ioctl$LOOP_CONFIGURE(r0, 0xc030128a, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xd0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000100)={0x1, 0xfd, 0x1, &(0x7f0000000000)={0xb, "e89bc5d748e8290e3619f6201f98cad6d3bf3734cdb92f5963a07b61dedbd29410"}}) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r7, 0x29, 0x50, 0x0, &(0x7f0000000080)=0xffffffffffffff33) 1.360503052s ago: executing program 8 (id=785): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) getsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), &(0x7f0000000100)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x4008, 0x3, 0x218, 0x0, 0x32, 0x148, 0x0, 0x148, 0x180, 0x240, 0x240, 0x180, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010100, @rand_addr=0x64010102, 0xff, 0xff0000ff, 'syz_tun\x00', 'pim6reg\x00', {0xff}, {0xff}, 0x2e, 0x2, 0x14}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x1040, 0x224, 0x0, 0x1}}, @common=@unspec=@addrtype1={{0x28}, {0x1109, 0x0, 0x334}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x2, 0x94}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0x0, 'vlan0\x00', 'caif0\x00', {0xff}, {}, 0x2, 0x3, 0x19}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) 1.360129543s ago: executing program 2 (id=786): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(r1, 0xe, &(0x7f0000000100)={0x8000000000000008, 0xfffffffffffffffa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket$inet(0x2, 0xa, 0x8001) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 228.076167ms ago: executing program 6 (id=787): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x200000089}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x5) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 227.352497ms ago: executing program 7 (id=788): syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f00000003c0)='./file2\x00', 0x2a00880, &(0x7f0000000180)=ANY=[], 0x2, 0x15b, &(0x7f0000000200)="$eJzsj79rGmEYgJ/7US2t1oNasB3a0g49KtbzxG6lraWlQu1BoUuHUqgXEtAoCsExP8iWIX+AQ6KQSRxCxhASk8VEIZh/IouQIXvC3XcGsmb+nuXgeR++e9+vH0YmBmgIvlQrtbrbaLill7+cYojtnd1Hng9jcN8vKrW6F5dEv/8ZZr2vDpMloQ+jMDNXdt/9r5ZLoHudyd55/qHnVSxE+wDIx0WrBM58Df0nwtm+U2+5bNA90yEfE85772oT3gAqwmWAS14FV/0cDgqpt1t/NVYLyRePFWi2kr3useb75+6a/e1pJ5JYAY7a/pnN1ll6kDpN97rj0bD4wyk6o6xtv89aGcvKjZ2TYSG3uI7+PbIAf27eE/8JhYDfsKxAS4GuP58cKFGgv9EOluJi3gDFn3yaulg4Pp14e/xL3Ot8jBsqmomCRCKRSCQSiUQikUgkd+Q6AAD//4RtX4U=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}]}}]}, 0x3c}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 78.774806ms ago: executing program 2 (id=789): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0x53}, 0x28) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) r3 = open(&(0x7f00000001c0)='./file0\x00', 0x8000, 0x161) getdents(r3, 0x0, 0x0) 0s ago: executing program 8 (id=790): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x3b, &(0x7f0000000200)=[{0x20, '\x00', @buffer={"785f629b000bc36e4c47ceeef4e988279ccb9ce37f092b150598374457bf103b", 0x20}, 0x9}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015"], 0x40}], 0x1, 0x0, 0x0, 0x40065}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="140000000000000029000000340000000400000000000000680000000000000029000000040000000409000000000000fe2bf4e12b9826287997a6b33d89f3d60da1641d9fe3896c421b6c130ef4f01be8f5836d41787454800809e12e5f0b6bdcf705020bf4c910fc02000000000000000000000000000000000014000000000000002900000034000000000000000000000030000000000000002900000036"], 0xc8}}], 0x1, 0x810) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001740)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c, 0x0}}], 0x1, 0x24088804) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000300)=[{{&(0x7f0000000280)={0xa, 0x4e20, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000600)="6a9ee35872dedd3fa3577ce3d64d437abb6e906ee0d0354bcc7edf38e105d37f635fbb3b9c00a3d3bc61866fb3389eff2a0443cf6c38450ce2732419a8329bbe26f4eb1c9edcbf53fb1b0df9c77d6864e90753e3800dff58b9950616473ea1e55b947db3de3ebb8f63edf11ebec9eef2da6b9f545e28273d239534a4682dc23c44a85f64d17bbf41e291f3e3092626f045d8b2b5df6e478729cc88a79aa5f7fe99e374f09c34fe5b63b6dffd256f4ab6ec553520f191b386b290ce1e7fe4c59288afbcafe11869395eaae3f5562347", 0xcf}, {&(0x7f0000002840)="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", 0x6fa}], 0x2, &(0x7f0000000b40)}}], 0x1, 0x4000081) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): as ext3 due to feature incompatibilities [ 140.346704][ T4254] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 140.737299][ T4254] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.771792][ T4254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.932263][ T4254] usb 3-1: config 0 descriptor?? [ 140.987611][ T4254] cp210x 3-1:0.0: cp210x converter detected [ 141.293986][ T5014] Device name cannot be null; rc = [-22] [ 141.311199][ T5014] loop0: detected capacity change from 0 to 64 [ 141.458536][ T5016] nfs: Unknown parameter 'fs' [ 141.852573][ T2858] Bluetooth: hci5: command 0x040f tx timeout [ 141.855121][ T4950] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 142.054002][ T4950] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.110173][ T4950] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.599328][ T5021] netlink: 16 bytes leftover after parsing attributes in process `syz.0.184'. [ 143.316477][ T4254] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 143.326368][ T4254] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 143.345085][ T4254] usb 3-1: cp210x converter now attached to ttyUSB0 [ 143.381264][ T4254] usb 3-1: USB disconnect, device number 6 [ 143.404993][ T4254] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 143.459037][ T4254] cp210x 3-1:0.0: device disconnected [ 143.482512][ T5028] loop2: detected capacity change from 0 to 128 [ 143.532882][ T5018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 143.666069][ T4950] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 143.730766][ T26] audit: type=1326 audit(1770954673.587:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2880087f79 code=0x7ffc0000 [ 143.827845][ T26] audit: type=1326 audit(1770954673.587:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5029 comm="syz.1.190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2880087f79 code=0x7ffc0000 [ 143.916400][ T4413] Bluetooth: hci5: command 0x0419 tx timeout [ 143.954836][ T5043] loop1: detected capacity change from 0 to 2048 [ 143.956482][ T4950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.998820][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 144.045007][ T5041] loop3: detected capacity change from 0 to 1024 [ 144.062979][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 144.075208][ T4950] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.119183][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 144.139135][ T5043] loop1: p2 p3 p7 [ 144.145314][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 144.166969][ T4396] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.174075][ T4396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.178663][ T5041] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 144.432005][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 145.097059][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 145.152810][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 145.245800][ T4396] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.253858][ T4396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.348653][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 145.396682][ T4950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 145.410716][ T4950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.430981][ T5055] loop3: detected capacity change from 0 to 1024 [ 145.444740][ T5045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.191'. [ 145.511722][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 145.528436][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 145.543043][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 145.554988][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 145.603059][ T5055] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 146.250879][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 146.307350][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 146.318040][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 146.327551][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 146.337562][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 146.348638][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 146.360020][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 146.374392][ T5062] loop0: detected capacity change from 0 to 128 [ 146.401978][ T5064] loop2: detected capacity change from 0 to 512 [ 146.538204][ T5064] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 146.597444][ T5064] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.666421][ T2858] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 146.903858][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.918823][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.621326][ T4950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.776624][ T2858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 147.977186][ T2858] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 147.993234][ T2858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.026366][ T2858] usb 2-1: Product: syz [ 148.046662][ T2858] usb 2-1: Manufacturer: syz [ 148.091307][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 148.107719][ T2858] usb 2-1: SerialNumber: syz [ 148.120339][ T2858] usb 2-1: config 0 descriptor?? [ 148.136031][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 148.186629][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 148.196953][ T2858] hub 2-1:0.0: bad descriptor, ignoring hub [ 148.217613][ T2858] hub: probe of 2-1:0.0 failed with error -5 [ 148.233011][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 148.239507][ T2858] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 148.242576][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 148.258460][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 148.277075][ T4950] device veth0_vlan entered promiscuous mode [ 148.301096][ T4950] device veth1_vlan entered promiscuous mode [ 148.337183][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 148.352444][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 148.363005][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 148.372604][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 148.387535][ T4950] device veth0_macvtap entered promiscuous mode [ 148.418855][ T4950] device veth1_macvtap entered promiscuous mode [ 148.439477][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.450835][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.462523][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.475323][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.485753][ T146] Bluetooth: Wrong link type (-22) [ 148.486653][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.492663][ T146] Bluetooth: hci0: link tx timeout [ 148.515246][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 148.521734][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.535296][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.547726][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.558777][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.570683][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.587124][ T4950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.602555][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 148.612065][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 148.621010][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 148.631020][ T1153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 148.642810][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.659668][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.671448][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.687951][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.700279][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.716119][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.730024][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.741904][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.753361][ T4950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.766291][ T4950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.783292][ T4950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.794107][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 148.806692][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 148.824679][ T4950] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.838912][ T4950] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.849856][ T4950] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.860715][ T4950] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.926951][ T4254] usb 2-1: USB disconnect, device number 7 [ 148.976911][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.991888][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.001512][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.024836][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.034865][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.044032][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.487318][ T5096] loop0: detected capacity change from 0 to 512 [ 149.519938][ T5096] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.564125][ T5096] EXT4-fs (loop0): 1 truncate cleaned up [ 149.648713][ T5096] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 149.671738][ C1] vkms_vblank_simulate: vblank timer overrun [ 149.959429][ T5106] loop3: detected capacity change from 0 to 256 [ 150.937894][ T5107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.198'. [ 151.663155][ T4240] Bluetooth: hci0: command 0x0406 tx timeout [ 151.760859][ T5105] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 155.203811][ T5125] Cannot find add_set index 0 as target [ 155.330667][ T5147] loop1: detected capacity change from 0 to 512 [ 155.342354][ T5147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 155.382733][ T5147] EXT4-fs (loop1): 1 truncate cleaned up [ 155.388872][ T5147] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 155.421857][ T5151] loop5: detected capacity change from 0 to 512 [ 155.446516][ T4413] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 155.541904][ T2858] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 156.141532][ T5151] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 156.173498][ T5151] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 156.286507][ T2858] usb 3-1: Using ep0 maxpacket: 8 [ 156.436600][ T2858] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 156.445814][ T4413] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 156.458062][ T2858] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.473597][ T2858] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.486536][ T2858] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.515045][ T2858] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.828031][ T2858] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 156.837956][ T2858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.960183][ T4413] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 157.123832][ T5161] SET target dimension over the limit! [ 157.158164][ T4413] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.249566][ T4413] usb 1-1: Product: syz [ 157.257446][ T2858] usb 3-1: usb_control_msg returned -32 [ 157.265375][ T2858] usbtmc 3-1:16.0: can't read capabilities [ 157.316904][ T4413] usb 1-1: Manufacturer: syz [ 157.322034][ T4413] usb 1-1: SerialNumber: syz [ 157.453367][ T4413] usb 1-1: config 0 descriptor?? [ 157.549307][ T4413] hub 1-1:0.0: bad descriptor, ignoring hub [ 157.556528][ T4413] hub: probe of 1-1:0.0 failed with error -5 [ 157.593346][ T4413] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 157.831006][ T4200] Bluetooth: Wrong link type (-22) [ 157.836781][ T4200] Bluetooth: hci2: link tx timeout [ 157.842060][ T4200] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 158.399537][ T5168] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 158.551761][ T5173] loop1: detected capacity change from 0 to 512 [ 158.584825][ T4295] usb 3-1: USB disconnect, device number 7 [ 158.620635][ T5173] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 158.672380][ T5173] EXT4-fs (loop1): 1 truncate cleaned up [ 158.678584][ T5173] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 160.596103][ T2858] Bluetooth: hci2: command 0x0406 tx timeout [ 160.656335][ T4410] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 160.770586][ T5194] loop2: detected capacity change from 0 to 2048 [ 160.878735][ T5197] loop1: detected capacity change from 0 to 512 [ 160.885643][ T5194] loop2: p2 p3 p7 [ 160.923003][ T5197] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 160.987643][ T5197] EXT4-fs (loop1): 1 truncate cleaned up [ 160.993814][ T5197] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 161.229527][ T4410] usb 6-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 161.229558][ T4410] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.229579][ T4410] usb 6-1: Product: syz [ 161.229593][ T4410] usb 6-1: Manufacturer: syz [ 161.229607][ T4410] usb 6-1: SerialNumber: syz [ 161.231731][ T4410] usb 6-1: config 0 descriptor?? [ 161.275941][ T4410] option 6-1:0.0: GSM modem (1-port) converter detected [ 161.637972][ T4413] usb 6-1: USB disconnect, device number 2 [ 161.638965][ T4413] option 6-1:0.0: device disconnected [ 162.631035][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 162.668066][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 162.693934][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 162.754974][ T5221] loop0: detected capacity change from 0 to 512 [ 162.949290][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 162.956531][ T4254] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 163.051545][ T5221] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 163.084393][ T5221] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.596419][ T4254] usb 4-1: Using ep0 maxpacket: 8 [ 163.950429][ T5234] Cannot find add_set index 0 as target [ 164.056432][ T4254] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 164.086402][ T4254] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 164.100970][ T4254] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 164.132385][ T4254] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 164.156563][ T4254] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 164.256234][ C1] hrtimer: interrupt took 63467 ns [ 164.413689][ T4254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.458339][ T5245] loop2: detected capacity change from 0 to 512 [ 164.510680][ T5249] loop5: detected capacity change from 0 to 2048 [ 164.576327][ T3562] loop5: p2 p3 p7 [ 164.622205][ T5249] loop5: p2 p3 p7 [ 164.716658][ T4413] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 164.736504][ T4254] usb 4-1: GET_CAPABILITIES returned 0 [ 164.742244][ T4254] usbtmc 4-1:16.0: can't read capabilities [ 165.056588][ T4413] usb 2-1: Using ep0 maxpacket: 8 [ 165.091743][ T3562] loop5: p2 p3 p7 [ 165.093129][ T4254] usb 4-1: USB disconnect, device number 5 [ 165.151059][ T4240] usb 1-1: USB disconnect, device number 6 [ 165.236521][ T4413] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 165.247036][ T4413] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 165.264480][ T4413] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 165.277653][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 165.284801][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 165.301440][ T4941] udevd[4941]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 165.316628][ T4413] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 165.331537][ T4413] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 165.345706][ T4413] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 165.355343][ T4413] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.458433][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 165.477916][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 165.492205][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 166.268646][ T4413] usb 2-1: usb_control_msg returned -32 [ 166.274740][ T4413] usbtmc 2-1:16.0: can't read capabilities [ 166.296748][ T5268] Device name cannot be null; rc = [-22] [ 166.423750][ T5279] loop0: detected capacity change from 0 to 512 [ 166.446444][ T5280] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 166.476539][ T5279] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 166.551009][ T5279] EXT4-fs (loop0): 1 truncate cleaned up [ 166.560105][ T5279] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 166.666445][ T4413] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 166.886729][ T5286] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 167.058455][ T23] usb 2-1: USB disconnect, device number 8 [ 167.217616][ T4413] usb 4-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 167.245630][ T4413] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.264516][ T4413] usb 4-1: Product: syz [ 167.270465][ T4413] usb 4-1: Manufacturer: syz [ 167.307277][ T4413] usb 4-1: SerialNumber: syz [ 167.345481][ T4413] usb 4-1: config 0 descriptor?? [ 167.820280][ T4413] option 4-1:0.0: GSM modem (1-port) converter detected [ 167.823431][ T5296] Cannot find add_set index 0 as target [ 167.841575][ T4413] usb 4-1: USB disconnect, device number 6 [ 167.901639][ T4413] option 4-1:0.0: device disconnected [ 168.030130][ T5298] loop1: detected capacity change from 0 to 2048 [ 168.129756][ T4486] loop1: p2 p3 p7 [ 168.210222][ T5298] loop1: p2 p3 p7 [ 169.199564][ T5311] Device name cannot be null; rc = [-22] [ 170.018387][ T5313] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 170.575993][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 170.591699][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 170.602091][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 170.805099][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 170.818394][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 170.877934][ T5328] loop1: detected capacity change from 0 to 512 [ 170.882700][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 170.931223][ T5328] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 172.173659][ T5328] EXT4-fs (loop1): 1 truncate cleaned up [ 172.188496][ T5328] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 172.259012][ T5336] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 172.626369][ T4295] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 172.986475][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.007608][ T4295] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.031030][ T5347] loop1: detected capacity change from 0 to 512 [ 173.037671][ T4295] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 173.037720][ T4295] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 173.037869][ T4295] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.167036][ T4295] usb 4-1: config 0 descriptor?? [ 173.219287][ T5347] EXT4-fs (loop1): Ignoring removed oldalloc option [ 173.397014][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 173.545130][ T263] block nbd5: Attempted send on invalid socket [ 173.554242][ T263] blk_update_request: I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.568148][ T5353] qnx6: unable to read the first superblock [ 173.583087][ T263] block nbd5: Attempted send on invalid socket [ 173.589560][ T263] blk_update_request: I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 173.601576][ T5353] qnx6: unable to read the first superblock [ 173.607673][ T5353] qnx6: unable to read the first superblock [ 174.001966][ T4295] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 174.062759][ T4295] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 174.364374][ T5359] loop1: detected capacity change from 0 to 2048 [ 174.446416][ T5359] loop1: p2 p3 p7 [ 174.774231][ T5363] loop0: detected capacity change from 0 to 32768 [ 174.933331][ T5363] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.272 (5363) [ 175.016945][ T5363] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 175.025860][ T5363] BTRFS info (device loop0): using free space tree [ 175.032874][ T5363] BTRFS info (device loop0): has skinny extents [ 175.102501][ T4295] usb 4-1: USB disconnect, device number 7 [ 175.326373][ T5381] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 175.335133][ T5363] BTRFS info (device loop0): enabling ssd optimizations [ 176.006525][ T4240] Bluetooth: hci0: command 0x0406 tx timeout [ 176.016514][ T4240] Bluetooth: hci2: command 0x0406 tx timeout [ 176.304118][ T5402] Device name cannot be null; rc = [-22] [ 176.320808][ T5402] loop1: detected capacity change from 0 to 64 [ 176.336531][ T4240] Bluetooth: hci3: command 0x0406 tx timeout [ 176.344098][ T4240] Bluetooth: hci4: command 0x0406 tx timeout [ 178.414571][ T5419] loop5: detected capacity change from 0 to 512 [ 178.816965][ T5419] EXT4-fs (loop5): Ignoring removed oldalloc option [ 178.927268][ T5419] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 179.467951][ T150] block nbd1: Attempted send on invalid socket [ 179.474284][ T150] blk_update_request: I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.486126][ T5441] qnx6: unable to read the first superblock [ 179.496198][ T150] block nbd1: Attempted send on invalid socket [ 179.503118][ T150] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 179.514795][ T5441] qnx6: unable to read the first superblock [ 179.521011][ T5441] qnx6: unable to read the first superblock [ 180.390049][ T5445] loop1: detected capacity change from 0 to 256 [ 180.696997][ T5445] exfat: Deprecated parameter 'utf8' [ 180.731938][ T5445] exfat: Deprecated parameter 'utf8' [ 180.759312][ T5445] exfat: Deprecated parameter 'utf8' [ 180.772010][ T5452] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 180.896561][ T5445] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 180.936498][ T2858] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 181.347470][ T2858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.425156][ T2858] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.572510][ T2858] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.713398][ T2858] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.813110][ T2858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.907881][ T2858] usb 6-1: config 0 descriptor?? [ 182.455395][ T2858] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 182.512757][ T5476] netlink: 'syz.1.297': attribute type 72 has an invalid length. [ 183.053630][ T2858] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 183.320211][ T4254] usb 6-1: USB disconnect, device number 3 [ 183.346892][ T5488] fido_id[5488]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 188.206248][ C0] sched: RT throttling activated [ 188.232436][ T2858] Bluetooth: hci5: command 0x0405 tx timeout [ 189.005936][ T5523] netlink: 'syz.5.310': attribute type 72 has an invalid length. [ 191.179403][ T5544] netlink: 48 bytes leftover after parsing attributes in process `syz.3.316'. [ 191.449434][ T5553] IPv6: NLM_F_CREATE should be specified when creating new route [ 192.774478][ T5564] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.322'. [ 193.060328][ T5565] loop3: detected capacity change from 0 to 256 [ 193.295417][ T5565] exfat: Deprecated parameter 'utf8' [ 193.839271][ T5565] exfat: Deprecated parameter 'utf8' [ 193.844663][ T5565] exfat: Deprecated parameter 'utf8' [ 194.169095][ T5565] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 194.241758][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.248107][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.193898][ T5605] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.333'. [ 196.263303][ T5610] loop0: detected capacity change from 0 to 512 [ 196.340233][ T5610] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 196.394467][ T5613] loop5: detected capacity change from 0 to 512 [ 196.403636][ T5610] EXT4-fs (loop0): 1 truncate cleaned up [ 196.448250][ T5610] EXT4-fs (loop0): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 196.538195][ T5602] loop1: detected capacity change from 0 to 32768 [ 196.554249][ T5613] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 196.577915][ T5613] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 196.642774][ T4190] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 196.685356][ T5602] XFS (loop1): Mounting V5 Filesystem [ 196.815274][ T5613] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.335: corrupted inode contents [ 196.831520][ T5613] EXT4-fs error (device loop5): ext4_dirty_inode:6058: inode #2: comm syz.5.335: mark_inode_dirty error [ 196.844145][ T5613] EXT4-fs error (device loop5): ext4_do_update_inode:5222: inode #2: comm syz.5.335: corrupted inode contents [ 196.860511][ T5613] EXT4-fs error (device loop5): __ext4_ext_dirty:183: inode #2: comm syz.5.335: mark_inode_dirty error [ 196.994096][ T5602] XFS (loop1): Ending clean mount [ 197.091266][ T5602] XFS (loop1): Quotacheck needed: Please wait. [ 197.185333][ T5602] XFS (loop1): Quotacheck: Done. [ 197.251071][ T26] audit: type=1800 audit(1770954727.107:7): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.332" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 197.320624][ T26] audit: type=1800 audit(1770954727.107:8): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.332" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 197.631646][ T4185] XFS (loop1): Unmounting Filesystem [ 197.649235][ T5643] loop5: detected capacity change from 0 to 256 [ 197.665406][ T5643] exfat: Deprecated parameter 'utf8' [ 197.684334][ T5643] exfat: Deprecated parameter 'utf8' [ 197.692424][ T5643] exfat: Deprecated parameter 'utf8' [ 197.786976][ T5643] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 198.104599][ T5646] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.345'. [ 199.323900][ T5656] device syzkaller1 entered promiscuous mode [ 200.595343][ T4240] Bluetooth: hci1: command 0x0409 tx timeout [ 200.812060][ T5675] loop1: detected capacity change from 0 to 512 [ 201.274645][ T5675] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 201.294385][ T5675] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 201.305193][ T5689] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 201.500538][ T5675] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.353: corrupted inode contents [ 201.513061][ T5675] EXT4-fs error (device loop1): ext4_dirty_inode:6058: inode #2: comm syz.1.353: mark_inode_dirty error [ 201.525554][ T5675] EXT4-fs error (device loop1): ext4_do_update_inode:5222: inode #2: comm syz.1.353: corrupted inode contents [ 201.538050][ T5675] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.353: mark_inode_dirty error [ 201.680145][ T5649] chnl_net:caif_netlink_parms(): no params data found [ 201.895408][ T5706] loop2: detected capacity change from 0 to 256 [ 201.907944][ T5706] exfat: Deprecated parameter 'utf8' [ 201.913620][ T5706] exfat: Deprecated parameter 'utf8' [ 201.919552][ T5706] exfat: Deprecated parameter 'utf8' [ 201.964087][ T5706] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 202.479784][ T5649] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.627810][ T5649] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.676021][ T1107] Bluetooth: hci1: command 0x041b tx timeout [ 202.768781][ T5649] device bridge_slave_0 entered promiscuous mode [ 202.866824][ T5649] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.066657][ T5649] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.221009][ T5649] device bridge_slave_1 entered promiscuous mode [ 204.331234][ T5649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.369696][ T5649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.555480][ T5649] team0: Port device team_slave_0 added [ 205.835868][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 205.921118][ T5649] team0: Port device team_slave_1 added [ 205.988266][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.052887][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.081354][ T5649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.094596][ T5649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.105295][ T5649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.131754][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.151101][ T5649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.713323][ T5649] device hsr_slave_0 entered promiscuous mode [ 207.781806][ T5751] loop2: detected capacity change from 0 to 512 [ 207.789298][ T5649] device hsr_slave_1 entered promiscuous mode [ 207.814043][ T5649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.822468][ T5649] Cannot create hsr debugfs directory [ 207.828149][ T5750] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 207.904017][ T5751] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 207.916868][ T4295] Bluetooth: hci1: command 0x0419 tx timeout [ 207.926359][ T5751] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.162724][ T5751] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.368: corrupted inode contents [ 208.175585][ T5751] EXT4-fs error (device loop2): ext4_dirty_inode:6058: inode #2: comm syz.2.368: mark_inode_dirty error [ 209.278333][ T5751] EXT4-fs error (device loop2): ext4_do_update_inode:5222: inode #2: comm syz.2.368: corrupted inode contents [ 209.292110][ T5751] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz.2.368: mark_inode_dirty error [ 209.515481][ T5649] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.784556][ T5649] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.011971][ T5649] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.161815][ T5649] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 211.062319][ T5785] loop1: detected capacity change from 0 to 2048 [ 211.135745][ T5649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.156697][ T5785] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 211.171974][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.188136][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.210558][ T5649] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.254905][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.277545][ T5785] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 211.296818][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.361532][ T5785] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.369: bg 0: block 234: padding at end of block bitmap is not set [ 211.369694][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.383569][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.396393][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.476473][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.487262][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.492968][ T5785] EXT4-fs (loop1): Remounting filesystem read-only [ 211.517009][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.524102][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.612360][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.938634][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 211.954657][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.058674][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.104876][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.118984][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.181078][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.282222][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.377853][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.403827][ T5649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.471281][ T5649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.596770][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.621222][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.693266][ T5813] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 213.555257][ T5817] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 214.395167][ T5649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.406903][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.426850][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.560286][ T5836] loop5: detected capacity change from 0 to 512 [ 215.274646][ T5836] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 215.417405][ T5836] EXT4-fs (loop5): 1 truncate cleaned up [ 215.423100][ T5836] EXT4-fs (loop5): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 215.746032][ T5843] netlink: 24 bytes leftover after parsing attributes in process `syz.1.391'. [ 216.278017][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 216.729598][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 216.737088][ T4950] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 216.797670][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 216.827436][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 216.852095][ T5649] device veth0_vlan entered promiscuous mode [ 216.871496][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 216.883522][ T5862] loop1: detected capacity change from 0 to 2048 [ 216.885438][ T5864] loop2: detected capacity change from 0 to 512 [ 216.901288][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 216.935722][ T5649] device veth1_vlan entered promiscuous mode [ 216.959069][ T5864] EXT4-fs (loop2): Ignoring removed oldalloc option [ 217.017867][ T4536] loop1: p2 p3 p7 [ 217.039117][ T5864] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 218.076302][ T5649] device veth0_macvtap entered promiscuous mode [ 218.113847][ T5649] device veth1_macvtap entered promiscuous mode [ 218.132502][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.143776][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.154082][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.165421][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.175592][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.187939][ T5879] loop3: detected capacity change from 0 to 512 [ 218.199099][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.210596][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.221466][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.231777][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.246518][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.284825][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.304083][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.316077][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.335193][ T5879] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 218.360006][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 218.385787][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 218.394280][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 218.403137][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 218.413511][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 218.454126][ T5879] EXT4-fs (loop3): 1 truncate cleaned up [ 218.487344][ T5862] loop1: p2 p3 p7 [ 218.494983][ T5879] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 218.495681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 218.530000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 218.539019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 218.821235][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.866236][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.902601][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.913562][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.924920][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.965279][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.975628][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.997257][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.014158][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.033001][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.043457][ T5649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.093652][ T5649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.139769][ T5649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.157679][ T5649] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.192504][ T5649] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.218367][ T5649] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.226444][ T3562] loop1: p2 p3 p7 [ 219.227337][ T5649] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.537073][ T5162] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.920645][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 219.952087][ T5903] loop1: detected capacity change from 0 to 512 [ 219.953681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 220.019091][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 220.031652][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 220.042514][ T5903] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 220.049137][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 220.091444][ T5903] EXT4-fs (loop1): 1 truncate cleaned up [ 220.133966][ T5903] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 220.250438][ T5162] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.262587][ T4185] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 220.736606][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 220.736637][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory [ 220.762201][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 220.907926][ T5895] netlink: 24 bytes leftover after parsing attributes in process `syz.3.403'. [ 220.969580][ T5162] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.163223][ T5162] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.245127][ T4196] Bluetooth: hci2: command 0x0409 tx timeout [ 221.264371][ T5915] loop2: detected capacity change from 0 to 512 [ 221.289234][ T5915] EXT4-fs (loop2): Ignoring removed oldalloc option [ 221.313830][ T5915] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 221.321843][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.340037][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.349074][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.443054][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.453185][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.504445][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.534079][ T5891] chnl_net:caif_netlink_parms(): no params data found [ 221.712445][ T5923] loop2: detected capacity change from 0 to 2048 [ 221.873959][ T4536] loop2: p2 p3 p7 [ 221.942322][ T5929] Device name cannot be null; rc = [-22] [ 221.963825][ T5929] loop6: detected capacity change from 0 to 64 [ 222.828495][ T5923] loop2: p2 p3 p7 [ 222.866330][ T4196] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.006520][ T5891] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.013842][ T5891] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.142686][ T5891] device bridge_slave_0 entered promiscuous mode [ 223.403671][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 223.484441][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.751272][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 223.795563][ T2858] Bluetooth: hci2: command 0x041b tx timeout [ 223.820141][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 223.872258][ T5891] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.899519][ T4196] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 223.919648][ T4196] usb 4-1: config 0 has no interface number 0 [ 223.925801][ T4196] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.944109][ T4196] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 223.994154][ T5891] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.020008][ T5891] device bridge_slave_1 entered promiscuous mode [ 224.086981][ T5891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.105563][ T4196] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 224.121157][ T4196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.132239][ T4196] usb 4-1: config 0 descriptor?? [ 224.137627][ T5959] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 224.149451][ T5891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.971010][ T5891] team0: Port device team_slave_0 added [ 225.004880][ T5891] team0: Port device team_slave_1 added [ 225.043417][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.058693][ T5968] loop6: detected capacity change from 0 to 512 [ 225.099008][ T5968] EXT4-fs (loop6): Ignoring removed oldalloc option [ 225.115898][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.141969][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.164070][ T5891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.179112][ T5891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.187229][ T5968] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 225.226239][ T5891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.277509][ T5891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.349328][ T4196] input: HID 04d9:a055 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/0003:04D9:A055.0003/input/input8 [ 226.481088][ T4240] Bluetooth: hci0: command 0x0409 tx timeout [ 226.488538][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 226.658276][ T4196] holtek_kbd 0003:04D9:A055.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.3-1/input1 [ 226.708769][ T4196] usb 4-1: USB disconnect, device number 8 [ 226.797889][ T5983] Device name cannot be null; rc = [-22] [ 226.818873][ T5983] loop3: detected capacity change from 0 to 64 [ 227.425884][ T5982] fido_id[5982]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 227.820670][ T5986] syz.6.423 uses obsolete (PF_INET,SOCK_PACKET) [ 228.480440][ T5891] device hsr_slave_0 entered promiscuous mode [ 228.519325][ T5891] device hsr_slave_1 entered promiscuous mode [ 228.536460][ T5891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.558721][ T4297] Bluetooth: hci2: command 0x0419 tx timeout [ 228.582453][ T5891] Cannot create hsr debugfs directory [ 228.588135][ T4297] Bluetooth: hci0: command 0x041b tx timeout [ 230.757935][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 230.777955][ T1107] Bluetooth: hci0: command 0x040f tx timeout [ 230.987369][ T5891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 231.176572][ T6023] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 231.543524][ T5891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 231.984137][ T6034] loop3: detected capacity change from 0 to 512 [ 232.045777][ T6034] EXT4-fs (loop3): Ignoring removed oldalloc option [ 232.048094][ T5891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 232.072671][ T5891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 232.080482][ T6034] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 232.902057][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.916037][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.934861][ T6050] loop2: detected capacity change from 0 to 32768 [ 232.943775][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 232.955717][ T5950] device bridge_slave_0 entered promiscuous mode [ 233.123159][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.140086][ T6050] XFS (loop2): Mounting V5 Filesystem [ 233.146036][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.188659][ T5950] device bridge_slave_1 entered promiscuous mode [ 233.337097][ T6050] XFS (loop2): Ending clean mount [ 233.349487][ T6050] XFS (loop2): Quotacheck needed: Please wait. [ 233.374485][ T5162] device hsr_slave_0 left promiscuous mode [ 234.454016][ T6050] XFS (loop2): Quotacheck: Done. [ 234.943754][ T5162] device hsr_slave_1 left promiscuous mode [ 235.059496][ T4192] XFS (loop2): Unmounting Filesystem [ 235.161213][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.210429][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.528275][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.535776][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.557077][ T5162] device bridge_slave_1 left promiscuous mode [ 235.563461][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.801909][ T5162] device bridge_slave_0 left promiscuous mode [ 235.812578][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.866485][ T6102] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 235.990634][ T5162] device veth1_macvtap left promiscuous mode [ 236.032674][ T5162] device veth0_macvtap left promiscuous mode [ 236.110332][ T5162] device veth1_vlan left promiscuous mode [ 236.167180][ T5162] device veth0_vlan left promiscuous mode [ 236.616549][ T6106] loop3: detected capacity change from 0 to 2048 [ 236.681489][ T6106] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 236.739241][ T6106] EXT4-fs (loop3): mounted filesystem without journal. Opts: debug_want_extra_isize=0x0000000000000004,discard,errors=remount-ro,dioread_lock,max_batch_time=0x0000000000000005,mblk_io_submit,minixdf,barrier=0x0000000000000000,nombcache,bsddf,. Quota mode: none. [ 236.769060][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 236.771873][ T6111] loop2: detected capacity change from 0 to 512 [ 236.786056][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 236.815304][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.840316][ T6111] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 236.858790][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.859448][ T6106] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.442: bg 0: block 234: padding at end of block bitmap is not set [ 236.905942][ T6111] EXT4-fs (loop2): 1 truncate cleaned up [ 236.918735][ T6106] EXT4-fs (loop3): Remounting filesystem read-only [ 236.927507][ T6111] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 237.009847][ T5162] bond0 (unregistering): Released all slaves [ 237.295691][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.358903][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.398087][ T6119] loop3: detected capacity change from 0 to 512 [ 237.440392][ T6119] EXT4-fs (loop3): Ignoring removed oldalloc option [ 237.446026][ T5891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.503839][ T6119] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 237.505203][ T5950] team0: Port device team_slave_0 added [ 237.577849][ T5891] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.599713][ T5950] team0: Port device team_slave_1 added [ 237.619920][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 237.667489][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 237.710504][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 237.760749][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 237.808324][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.815454][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.836515][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 237.856563][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 237.865038][ T4334] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.872278][ T4334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.891198][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 237.941353][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.985694][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.067060][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.100224][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 238.126973][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 238.163265][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 238.183997][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.197148][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 238.206031][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.227148][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 238.235831][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 238.254687][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 238.267421][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.284775][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.344173][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.373174][ T5891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 238.581226][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 238.592627][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 239.112720][ T5950] device hsr_slave_0 entered promiscuous mode [ 239.163254][ T5950] device hsr_slave_1 entered promiscuous mode [ 239.304438][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.870110][ T5950] Cannot create hsr debugfs directory [ 241.074322][ T5891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.116579][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.124137][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.436624][ T6191] Device name cannot be null; rc = [-22] [ 241.462607][ T6191] loop6: detected capacity change from 0 to 64 [ 242.838747][ T5950] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 242.924151][ T5950] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 242.955561][ T5950] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 243.084859][ T5950] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 243.119701][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 243.167359][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 243.998459][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 244.037538][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 244.046405][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 244.055142][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 244.157769][ T5891] device veth0_vlan entered promiscuous mode [ 244.172576][ T5891] device veth1_vlan entered promiscuous mode [ 244.205440][ T6229] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 245.455394][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 245.515974][ T4334] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 245.550618][ T5891] device veth0_macvtap entered promiscuous mode [ 245.648543][ T6244] netlink: 24 bytes leftover after parsing attributes in process `syz.3.453'. [ 245.716145][ T6246] Device name cannot be null; rc = [-22] [ 245.735538][ T6246] loop6: detected capacity change from 0 to 64 [ 246.176952][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.303267][ T5891] device veth1_macvtap entered promiscuous mode [ 246.376922][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 246.385513][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 246.457306][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 246.505631][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.536453][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.576291][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.586131][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.656316][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.666161][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.726233][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.736078][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.836376][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.906319][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.984166][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.025675][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.076148][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.091763][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.141876][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 247.185585][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 247.207153][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 247.229033][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 247.246734][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.253948][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.303651][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.313349][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 247.323076][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.330238][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.342940][ T6263] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 247.344319][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 247.403925][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.423948][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.462392][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.479315][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.493407][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.551624][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.576471][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.587283][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.597194][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.607992][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.617951][ T5891] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.630588][ T5891] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.644305][ T5891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.654789][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.6.475'. [ 247.680174][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 247.694615][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 247.735238][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 247.764568][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 247.776948][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 247.794414][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 247.805847][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 247.833750][ T5950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 247.845748][ T5950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 247.956874][ T5891] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.969571][ T5891] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.978370][ T5891] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.987313][ T5891] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.334766][ T4396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.376583][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 248.397564][ T4396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.418301][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 248.422030][ T6271] loop2: detected capacity change from 0 to 40427 [ 248.441439][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 248.452830][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 248.461699][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 248.470458][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 248.501189][ T6271] F2FS-fs (loop2): Unrecognized mount option "errors=continue" or missing value [ 248.517477][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 248.538774][ T4333] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 249.263558][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.307882][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.357378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 249.441878][ T6294] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 249.462305][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 249.492686][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 249.562856][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.425892][ T6303] Device name cannot be null; rc = [-22] [ 250.445041][ T6303] loop3: detected capacity change from 0 to 64 [ 251.678194][ T5162] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.904160][ T6322] Device name cannot be null; rc = [-22] [ 253.013182][ T5162] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.035498][ T6335] loop7: detected capacity change from 0 to 512 [ 253.093351][ T6335] EXT4-fs (loop7): Ignoring removed oldalloc option [ 253.238106][ T6335] EXT4-fs (loop7): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 253.278596][ T5162] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.474259][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 253.508398][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 253.552925][ T5950] device veth0_vlan entered promiscuous mode [ 253.611400][ T5162] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.746472][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 253.806870][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 254.000947][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 254.181720][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 254.221826][ T6343] loop2: detected capacity change from 0 to 32768 [ 254.222729][ T5950] device veth1_vlan entered promiscuous mode [ 254.386118][ T6358] loop7: detected capacity change from 0 to 2048 [ 254.493719][ T5950] device veth0_macvtap entered promiscuous mode [ 254.502809][ T6343] XFS (loop2): Mounting V5 Filesystem [ 254.536454][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 254.567971][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 254.589716][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 254.610674][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 254.621145][ T4940] loop7: p2 p3 p7 [ 254.623781][ T5950] device veth1_macvtap entered promiscuous mode [ 254.683174][ T6343] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 255.252928][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 255.291130][ T6343] XFS (loop2): Starting recovery (logdev: internal) [ 255.397731][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.458554][ T6343] XFS (loop2): Ending recovery (logdev: internal) [ 255.480185][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.557796][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.627441][ T26] audit: type=1800 audit(1770954785.487:9): pid=6343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.483" name="file1" dev="loop2" ino=4422 res=0 errno=0 [ 255.652074][ T6358] loop7: p2 p3 p7 [ 255.670016][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.682859][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.691411][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.704082][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.735971][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.766149][ T3562] loop7: p2 p3 p7 [ 255.846390][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.857185][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.870461][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.881633][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.891940][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.902779][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.917238][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.936291][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.960777][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.970401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 255.984629][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 255.986002][ T4192] XFS (loop2): Unmounting Filesystem [ 256.002686][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.018198][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.029379][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.040293][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.050581][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.061497][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.071630][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.082508][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.094184][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.104946][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.114965][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.125525][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.136025][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 256.146682][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.159789][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 256.263968][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 256.265180][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 256.280082][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 256.319972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 256.469434][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 256.478698][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 256.559892][ T6386] Device name cannot be null; rc = [-22] [ 256.948768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 257.140493][ T5950] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.267848][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 257.281966][ T5950] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.301392][ T5950] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.821992][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 257.838958][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 257.931807][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 257.947996][ T5950] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.367465][ T6411] loop7: detected capacity change from 0 to 16 [ 258.394597][ T6413] loop6: detected capacity change from 0 to 512 [ 258.443740][ T6411] erofs: (device loop7): mounted with root inode @ nid 36. [ 258.566628][ T6416] loop2: detected capacity change from 0 to 512 [ 258.614266][ T4391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.699730][ T4391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.947055][ T6413] EXT4-fs (loop6): Ignoring removed oldalloc option [ 258.957307][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 258.977038][ T6416] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 259.014892][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.318699][ T6413] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 259.336167][ T6416] EXT4-fs (loop2): 1 truncate cleaned up [ 259.341909][ T6416] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 259.395107][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.556410][ T6318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.662865][ T6432] loop3: detected capacity change from 0 to 2048 [ 260.689066][ T6432] loop3: p2 p3 p7 [ 260.895186][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 261.477149][ T6456] Device name cannot be null; rc = [-22] [ 261.598957][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 261.614065][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 261.627420][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 262.136377][ T5162] device hsr_slave_0 left promiscuous mode [ 262.176294][ T5162] device hsr_slave_1 left promiscuous mode [ 262.241981][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.257694][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.339839][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.354514][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.471240][ T5162] device bridge_slave_1 left promiscuous mode [ 262.485316][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.585009][ T5162] device bridge_slave_0 left promiscuous mode [ 262.602233][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.671902][ T6480] loop3: detected capacity change from 0 to 512 [ 262.745123][ T6480] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 262.846331][ T5162] device veth1_macvtap left promiscuous mode [ 262.885235][ T5162] device veth0_macvtap left promiscuous mode [ 263.046437][ T5162] device veth1_vlan left promiscuous mode [ 263.061371][ T6480] EXT4-fs (loop3): 1 truncate cleaned up [ 263.067271][ T6480] EXT4-fs (loop3): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,debug_want_extra_isize=0x000000000000006a,block_validity,errors=remount-ro,nombcache,. Quota mode: none. [ 263.111341][ T5162] device veth0_vlan left promiscuous mode [ 264.060171][ T6491] loop2: detected capacity change from 0 to 512 [ 264.335119][ T6491] EXT4-fs (loop2): Ignoring removed oldalloc option [ 265.154802][ T6491] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 265.369143][ T6502] loop3: detected capacity change from 0 to 2048 [ 265.572024][ T6511] Device name cannot be null; rc = [-22] [ 265.590922][ T6511] loop6: detected capacity change from 0 to 64 [ 266.239393][ T6502] loop3: p2 p3 p7 [ 267.581335][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 268.393712][ T6529] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 268.687636][ T6536] loop3: detected capacity change from 0 to 32768 [ 269.167783][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 269.195433][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.286022][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 269.307159][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 269.317679][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 269.443849][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.901400][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 270.371230][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop3p7, 10) failed: No such file or directory [ 270.384743][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 270.541031][ T6536] XFS (loop3): Mounting V5 Filesystem [ 270.776904][ T6536] XFS (loop3): Ending clean mount [ 270.796517][ T6536] XFS (loop3): Quotacheck needed: Please wait. [ 271.071972][ T6568] Device name cannot be null; rc = [-22] [ 271.102048][ T6568] loop8: detected capacity change from 0 to 64 [ 271.268418][ T6570] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 271.288733][ T6536] XFS (loop3): Quotacheck: Done. [ 272.007030][ T4193] XFS (loop3): Unmounting Filesystem [ 272.093945][ T6579] loop6: detected capacity change from 0 to 16 [ 272.165473][ T5162] bond0 (unregistering): Released all slaves [ 272.221710][ T6579] erofs: (device loop6): mounted with root inode @ nid 36. [ 273.051893][ T6478] netlink: 24 bytes leftover after parsing attributes in process `syz.7.510'. [ 273.296412][ T6592] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 274.851463][ T6615] device syzkaller0 entered promiscuous mode [ 275.237334][ T6630] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 276.340540][ T6639] loop6: detected capacity change from 0 to 32768 [ 276.501003][ T6642] loop8: detected capacity change from 0 to 512 [ 276.997626][ T6642] EXT4-fs (loop8): Ignoring removed nobh option [ 277.003895][ T6642] EXT4-fs (loop8): Ignoring removed bh option [ 277.037643][ T6642] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 277.047153][ T6642] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.547: invalid indirect mapped block 256 (level 1) [ 277.063568][ T6642] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.547: invalid indirect mapped block 2683928664 (level 1) [ 277.080948][ T6642] EXT4-fs (loop8): 1 truncate cleaned up [ 277.086681][ T6642] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000007,nobh,noload,bh,usrjquota=.noacl,nobarrier,jqfmt=vfsv0,jqfmt=vfsold,,,errors=continue. Quota mode: writeback. [ 277.226486][ T6641] loop7: detected capacity change from 0 to 2048 [ 277.371652][ T26] audit: type=1800 audit(1770954807.227:10): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.547" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 277.528312][ T6641] loop7: p2 p3 p7 [ 277.553995][ T6639] XFS (loop6): Mounting V5 Filesystem [ 277.736017][ T6639] XFS (loop6): Ending clean mount [ 277.744205][ T6639] XFS (loop6): Quotacheck needed: Please wait. [ 278.043966][ T4551] udevd[4551]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 278.055151][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 278.085350][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 278.110201][ T6639] XFS (loop6): Quotacheck: Done. [ 278.737530][ T5649] XFS (loop6): Unmounting Filesystem [ 278.799901][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.549'. [ 278.887316][ T6677] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 279.900361][ T6694] netlink: 'syz.2.557': attribute type 39 has an invalid length. [ 280.106343][ T6704] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 280.177493][ T6707] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 281.307836][ T6722] loop2: detected capacity change from 0 to 512 [ 281.442531][ T6722] EXT4-fs (loop2): Ignoring removed nobh option [ 281.448947][ T6722] EXT4-fs (loop2): Ignoring removed bh option [ 281.629617][ T6722] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 281.648784][ T6722] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.561: invalid indirect mapped block 256 (level 1) [ 281.669574][ T6722] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.561: invalid indirect mapped block 2683928664 (level 1) [ 281.690343][ T6722] EXT4-fs (loop2): 1 truncate cleaned up [ 281.696395][ T6722] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000007,nobh,noload,bh,usrjquota=.noacl,nobarrier,jqfmt=vfsv0,jqfmt=vfsold,,,errors=continue. Quota mode: writeback. [ 281.930696][ T6726] loop8: detected capacity change from 0 to 32768 [ 282.174934][ T26] audit: type=1800 audit(1770954812.017:11): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.561" name="file0" dev="loop2" ino=13 res=0 errno=0 [ 282.194345][ C0] vkms_vblank_simulate: vblank timer overrun [ 282.373145][ T6726] XFS (loop8): Mounting V5 Filesystem [ 282.472031][ T6726] XFS (loop8): Ending clean mount [ 282.483247][ T6726] XFS (loop8): Quotacheck needed: Please wait. [ 282.585884][ T6726] XFS (loop8): Quotacheck: Done. [ 283.299018][ T5950] XFS (loop8): Unmounting Filesystem [ 283.486797][ T4195] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 284.220233][ T6752] netlink: 24 bytes leftover after parsing attributes in process `syz.6.566'. [ 284.917938][ T4195] Bluetooth: Frame is too long (len 18, expected len 4) [ 285.176321][ T6783] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 285.487546][ T6790] loop2: detected capacity change from 0 to 4096 [ 285.604051][ T6790] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 285.623053][ T6790] ntfs3: loop2: Failed to load $Extend. [ 285.974767][ T6803] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 287.054867][ T26] audit: type=1800 audit(1770954816.907:12): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.571" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 287.495808][ T6814] loop6: detected capacity change from 0 to 512 [ 288.331748][ T6814] EXT4-fs (loop6): Ignoring removed nobh option [ 288.338284][ T6814] EXT4-fs (loop6): Ignoring removed bh option [ 288.602875][ T4192] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 288.670586][ T6814] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2 [ 288.680285][ T6814] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.576: invalid indirect mapped block 256 (level 1) [ 288.735948][ T6814] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.576: invalid indirect mapped block 2683928664 (level 1) [ 288.750419][ T6814] EXT4-fs (loop6): 1 truncate cleaned up [ 288.756428][ T6814] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000007,nobh,noload,bh,usrjquota=.noacl,nobarrier,jqfmt=vfsv0,jqfmt=vfsold,,,errors=continue. Quota mode: writeback. [ 289.067602][ T26] audit: type=1800 audit(1770954818.877:13): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.576" name="file0" dev="loop6" ino=13 res=0 errno=0 [ 289.905157][ T6842] loop2: detected capacity change from 0 to 32768 [ 290.234994][ T6842] XFS (loop2): Mounting V5 Filesystem [ 291.103486][ T6842] XFS (loop2): Ending clean mount [ 291.115694][ T6842] XFS (loop2): Quotacheck needed: Please wait. [ 291.266702][ T6842] XFS (loop2): Quotacheck: Done. [ 292.212608][ T4192] XFS (loop2): Unmounting Filesystem [ 292.621196][ T5162] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.777980][ T5162] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.941026][ T5162] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.120552][ T5162] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.157861][ T6907] loop3: detected capacity change from 0 to 512 [ 294.310780][ T6907] EXT4-fs (loop3): Ignoring removed nobh option [ 294.317295][ T6907] EXT4-fs (loop3): Ignoring removed bh option [ 294.479983][ T6907] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 294.489093][ T6907] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.595: invalid indirect mapped block 256 (level 1) [ 294.502919][ T6907] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.595: invalid indirect mapped block 2683928664 (level 1) [ 294.518631][ T6907] EXT4-fs (loop3): 1 truncate cleaned up [ 294.524293][ T6907] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000007,nobh,noload,bh,usrjquota=.noacl,nobarrier,jqfmt=vfsv0,jqfmt=vfsold,,,errors=continue. Quota mode: writeback. [ 294.546103][ C1] vkms_vblank_simulate: vblank timer overrun [ 295.026284][ T26] audit: type=1800 audit(1770954824.867:14): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.595" name="file0" dev="loop3" ino=13 res=0 errno=0 [ 295.729958][ T6944] loop8: detected capacity change from 0 to 32768 [ 295.952287][ T6925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.601'. [ 296.077653][ T6944] XFS (loop8): Mounting V5 Filesystem [ 296.215553][ T6944] XFS (loop8): Ending clean mount [ 296.223736][ T6944] XFS (loop8): Quotacheck needed: Please wait. [ 296.440101][ T6944] XFS (loop8): Quotacheck: Done. [ 297.265724][ T5950] XFS (loop8): Unmounting Filesystem [ 297.347481][ T6985] loop6: detected capacity change from 0 to 512 [ 297.657495][ T6985] EXT4-fs (loop6): Ignoring removed oldalloc option [ 297.751334][ T6985] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 298.184768][ T7001] netlink: 'syz.6.620': attribute type 39 has an invalid length. [ 298.674982][ T7012] loop7: detected capacity change from 0 to 2048 [ 298.703488][ T5162] device hsr_slave_0 left promiscuous mode [ 298.720005][ T5162] device hsr_slave_1 left promiscuous mode [ 298.755130][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.783340][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.824467][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.869733][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.908989][ T5162] device bridge_slave_1 left promiscuous mode [ 298.928965][ T7012] loop7: p2 p3 p7 [ 298.967425][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.114192][ T5162] device bridge_slave_0 left promiscuous mode [ 299.169573][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.292614][ T5162] device veth1_macvtap left promiscuous mode [ 299.423830][ T5162] device veth0_macvtap left promiscuous mode [ 299.684538][ T5162] device veth1_vlan left promiscuous mode [ 299.768439][ T5162] device veth0_vlan left promiscuous mode [ 299.837323][ T7043] loop2: detected capacity change from 0 to 512 [ 300.943329][ T7043] EXT4-fs (loop2): Ignoring removed oldalloc option [ 301.015320][ T7043] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 301.493255][ T7066] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 302.096242][ T7064] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 303.599298][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 304.622089][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 304.688014][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.834970][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.144638][ T5162] bond0 (unregistering): Released all slaves [ 305.221811][ T7099] loop8: detected capacity change from 0 to 4096 [ 305.376541][ T7101] loop7: detected capacity change from 0 to 32768 [ 305.581633][ T7101] XFS (loop7): Mounting V5 Filesystem [ 305.604911][ T7099] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 305.622983][ T7099] ntfs3: loop8: Failed to load $Extend. [ 305.738793][ T7101] XFS (loop7): Ending clean mount [ 305.746634][ T7101] XFS (loop7): Quotacheck needed: Please wait. [ 305.770244][ T26] audit: type=1800 audit(1770954835.627:15): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.648" name="file1" dev="loop8" ino=30 res=0 errno=0 [ 305.792824][ T7114] loop6: detected capacity change from 0 to 2048 [ 305.850328][ T7101] XFS (loop7): Quotacheck: Done. [ 306.022602][ T4536] loop6: p2 p3 p7 [ 306.027871][ T7122] loop2: detected capacity change from 0 to 512 [ 306.143028][ T7114] loop6: p2 p3 p7 [ 306.218005][ T7122] EXT4-fs (loop2): Ignoring removed oldalloc option [ 306.240340][ T5950] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 306.248998][ T7122] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 306.324775][ T5891] XFS (loop7): Unmounting Filesystem [ 306.900591][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 306.917027][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 306.959944][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 307.123680][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 307.138637][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 307.171524][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 307.383574][ T7143] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 309.063709][ T7169] loop6: detected capacity change from 0 to 4096 [ 309.187746][ T7172] loop2: detected capacity change from 0 to 32768 [ 309.299118][ T7169] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 309.324859][ T7177] loop7: detected capacity change from 0 to 2048 [ 309.381800][ T7169] ntfs3: loop6: Failed to load $Extend. [ 309.446788][ T7172] XFS (loop2): Mounting V5 Filesystem [ 309.506053][ T26] audit: type=1800 audit(1770954839.357:16): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.662" name="file1" dev="loop6" ino=30 res=0 errno=0 [ 309.541761][ T6941] loop7: p2 p3 p7 [ 309.591292][ T7172] XFS (loop2): Ending clean mount [ 309.604850][ T7172] XFS (loop2): Quotacheck needed: Please wait. [ 309.667979][ T7172] XFS (loop2): Quotacheck: Done. [ 309.839311][ T7177] loop7: p2 p3 p7 [ 310.027325][ T5649] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22. [ 310.039159][ T4192] XFS (loop2): Unmounting Filesystem [ 310.286334][ T7199] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 310.517996][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 310.534965][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 311.553359][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 311.716305][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 312.908252][ T7225] loop2: detected capacity change from 0 to 512 [ 313.029643][ T7225] EXT4-fs (loop2): Ignoring removed oldalloc option [ 313.093027][ T7225] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nodiscard,oldalloc,,errors=continue. Quota mode: none. [ 313.598156][ T7242] loop7: detected capacity change from 0 to 32768 [ 313.623501][ T7246] loop8: detected capacity change from 0 to 2048 [ 313.721058][ T4536] loop8: p2 p3 p7 [ 313.897865][ T7246] loop_reread_partitions: partition scan of loop8 () failed (rc=-16) [ 313.922518][ T7242] XFS (loop7): Mounting V5 Filesystem [ 314.120894][ T7242] XFS (loop7): Ending clean mount [ 314.147352][ T7242] XFS (loop7): Quotacheck needed: Please wait. [ 314.345253][ T7242] XFS (loop7): Quotacheck: Done. [ 314.782994][ T5891] XFS (loop7): Unmounting Filesystem [ 315.489323][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 315.508950][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 315.557505][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 315.713920][ T7279] chnl_net:caif_netlink_parms(): no params data found [ 316.151979][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.212415][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.295267][ T7279] device bridge_slave_0 entered promiscuous mode [ 316.431058][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.590339][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.601420][ T7279] device bridge_slave_1 entered promiscuous mode [ 316.612184][ T7321] loop2: detected capacity change from 0 to 2048 [ 317.263115][ T7326] loop6: detected capacity change from 0 to 32768 [ 317.282797][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.294149][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.501733][ T7321] loop2: p2 p3 p7 [ 317.513673][ T4786] Bluetooth: hci5: command 0x0409 tx timeout [ 317.682755][ T5162] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.765046][ T7326] XFS (loop6): Mounting V5 Filesystem [ 317.835163][ T7339] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 318.038006][ T7326] XFS (loop6): Ending clean mount [ 318.050942][ T7326] XFS (loop6): Quotacheck needed: Please wait. [ 318.408821][ T3562] loop2: p2 p3 p7 [ 318.468003][ T7279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.503766][ T7326] XFS (loop6): Quotacheck: Done. [ 318.584545][ T5162] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.670950][ T7279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.101404][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 319.114576][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 319.127912][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 319.153274][ T5162] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.188411][ T5649] XFS (loop6): Unmounting Filesystem [ 319.239924][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 319.242664][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 319.252353][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 319.308073][ T5162] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.355979][ T7279] team0: Port device team_slave_0 added [ 319.394330][ T7279] team0: Port device team_slave_1 added [ 319.612492][ T4786] Bluetooth: hci5: command 0x041b tx timeout [ 320.224783][ T7381] loop7: detected capacity change from 0 to 2048 [ 320.422687][ T7381] loop7: p2 p3 p7 [ 320.450672][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.488177][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.601573][ T7279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.617611][ T7279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.624763][ T7279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.652116][ T7279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.833170][ T7279] device hsr_slave_0 entered promiscuous mode [ 320.936722][ T7279] device hsr_slave_1 entered promiscuous mode [ 321.041310][ T7279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.162216][ T7396] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 321.616281][ T7279] Cannot create hsr debugfs directory [ 321.646769][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 321.679224][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 321.680816][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 322.298514][ T4786] Bluetooth: hci5: command 0x040f tx timeout [ 323.131816][ T7436] loop8: detected capacity change from 0 to 2048 [ 323.317546][ T7440] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 324.502046][ T5427] Bluetooth: hci5: command 0x0419 tx timeout [ 324.509787][ T5427] Bluetooth: hci1: command 0x0406 tx timeout [ 324.554785][ T7436] loop8: p2 p3 p7 [ 324.577306][ T7279] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 324.630407][ T3562] loop8: p2 p3 p7 [ 324.668236][ T7279] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 325.315121][ T7279] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 326.433471][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 326.434874][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 326.470600][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 326.583608][ T4940] udevd[4940]: inotify_add_watch(7, /dev/loop8p7, 10) failed: No such file or directory [ 326.592809][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 326.596037][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 326.619716][ T7279] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 327.153403][ T7279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.178170][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 327.197327][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 327.307937][ T7279] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.476449][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 327.505981][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 327.656946][ T4707] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.664062][ T4707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.825200][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 327.853882][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 327.878305][ T4707] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.885421][ T4707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.941256][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 327.985330][ T7500] input: syz0 as /devices/virtual/input/input9 [ 328.453414][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 328.524749][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 328.681125][ T7502] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 328.925022][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 328.989595][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 329.015097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 329.046870][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 329.059249][ T7516] loop6: detected capacity change from 0 to 2048 [ 329.103973][ T7279] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 329.134623][ T7279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 329.136975][ T4486] loop6: p2 p3 p7 [ 329.165132][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 329.173566][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 329.198940][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 329.219424][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 329.228866][ T7516] loop6: p2 p3 p7 [ 329.229588][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 329.241891][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 329.252235][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.8.729'. [ 329.508593][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 329.521916][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 329.652653][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 330.864161][ T7526] sctp: failed to load transform for md5: -4 [ 330.887487][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 330.900164][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 330.956480][ T7548] netlink: 'syz.6.735': attribute type 3 has an invalid length. [ 330.965842][ T7548] netlink: 'syz.6.735': attribute type 3 has an invalid length. [ 331.002045][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 331.715423][ T6941] udevd[6941]: inotify_add_watch(7, /dev/loop6p7, 10) failed: No such file or directory [ 331.715548][ T4536] udevd[4536]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 331.756174][ T4486] udevd[4486]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 331.967425][ T5162] device hsr_slave_0 left promiscuous mode [ 331.993504][ T5162] device hsr_slave_1 left promiscuous mode [ 332.020815][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.058425][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.086363][ T7558] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 332.103239][ T5162] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.119653][ T5162] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.139256][ T5162] device bridge_slave_1 left promiscuous mode [ 332.149751][ T5162] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.171288][ T5162] device bridge_slave_0 left promiscuous mode [ 332.184167][ T5162] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.225896][ T5162] device veth1_macvtap left promiscuous mode [ 332.245646][ T5162] device veth0_macvtap left promiscuous mode [ 332.261866][ T5162] device veth1_vlan left promiscuous mode [ 332.270750][ T5162] device veth0_vlan left promiscuous mode [ 333.380644][ T5162] team0 (unregistering): Port device team_slave_1 removed [ 333.515606][ T5162] team0 (unregistering): Port device team_slave_0 removed [ 333.575759][ T5162] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.868930][ T5162] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.803044][ T7594] Device name cannot be null; rc = [-22] [ 334.819324][ T7594] loop7: detected capacity change from 0 to 64 [ 335.093327][ T5162] bond0 (unregistering): Released all slaves [ 335.189683][ T7279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.236353][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 335.330781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 335.501858][ T7584] netlink: 24 bytes leftover after parsing attributes in process `syz.6.742'. [ 335.560278][ T7603] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 336.723308][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 336.739917][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 336.779254][ T4195] block nbd6: Receive control failed (result -107) [ 336.816390][ T7626] nbd6: detected capacity change from 0 to 8589934592 [ 336.840767][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 336.850557][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 336.860900][ T7279] device veth0_vlan entered promiscuous mode [ 336.873597][ T7279] device veth1_vlan entered promiscuous mode [ 336.883583][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 336.893900][ T150] block nbd6: Dead connection, failed to find a fallback [ 336.901111][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 336.901686][ T150] block nbd6: shutting down sockets [ 336.913894][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.917189][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 336.925471][ T6086] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 336.940888][ T150] Buffer I/O error on dev nbd6, logical block 0, async page read [ 336.959058][ T263] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.971926][ T263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 336.980526][ T263] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 336.992041][ T263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.001050][ T263] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.012066][ T263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.032248][ T263] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.043446][ T263] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.051442][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.060064][ T7279] device veth0_macvtap entered promiscuous mode [ 337.067253][ T150] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.077115][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.081150][ T7279] device veth1_macvtap entered promiscuous mode [ 337.088476][ T150] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.102391][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.103944][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.113398][ T150] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.132463][ T4486] ldm_validate_partition_table(): Disk read failed. [ 337.146229][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.155156][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.157054][ T150] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.157978][ T150] blk_update_request: I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.174753][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.174963][ T150] Buffer I/O error on dev nbd6, logical block 0, async page read [ 337.194084][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.198149][ T4486] Dev nbd6: unable to read RDB block 0 [ 337.204042][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.222518][ T4486] nbd6: unable to read partition table [ 337.230047][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.230068][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.230083][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.230098][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.230109][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.231953][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.242619][ T6086] usb 9-1: Using ep0 maxpacket: 32 [ 337.270689][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 337.303172][ T4486] ldm_validate_partition_table(): Disk read failed. [ 337.319130][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 337.323179][ T4486] Dev nbd6: unable to read RDB block 0 [ 337.335982][ T4486] nbd6: unable to read partition table [ 337.337764][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 337.349932][ T7636] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 337.411171][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 337.424607][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 337.445127][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 337.492530][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 337.524637][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.556301][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.573017][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.624191][ T7642] overlayfs: missing 'workdir' [ 337.792576][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.833453][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.896319][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.935489][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 337.970493][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.992208][ T7279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.007362][ T7279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.075942][ T7279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.098496][ T7279] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.156434][ T6086] usb 9-1: unable to get BOS descriptor or descriptor too short [ 338.163058][ T7279] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.215033][ T7279] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.224042][ T7279] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.394199][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 338.409597][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 338.580382][ T6086] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 338.588392][ T6086] usb 9-1: can't read configurations, error -71 [ 339.102903][ T7656] Device name cannot be null; rc = [-22] [ 339.118938][ T7656] loop6: detected capacity change from 0 to 64 [ 339.622863][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.643952][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.714872][ T1173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 339.760530][ T1173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.785476][ T1173] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.803049][ T4707] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 340.603595][ T7670] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 340.619312][ T7674] loop8: detected capacity change from 0 to 128 [ 344.420178][ T7707] Device name cannot be null; rc = [-22] [ 344.436523][ T7707] loop2: detected capacity change from 0 to 64 [ 345.596604][ T4233] Bluetooth: hci2: command 0x0406 tx timeout [ 345.636237][ T2858] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 345.696417][ T4195] block nbd9: Receive control failed (result -107) [ 345.711661][ T7722] nbd9: detected capacity change from 0 to 8589934592 [ 345.720093][ T263] block nbd9: Dead connection, failed to find a fallback [ 345.727745][ T263] block nbd9: shutting down sockets [ 345.733817][ T263] print_req_error: 24 callbacks suppressed [ 345.733828][ T263] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.750701][ T263] buffer_io_error: 23 callbacks suppressed [ 345.750711][ T263] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.765069][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.775961][ T150] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.784094][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.794915][ T150] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.803023][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.813856][ T150] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.822503][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.833634][ T150] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.847053][ T263] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.857977][ T263] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.865865][ T263] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.877034][ T263] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.884942][ T263] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.895904][ T263] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.904476][ T4536] ldm_validate_partition_table(): Disk read failed. [ 345.962284][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 345.975391][ T150] Buffer I/O error on dev nbd9, logical block 0, async page read [ 345.995636][ T150] blk_update_request: I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 346.006718][ T150] Buffer I/O error on dev nbd9, logical block 0, async page read [ 346.016782][ T4536] Dev nbd9: unable to read RDB block 0 [ 346.026439][ T2858] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 346.162189][ T2858] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.187115][ T4536] nbd9: unable to read partition table [ 346.266287][ T2858] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 346.276485][ T2858] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 346.289909][ T2858] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 346.299081][ T2858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.496679][ T2858] usb 3-1: invalid MIDI out EP 0 [ 346.773664][ T4536] ldm_validate_partition_table(): Disk read failed. [ 346.806856][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.768'. [ 346.826609][ T4536] Dev nbd9: unable to read RDB block 0 [ 346.969306][ T4536] nbd9: unable to read partition table [ 347.008948][ T7743] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 347.035355][ T2858] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 347.824520][ T2858] usb 3-1: USB disconnect, device number 8 [ 347.850230][ T4294] udevd[4294]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.260635][ T7763] input: syz0 as /devices/virtual/input/input10 [ 351.706384][ T4233] Bluetooth: hci0: command 0x0406 tx timeout [ 351.806532][ T7762] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 352.179563][ T26] audit: type=1804 audit(1770954882.037:17): pid=7780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.780" name="/newroot/93/file1" dev="fuse" ino=1 res=1 errno=0 [ 352.759816][ T5162] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.874761][ T4200] block nbd7: Receive control failed (result -107) [ 352.885038][ T7793] nbd7: detected capacity change from 0 to 8589934592 [ 352.894176][ T5162] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.899046][ T7792] block nbd7: shutting down sockets [ 353.691567][ T5162] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.089883][ T5162] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.245625][ T7824] loop7: detected capacity change from 0 to 8 [ 358.275967][ T7821] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 358.417522][ T7824] MTD: Attempt to mount non-MTD device "/dev/loop7" [ 358.464811][ T4486] udevd[4486]: incorrect cramfs checksum on /dev/loop7 [ 358.696254][ T7835] ================================================================== [ 358.704772][ T7835] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 358.712062][ T7835] Read of size 8 at addr ffff888149b12018 by task syz.8.790/7835 [ 358.719790][ T7835] [ 358.722136][ T7835] CPU: 1 PID: 7835 Comm: syz.8.790 Not tainted syzkaller #0 [ 358.726836][ T4486] udevd[4486]: incorrect cramfs checksum on /dev/loop7 [ 358.729419][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 358.746338][ T7835] Call Trace: [ 358.749628][ T7835] [ 358.752568][ T7835] dump_stack_lvl+0x188/0x250 [ 358.757276][ T7835] ? show_regs_print_info+0x20/0x20 [ 358.762492][ T7835] ? _printk+0xda/0x130 [ 358.766661][ T7835] ? dvb_device_open+0xc6/0x370 [ 358.771537][ T7835] ? load_image+0x400/0x400 [ 358.776062][ T7835] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 358.781548][ T7835] print_address_description+0x60/0x2d0 [ 358.787119][ T7835] ? dvb_device_open+0xc6/0x370 [ 358.791989][ T7835] kasan_report+0xdf/0x130 [ 358.796430][ T7835] ? dvb_device_open+0xc6/0x370 [ 358.801299][ T7835] dvb_device_open+0xc6/0x370 [ 358.805988][ T7835] ? do_raw_spin_unlock+0x11d/0x230 [ 358.811211][ T7835] chrdev_open+0x5c5/0x6a0 [ 358.815740][ T7835] ? cd_forget+0x160/0x160 [ 358.820202][ T7835] ? fsnotify_perm+0x3a7/0x560 [ 358.824977][ T7835] ? cd_forget+0x160/0x160 [ 358.829406][ T7835] do_dentry_open+0x7ff/0xf80 [ 358.834113][ T7835] path_openat+0x26f5/0x2fa0 [ 358.838732][ T7835] ? verify_lock_unused+0x140/0x140 [ 358.843947][ T7835] ? slab_post_alloc_hook+0x4c/0x380 [ 358.849251][ T7835] ? do_filp_open+0x410/0x410 [ 358.853953][ T7835] do_filp_open+0x1e2/0x410 [ 358.858458][ T7835] ? vfs_tmpfile+0x300/0x300 [ 358.863054][ T7835] ? _raw_spin_unlock+0x24/0x40 [ 358.867891][ T7835] ? alloc_fd+0x598/0x630 [ 358.872213][ T7835] do_sys_openat2+0x150/0x4b0 [ 358.876878][ T7835] ? __lock_acquire+0x7d10/0x7d10 [ 358.881899][ T7835] ? do_sys_open+0xe0/0xe0 [ 358.886303][ T7835] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 358.892275][ T7835] ? lock_chain_count+0x20/0x20 [ 358.897124][ T7835] ? vtime_user_exit+0x2c8/0x3e0 [ 358.902070][ T7835] __x64_sys_openat+0x135/0x160 [ 358.906920][ T7835] do_syscall_64+0x4c/0xa0 [ 358.911367][ T7835] ? clear_bhb_loop+0x30/0x80 [ 358.916033][ T7835] ? clear_bhb_loop+0x30/0x80 [ 358.920698][ T7835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 358.926592][ T7835] RIP: 0033:0x7f7a89f3a84e [ 358.931000][ T7835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 358.950598][ T7835] RSP: 002b:00007f7a881d3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 358.959020][ T7835] RAX: ffffffffffffffda RBX: 00007f7a881d46c0 RCX: 00007f7a89f3a84e [ 358.966983][ T7835] RDX: 0000000000000002 RSI: 00007f7a881d3c00 RDI: ffffffffffffff9c [ 358.975045][ T7835] RBP: 00007f7a881d3c00 R08: 0000000000000000 R09: 0000000000000000 [ 358.983008][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 358.990968][ T7835] R13: 00007f7a8a1f4038 R14: 00007f7a8a1f3fa0 R15: 00007ffe36339ea8 [ 358.998940][ T7835] [ 359.001958][ T7835] [ 359.004266][ T7835] Allocated by task 1: [ 359.008396][ T7835] __kasan_kmalloc+0xb5/0xf0 [ 359.012982][ T7835] dvb_register_device+0x311/0x2170 [ 359.018168][ T7835] dvb_register_frontend+0x645/0x920 [ 359.023455][ T7835] vidtv_bridge_probe+0x9a1/0xf70 [ 359.028461][ T7835] platform_probe+0x137/0x1c0 [ 359.033127][ T7835] really_probe+0x284/0xc80 [ 359.037610][ T7835] __driver_probe_device+0x18c/0x330 [ 359.042875][ T7835] driver_probe_device+0x4f/0x420 [ 359.047880][ T7835] __driver_attach+0x46b/0x670 [ 359.052628][ T7835] bus_for_each_dev+0x182/0x1f0 [ 359.057474][ T7835] bus_add_driver+0x30a/0x5a0 [ 359.062159][ T7835] driver_register+0x32d/0x430 [ 359.066920][ T7835] vidtv_bridge_init+0x39/0x70 [ 359.071684][ T7835] do_one_initcall+0x272/0x730 [ 359.076439][ T7835] do_initcall_level+0x137/0x1f0 [ 359.081362][ T7835] do_initcalls+0x4b/0x90 [ 359.085678][ T7835] kernel_init_freeable+0x3e9/0x570 [ 359.090862][ T7835] kernel_init+0x19/0x1b0 [ 359.095182][ T7835] ret_from_fork+0x1f/0x30 [ 359.099593][ T7835] [ 359.101902][ T7835] Freed by task 7762: [ 359.105864][ T7835] kasan_set_track+0x4b/0x70 [ 359.110449][ T7835] kasan_set_free_info+0x1f/0x40 [ 359.115461][ T7835] ____kasan_slab_free+0xd5/0x110 [ 359.120473][ T7835] slab_free_freelist_hook+0xea/0x170 [ 359.125833][ T7835] kfree+0xef/0x2a0 [ 359.129626][ T7835] dvb_device_open+0x2e7/0x370 [ 359.134383][ T7835] chrdev_open+0x5c5/0x6a0 [ 359.138786][ T7835] do_dentry_open+0x7ff/0xf80 [ 359.143453][ T7835] path_openat+0x26f5/0x2fa0 [ 359.148028][ T7835] do_filp_open+0x1e2/0x410 [ 359.152518][ T7835] do_sys_openat2+0x150/0x4b0 [ 359.157177][ T7835] __x64_sys_openat+0x135/0x160 [ 359.162013][ T7835] do_syscall_64+0x4c/0xa0 [ 359.166417][ T7835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 359.172330][ T7835] [ 359.174638][ T7835] The buggy address belongs to the object at ffff888149b12000 [ 359.174638][ T7835] which belongs to the cache kmalloc-256 of size 256 [ 359.188766][ T7835] The buggy address is located 24 bytes inside of [ 359.188766][ T7835] 256-byte region [ffff888149b12000, ffff888149b12100) [ 359.201943][ T7835] The buggy address belongs to the page: [ 359.207584][ T7835] page:ffffea000526c480 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x149b12 [ 359.217809][ T7835] head:ffffea000526c480 order:1 compound_mapcount:0 [ 359.224381][ T7835] flags: 0x57ff00000010200(slab|head|node=1|zone=2|lastcpupid=0x7ff) [ 359.232451][ T7835] raw: 057ff00000010200 0000000000000000 dead000000000122 ffff888016c41b40 [ 359.241024][ T7835] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 359.249589][ T7835] page dumped because: kasan: bad access detected [ 359.255993][ T7835] page_owner tracks the page as allocated [ 359.261691][ T7835] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 10092597072, free_ts 0 [ 359.279646][ T7835] get_page_from_freelist+0x1bbd/0x1ca0 [ 359.285190][ T7835] __alloc_pages+0x1ee/0x480 [ 359.289766][ T7835] alloc_page_interleave+0x24/0x1e0 [ 359.294960][ T7835] new_slab+0xc0/0x4b0 [ 359.299022][ T7835] ___slab_alloc+0x80a/0xdd0 [ 359.303596][ T7835] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 359.308953][ T7835] dvb_register_device+0x311/0x2170 [ 359.314138][ T7835] dvb_register_frontend+0x645/0x920 [ 359.319424][ T7835] vidtv_bridge_probe+0x9a1/0xf70 [ 359.324435][ T7835] platform_probe+0x137/0x1c0 [ 359.329104][ T7835] really_probe+0x284/0xc80 [ 359.333592][ T7835] __driver_probe_device+0x18c/0x330 [ 359.338861][ T7835] driver_probe_device+0x4f/0x420 [ 359.343874][ T7835] __driver_attach+0x46b/0x670 [ 359.348630][ T7835] bus_for_each_dev+0x182/0x1f0 [ 359.353468][ T7835] bus_add_driver+0x30a/0x5a0 [ 359.358133][ T7835] page_owner free stack trace missing [ 359.363486][ T7835] [ 359.365828][ T7835] Memory state around the buggy address: [ 359.371446][ T7835] ffff888149b11f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 359.379506][ T7835] ffff888149b11f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 359.387566][ T7835] >ffff888149b12000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.395617][ T7835] ^ [ 359.400453][ T7835] ffff888149b12080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 359.408502][ T7835] ffff888149b12100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 359.416547][ T7835] ================================================================== [ 359.424590][ T7835] Disabling lock debugging due to kernel taint [ 360.351686][ T7835] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 360.358917][ T7835] CPU: 1 PID: 7835 Comm: syz.8.790 Tainted: G B syzkaller #0 [ 360.367596][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 360.377660][ T7835] Call Trace: [ 360.380947][ T7835] [ 360.383883][ T7835] dump_stack_lvl+0x188/0x250 [ 360.388576][ T7835] ? show_regs_print_info+0x20/0x20 [ 360.393782][ T7835] ? load_image+0x400/0x400 [ 360.398307][ T7835] panic+0x2e5/0x810 [ 360.402227][ T7835] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 360.408400][ T7835] ? bpf_jit_dump+0xd0/0xd0 [ 360.412925][ T7835] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 360.418916][ T7835] ? _raw_spin_unlock+0x40/0x40 [ 360.423784][ T7835] ? dvb_device_open+0xc6/0x370 [ 360.428644][ T7835] check_panic_on_warn+0x80/0xa0 [ 360.433594][ T7835] ? dvb_device_open+0xc6/0x370 [ 360.438451][ T7835] end_report+0x6d/0xf0 [ 360.442616][ T7835] kasan_report+0x102/0x130 [ 360.447127][ T7835] ? dvb_device_open+0xc6/0x370 [ 360.451986][ T7835] dvb_device_open+0xc6/0x370 [ 360.456674][ T7835] ? do_raw_spin_unlock+0x11d/0x230 [ 360.461972][ T7835] chrdev_open+0x5c5/0x6a0 [ 360.466403][ T7835] ? cd_forget+0x160/0x160 [ 360.470845][ T7835] ? fsnotify_perm+0x3a7/0x560 [ 360.475654][ T7835] ? cd_forget+0x160/0x160 [ 360.480093][ T7835] do_dentry_open+0x7ff/0xf80 [ 360.484799][ T7835] path_openat+0x26f5/0x2fa0 [ 360.489418][ T7835] ? verify_lock_unused+0x140/0x140 [ 360.494633][ T7835] ? slab_post_alloc_hook+0x4c/0x380 [ 360.499934][ T7835] ? do_filp_open+0x410/0x410 [ 360.504656][ T7835] do_filp_open+0x1e2/0x410 [ 360.509182][ T7835] ? vfs_tmpfile+0x300/0x300 [ 360.513792][ T7835] ? _raw_spin_unlock+0x24/0x40 [ 360.518655][ T7835] ? alloc_fd+0x598/0x630 [ 360.523019][ T7835] do_sys_openat2+0x150/0x4b0 [ 360.527707][ T7835] ? __lock_acquire+0x7d10/0x7d10 [ 360.532748][ T7835] ? do_sys_open+0xe0/0xe0 [ 360.537167][ T7835] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 360.543160][ T7835] ? lock_chain_count+0x20/0x20 [ 360.548031][ T7835] ? vtime_user_exit+0x2c8/0x3e0 [ 360.552983][ T7835] __x64_sys_openat+0x135/0x160 [ 360.557847][ T7835] do_syscall_64+0x4c/0xa0 [ 360.562274][ T7835] ? clear_bhb_loop+0x30/0x80 [ 360.566962][ T7835] ? clear_bhb_loop+0x30/0x80 [ 360.571646][ T7835] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 360.577548][ T7835] RIP: 0033:0x7f7a89f3a84e [ 360.581979][ T7835] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 360.591571][ T7836] Device name cannot be null; rc = [-22] [ 360.601587][ T7835] RSP: 002b:00007f7a881d3b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 360.601613][ T7835] RAX: ffffffffffffffda RBX: 00007f7a881d46c0 RCX: 00007f7a89f3a84e [ 360.601623][ T7835] RDX: 0000000000000002 RSI: 00007f7a881d3c00 RDI: ffffffffffffff9c [ 360.601634][ T7835] RBP: 00007f7a881d3c00 R08: 0000000000000000 R09: 0000000000000000 [ 360.601644][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 360.612774][ T7836] loop9: detected capacity change from 0 to 64 [ 360.615647][ T7835] R13: 00007f7a8a1f4038 R14: 00007f7a8a1f3fa0 R15: 00007ffe36339ea8 [ 360.661589][ T7835] [ 360.665344][ T7835] Kernel Offset: disabled [ 360.669665][ T7835] Rebooting in 86400 seconds..