last executing test programs: 12.964697834s ago: executing program 0 (id=617): r0 = socket$key(0xf, 0x3, 0x2) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='syzkaller1\x00', 0x10) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f40)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x1d}, 0xa}, 0x1c, &(0x7f0000000280)=[{&(0x7f00000022c0)='t', 0x1}], 0x1}}], 0x1, 0x40c4) shutdown(0xffffffffffffffff, 0x1) write$proc_mixer(r4, 0x0, 0xb8) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230f000000000000000d070000", @ANYRES32=0x0], 0x18}}, 0x0) recvmsg$kcm(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) dup3(0xffffffffffffffff, r4, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={0x0, 0x78}}, 0x8810) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {0x0, 0x1, {0x1b, 0x4e21, 0xffff, @rand_addr=' \x01\x00', 0x6db5}}}, 0x38) 12.554049891s ago: executing program 1 (id=619): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace(0x8, r4) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1b, r7, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x224b5bee36ba75e4}}, 0x14) unshare(0x2c020400) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x9, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r9, &(0x7f0000000500), &(0x7f0000000600)=""/146, 0x7000000}, 0x20) syz_io_uring_setup(0x5080, &(0x7f0000000180)={0x0, 0xdb0d, 0x800, 0xfffffffd, 0x3b5}, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000700)={0x2020}, 0x2020) 8.203178319s ago: executing program 3 (id=630): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0), 0x13f}}, 0x20) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/route\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_mptcp(0x2, 0x1, 0x106) close_range(r1, 0xffffffffffffffff, 0x0) 7.848686775s ago: executing program 0 (id=631): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) listen(0xffffffffffffffff, 0x802) socket$packet(0x11, 0x3, 0x300) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000104010400000000000000000500000005000100010000e90800044000000009"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) socket$inet_tcp(0x2, 0x1, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000080)={{0x3, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r4, 0x40585414, 0x0) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x2000, 0x0) 7.013761278s ago: executing program 2 (id=634): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 6.864003151s ago: executing program 2 (id=636): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x200400c4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}]}, 0x3c}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 6.617752315s ago: executing program 2 (id=638): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) r4 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 6.572893995s ago: executing program 4 (id=639): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000240)={0x1, 0x0, [{0xd, 0x0, 0x3, 0xfffffffd, 0x0, 0xfffffff9, 0x4d47}]}) 6.499139577s ago: executing program 3 (id=640): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r0, 0x0, 0x0) 5.394102595s ago: executing program 2 (id=641): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x482080, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0xb00, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x52, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) pwritev(r4, 0x0, 0x0, 0x20000002, 0x100400) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xfce1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa, 0x1}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="120100004c87c810cd0615011e1a0102030109022407000000000009040000026048fe0009050b000000000000090503"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a3000000000080002"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.252634337s ago: executing program 4 (id=642): r0 = memfd_secret(0x0) mmap(&(0x7f0000abc000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x0) 5.136888179s ago: executing program 1 (id=643): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0x0, 0x1000000000, 0x0, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 4.957802581s ago: executing program 4 (id=644): r0 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.451450849s ago: executing program 4 (id=645): syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x60042, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x5, 0x2, 0x1, "f7b817716daef7e53fa4f998da1907309f97630a33ea3b6bd13c74c37001fd36", 0x35315241}) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/55, 0x37) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c460e02fab7ff7f00000000000002000300fffeffffdf020000000000004000000000000000030300ef00000000000000000800380001000400"], 0x78) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14}}, 0x3c}, 0x1, 0x1200}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', r7, 0x7800, 0x7800, 0x0, 0xfffffffb, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x0, 0x0, 0x9, 0x4, 0x0, @remote, @multicast2}}}}) 4.140892004s ago: executing program 1 (id=646): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40400) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, 0x0) 4.140343624s ago: executing program 0 (id=647): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x8}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(r2, 0x0, 0x200400c4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.985667506s ago: executing program 3 (id=648): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x20, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x8}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x200400c4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0xc}}]}}]}, 0x3c}}, 0x4000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmmsg$inet(r0, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 3.926094198s ago: executing program 1 (id=649): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x0, 0xfffffffc, r2, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x8, 0xfffffffff30bda46, 0x0, 0xfffc, 0x6, 0x5d3186cd, 0x0, 0x0, 0x10, 0x10001}}, 0x50) creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 3.840550389s ago: executing program 0 (id=650): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000021c0)=@newtfilter={0x40, 0x2c, 0xd2b, 0xffffffff, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x1}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x1}}]}}]}, 0x40}}, 0x4000084) 3.717551571s ago: executing program 3 (id=651): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x3ff, 0x367d, 0x9, 0xb5, 0x47c, 0x7, 0x9}, &(0x7f0000000180)={0x0, 0x3938700}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='inet_sk_error_report\x00', r2}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$TIOCSETD(r1, 0x5423, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) mknod$loop(0x0, 0x0, 0x0) r4 = openat$cuse(0xffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3.686321382s ago: executing program 1 (id=652): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) migrate_pages(0x0, 0x7, &(0x7f0000000000)=0x6, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs={0x0, 0x0, 0x4eb4}, 0x5e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000001280)={'filter\x00', 0x7, 0x2, 0x3e8, 0x0, 0x300, 0x0, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @multicast1, @broadcast, 0x1}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00', {0x3}}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x40, 0x10, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00', {}, {}, 0x0, 0x280}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) mknodat(0xffffffffffffffff, &(0x7f0000000200)='./file1\x00', 0x800, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0, r5}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)={0x6, 0x0, r5}) syz_open_procfs(0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) 2.444506391s ago: executing program 3 (id=653): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000005c0)={{0x2, 0xffffffff, 0x5, 0xffff1ed7, 0x0, 0xe}, 0xc2, [0x3, 0x3, 0x80, 0x6, 0x1, 0x8, 0x8, 0xb46f, 0x5, 0x5, 0x0, 0x4, 0x3, 0x7, 0x8, 0x1, 0x1, 0x7fff, 0x1, 0x7fff, 0x708e, 0x2, 0x4b, 0x9, 0x80000001, 0x697d, 0x4, 0x1, 0x4, 0x4, 0x1, 0x9, 0x2, 0x7fffffff, 0x7, 0xc, 0x7, 0x2, 0x0, 0x0, 0x9, 0xa, 0x3, 0x4, 0xff, 0x34bb8b36, 0x3, 0x0, 0x20, 0x1f, 0x2, 0x3, 0xfffffffa, 0x369, 0x4, 0x0, 0x1, 0xec02, 0x3ff, 0xe1bd, 0x1, 0x3, 0x5, 0x8, 0x80000001, 0x1, 0x1, 0x1, 0x327, 0x40, 0x2, 0x9, 0x1c0, 0x870b, 0x8000, 0x4, 0x7, 0x2, 0x101, 0xffff, 0xfc4, 0x3, 0x1, 0x6, 0x3, 0xf, 0x4, 0x8, 0xf, 0x200, 0x6, 0x9, 0xff, 0x2, 0x2, 0x9, 0x141, 0x2, 0xfffffffb, 0x2, 0x5e, 0xfff, 0x6, 0x0, 0x3, 0x48, 0x7, 0x4, 0xfffffff2, 0x2e2f, 0x0, 0x7, 0x3, 0x3, 0x4, 0x8, 0x6, 0x0, 0x80, 0x4, 0x6db8, 0x1000, 0xc97, 0x0, 0x6, 0x1000, 0xffffffff, 0x0, 0x3, 0x401, 0x8001, 0x2, 0x101, 0x100, 0x7, 0x800, 0x2, 0x7, 0x200, 0x3ff, 0x7, 0x10001, 0x2, 0x55, 0x7fff, 0x6, 0x4, 0x2, 0x0, 0x5, 0x4, 0x12, 0x6, 0x2, 0x9, 0x9, 0x1, 0x80000000, 0x6, 0x6, 0x7, 0x401, 0x6, 0x10001, 0x7fff, 0xfffffff8, 0x0, 0x1319, 0x4, 0x9, 0x2, 0x10, 0x5, 0xfffffc01, 0x2, 0x10000, 0xdea7, 0x8, 0x6, 0x0, 0x33d, 0xfffffff1, 0x2, 0x4, 0xd7ed, 0x0, 0x3, 0x8b, 0x8, 0x5, 0xc63b, 0x0, 0xd, 0xff, 0x55ab, 0xd6f, 0x2, 0xa4, 0x10, 0x4, 0x80, 0x4d19a82f, 0x6, 0x80, 0x8, 0xdc, 0x7ff, 0x4, 0x0, 0x8f, 0x5, 0x3ff, 0x9, 0x0, 0x3, 0x36, 0xc, 0x59, 0x9, 0x3, 0x1, 0xce, 0x8, 0x0, 0x10000, 0x3, 0xfffffff2, 0x5, 0xb8, 0x1, 0x2, 0xa15, 0x6, 0xff, 0xfff, 0x6, 0x6, 0x1, 0x401, 0x9, 0x8, 0x4, 0x6, 0x4, 0x2, 0x4, 0xd8e, 0x9, 0x1, 0x3, 0x4, 0x3, 0x80, 0x5, 0x7, 0x4, 0x7, 0x5f4, 0x6, 0x9, 0x0, 0x9, 0xff, 0xc, 0x3, 0xffff, 0xff, 0x5, 0x3, 0x0, 0xa, 0xe10, 0xabf1, 0x4, 0x8, 0x200, 0x0, 0x10, 0x1, 0x1, 0x8, 0x2, 0x5, 0xd, 0xc5, 0x5, 0xfffffc7b, 0x4, 0x4, 0x2, 0x1, 0xfffffff8, 0x2, 0x5, 0x4, 0x9, 0x2, 0x2, 0x6, 0x8, 0x5, 0x2, 0xf, 0x0, 0x8, 0x3ff, 0x1, 0x1992, 0x4, 0x5, 0x3, 0x81, 0x3, 0x8, 0x40, 0x1, 0x800, 0x544, 0x2ad, 0x8, 0x4, 0x32, 0x4, 0xbaa, 0x5, 0xffffffff, 0x426, 0x2e, 0x0, 0x9, 0x1, 0x6, 0x1ded0885, 0x2, 0x2, 0x9, 0x1, 0x7, 0x7, 0x0, 0xfff, 0x4, 0xfffffc01, 0x6d1b, 0x7, 0x3, 0x4, 0x5bc, 0x3, 0x1, 0xe21, 0x9, 0x0, 0xfffffffe, 0x6, 0x7fff, 0x0, 0x1ff, 0x3, 0x267a, 0x10000, 0x5, 0x9, 0x7ff, 0x5, 0x6, 0x80000000, 0xfffffff8, 0x24534688, 0x1, 0xc1, 0x9, 0x9, 0x2, 0xaf, 0x0, 0x7, 0x2, 0x0, 0x10, 0x301d, 0xff, 0x18f, 0x7ff, 0x6, 0x3ff, 0x1, 0x7fff, 0xfffff001, 0xfffffff7, 0x8f9, 0x8, 0x4, 0x6, 0x5, 0x742d, 0x2, 0x1, 0xfffffff9, 0xa00000, 0x0, 0x1ff, 0x7, 0x6, 0x5, 0x1, 0x8, 0x401, 0x8, 0x5, 0x400, 0x1000, 0x9b3c, 0xfffffffd, 0x4, 0x7, 0x1, 0x3, 0xa, 0xc, 0x1, 0x1, 0x0, 0x27, 0x3, 0x0, 0x0, 0x3, 0x7, 0xd, 0x5, 0x1000, 0x5, 0x2, 0x3, 0xffffff80, 0x4, 0x9, 0x1, 0xef, 0x2, 0x2, 0xe4e, 0x1, 0x4, 0x5b, 0x80000000, 0x6, 0x2, 0x3c87, 0xde3, 0xe4d, 0x8, 0x3, 0x9, 0x5, 0x21, 0x1, 0x62, 0x400, 0x10, 0x1, 0xffffffff, 0x2, 0x3, 0x9, 0x7ff, 0x6, 0x6, 0x0, 0x8, 0x4, 0x0, 0x0, 0xfffffff3, 0x1, 0xe4, 0x3, 0x8, 0x1, 0x9, 0x4, 0xff, 0x7f, 0x0, 0x0, 0xb2, 0x7, 0xc, 0xc1, 0x2, 0x284, 0xfffffff5, 0xf, 0x8001, 0x9, 0xa, 0xdb6, 0x84, 0x9956, 0xa7d, 0x7f, 0x100, 0x6, 0xa, 0x40, 0x5, 0x2, 0x0, 0xdb3b, 0x8, 0x5, 0x0, 0x4, 0x7, 0x5, 0x100, 0x0, 0x10, 0x8000, 0xe9d6, 0x2, 0x0, 0x0, 0x2, 0x7f, 0x111, 0xfffffffc, 0x4, 0x1000, 0x4, 0x9, 0x7, 0x4f, 0x419fb4c4, 0xe8, 0x7, 0x73997e99, 0x4, 0x7, 0x9, 0x88, 0x1, 0x9, 0x8, 0x9, 0x7, 0x3, 0x3, 0x200, 0x9, 0x0, 0xd, 0x4, 0x7fff, 0x400, 0x2, 0x1, 0x4, 0x1, 0xa07b, 0x9, 0x40, 0x1ff, 0x6, 0x25cc, 0x4, 0xffff, 0x5, 0x8, 0x4, 0xb, 0x7fffffff, 0xfffffff8, 0x9, 0x7fffffff, 0x3, 0x5, 0x2, 0x1, 0x9da, 0x0, 0xffffffff, 0x100, 0x9, 0x6, 0xfffffff7, 0x7, 0x3, 0x7, 0x0, 0x85, 0x3, 0xb32c, 0x10000, 0xffffffff, 0x7, 0x9, 0x5, 0x8000, 0x800, 0x7ff, 0xb36, 0x80, 0xc, 0x3, 0xfff, 0xae71, 0x2, 0x0, 0x7, 0x81, 0x58c8245c, 0x5d, 0xf, 0x9, 0x1, 0x80, 0xe9, 0x8, 0x4, 0x8, 0x6, 0x5, 0x2, 0xf4000000, 0xe8cb, 0x9, 0x4, 0x5, 0x1, 0x8001, 0x2, 0x7fffffff, 0x2, 0x0, 0x91, 0x1, 0x0, 0x1eb6, 0xb, 0x1, 0x2, 0x2, 0x800, 0x8, 0x6, 0x101, 0x3, 0x4, 0x4000, 0x3, 0x0, 0x1, 0xc8, 0x1, 0x2400000, 0x5, 0x0, 0x7, 0xffffffff, 0x5, 0xa2, 0xfffffff9, 0x6, 0x7, 0x1, 0xffff0843, 0xc0f, 0xfff, 0x7, 0x4, 0x7ff, 0x3b2c, 0x5, 0x2, 0x3, 0x9, 0x6, 0x802, 0x1, 0x8, 0x4, 0x4, 0x9, 0x2, 0x5, 0x1, 0x1, 0xffffffff, 0x0, 0x1, 0xda8, 0xa, 0x4, 0xff, 0x1, 0x9, 0x9, 0x9, 0x5, 0xfffffff9, 0x7, 0x4, 0x8, 0x1, 0x7, 0x1, 0xff, 0x5, 0x5, 0xb, 0x8, 0x81, 0xcd0b, 0x0, 0xbedf, 0x9, 0x9, 0x0, 0x5, 0x5, 0x10, 0xf, 0x4, 0x4, 0x6, 0x6, 0x4, 0xf, 0x7, 0x4, 0x6, 0x0, 0x1, 0xa, 0x2, 0xffffff00, 0xc, 0x9, 0x7, 0xfe, 0x0, 0xfffff2c7, 0x8, 0x1, 0x9, 0x1000, 0xffff, 0x3, 0xb, 0xe34, 0x800, 0x10001, 0x63b0000, 0x9, 0x10000, 0x5, 0xb, 0x0, 0x8, 0x4, 0x100, 0x9, 0x9, 0x807, 0x3a7c, 0x1, 0x6, 0x4, 0xffffff09, 0x8, 0x7, 0x0, 0xc, 0x3, 0x5, 0xfffffff9, 0x70000000, 0x3, 0x7ff, 0x71, 0xcb, 0xffffffff, 0x80000001, 0x9, 0xff, 0xcb12, 0x9, 0xfffffff7, 0x6, 0x733e, 0x3, 0x7, 0xffff, 0x4, 0x83, 0x0, 0x2, 0x63d, 0x10001, 0x6, 0x6, 0x3, 0x3, 0x81, 0x1ff, 0x4, 0x80000000, 0x3, 0x8, 0x8, 0x1, 0x8, 0x3, 0x9, 0x100, 0x3, 0xbf, 0x0, 0x3, 0x8b4, 0x0, 0x0, 0xa4b, 0x400, 0x2, 0x69, 0x2, 0x8, 0xd9, 0x688a, 0x6, 0xffffffa0, 0x3, 0x3, 0x5, 0x3, 0x4, 0xfff, 0x0, 0x10, 0x9, 0x10, 0x9, 0xe508, 0x2, 0x9, 0xf7b, 0xfffff13a, 0x4, 0x6, 0x9, 0x4daf, 0x6, 0x941e, 0x3, 0x0, 0x2d2c4d43, 0x5, 0x5, 0xe, 0x8dd, 0xab, 0x5, 0x1, 0x200, 0x5, 0x5, 0xfffffffb, 0x2, 0x5, 0x8, 0x8, 0x7, 0xf, 0x2, 0x10000, 0x401, 0x9, 0x6, 0x0, 0x3, 0xa306, 0x1, 0x75a, 0x7, 0x93, 0xd, 0x20000000, 0x5, 0x20de, 0x1ff, 0x5, 0x81, 0xd, 0x2113, 0x4, 0x0, 0x1, 0x5, 0x1, 0x7, 0x1317, 0x8000, 0x7, 0xec, 0x5, 0x9, 0x2, 0x9, 0x0, 0x5, 0x8, 0x0, 0x6, 0x4, 0x4, 0x6, 0x2, 0x81, 0xd, 0x6, 0xfffffffb, 0x4, 0xa0000000, 0x7, 0xfffffffd, 0x9, 0x0, 0x5d77b0f2, 0x9, 0x9dae, 0xcab, 0x8, 0x6, 0x2, 0x52e8db50, 0x400, 0x6, 0xfffffffc, 0x0, 0x3ff, 0xffff, 0x0, 0xa59, 0x5, 0x5a, 0x2, 0x54, 0x5, 0x7f, 0x3, 0x3, 0x10001, 0x4, 0x8000, 0x5, 0x8, 0x1, 0x5, 0x1, 0xfa9, 0xfffffb47, 0x1, 0x0, 0x3, 0x5, 0x8000, 0x0, 0x80000001, 0x7ff00, 0x9, 0x20000, 0x80000000, 0x0, 0x81, 0x97, 0xbcf0, 0x4, 0x9, 0x5, 0x400, 0x7, 0x8, 0x60000, 0x54e, 0xe, 0x554b, 0x0, 0xd, 0x6, 0x2, 0x0, 0x10000, 0x6b, 0x100, 0xffff, 0xa27, 0x7, 0xb, 0xb4, 0x7fffffff, 0x7, 0x1000, 0x10000, 0x9, 0xff, 0x9, 0x1, 0x6, 0x9, 0xfffffe01, 0xffff8000, 0x5, 0xfffffffb, 0x2, 0x93, 0x3, 0x7, 0x1, 0x80000001, 0x5]}) 2.353672763s ago: executing program 0 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000000)=0x1) 1.997985448s ago: executing program 2 (id=655): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f0000000500), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x2, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x200, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8c], 0xeeee8000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.85674332s ago: executing program 0 (id=656): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)=ANY=[@ANYBLOB="140000001000040000000000000000001000000a20000000000a05000000000000000000070000030900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021640200000c0a01030000000000000000070000000900020073797a31000000000900010073797a300000000038020380340200800c0201801800028008000340000000010900020073797a3200000000040001"], 0x2e8}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r2 = socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES32, @ANYBLOB="01000000010000001c"], 0x3c}}, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000080)=""/33, &(0x7f0000000180)=0x21) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@deltfilter={0x34, 0x2d, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xa}, {0xc, 0xb}, {0xa, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x81}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) socket$qrtr(0x2a, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$sock_int(r4, 0x1, 0xa, &(0x7f00000002c0)=0x1, 0x4) set_mempolicy(0x3, 0x0, 0x5) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r6 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000a00), 0x0, 0x40c00) readv(r7, &(0x7f0000000280)=[{&(0x7f0000000a40)=""/191, 0xbf}, {0x0}], 0x2) 1.475706667s ago: executing program 2 (id=657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000380)={r5, 0x0, 0x1ff, 0x0, 0x0, [0x0], [0x9, 0x0, 0x0, 0x8], [0x3, 0x20000000, 0x100, 0xd], [0x1000010000000, 0x0, 0x7fffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x13, r7, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 941.684125ms ago: executing program 4 (id=658): r0 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$FUSE(r0, 0x0, 0x0) 352.797285ms ago: executing program 1 (id=659): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00') pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0xbbf9) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) close(r0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r6, &(0x7f00000001c0)={0x11, 0x0, r8, 0x1, 0x2, 0x6, @broadcast}, 0x14) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 297.921075ms ago: executing program 3 (id=660): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=@newqdisc={0x4c, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x200, 0x8, 0x6, 0x8, 0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4c841}, 0x44080) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000008c0)=@newqdisc={0x70, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x3ff, 0x6, 0x4, 0x5}, {0xff, 0x1, 0x401, 0xf64a, 0x1, 0x9}, 0xf97, 0x6, 0xb70}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x592f3ca27be3fa98}, @TCA_TBF_RATE64={0xc, 0x4, 0x2e27b565961173ac}]}}]}, 0x70}}, 0x800) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=661): socket(0x2, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = memfd_create(&(0x7f0000000680)='\x103q}2\x9a\xce\xaf^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99\x18\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1f\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\tRJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd99C\x9fF\x9c[M=\xa0^\xa8\xed)\xe8Z\xe8\x9b&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xc9\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8ZmH\x98\xaeb\xa5B5)\x80m\xff\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6\x05\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x19\x06U)j!\x91\'\x98\xd2kFN\xfa\x80)O\xb9(!n\x9d\x13\x15\xf1\x1a\xb8y\x14l\xd1', 0x7) ioctl$FS_IOC_RESVSP(r7, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts. [ 72.597954][ T4240] cgroup: Unknown subsys name 'net' [ 72.730022][ T4240] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.249660][ T4240] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.281273][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.285653][ T4269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.289876][ T4268] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.297160][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.305369][ T4268] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.310852][ T4269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.318254][ T4268] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.325984][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.332247][ T4268] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.345863][ T4269] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.346097][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.353591][ T4269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.360427][ T4268] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.368434][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.374976][ T4268] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.382850][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.390134][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.395542][ T4269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.402207][ T4268] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.409861][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.417542][ T4268] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.423378][ T4269] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.430884][ T4268] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.437283][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.444585][ T4268] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.459003][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.459681][ T4268] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.466663][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.474250][ T4268] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 76.519821][ T47] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.980980][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 77.053142][ T4251] chnl_net:caif_netlink_parms(): no params data found [ 77.064872][ T4259] chnl_net:caif_netlink_parms(): no params data found [ 77.147790][ T4253] chnl_net:caif_netlink_parms(): no params data found [ 77.230574][ T4262] chnl_net:caif_netlink_parms(): no params data found [ 77.248253][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.255572][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.264206][ T4252] device bridge_slave_0 entered promiscuous mode [ 77.308114][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.315334][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.323482][ T4252] device bridge_slave_1 entered promiscuous mode [ 77.335576][ T4259] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.342688][ T4259] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.351449][ T4259] device bridge_slave_0 entered promiscuous mode [ 77.393138][ T4259] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.400600][ T4259] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.409240][ T4259] device bridge_slave_1 entered promiscuous mode [ 77.417017][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.424395][ T4251] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.432272][ T4251] device bridge_slave_0 entered promiscuous mode [ 77.470034][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.477410][ T4251] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.485487][ T4251] device bridge_slave_1 entered promiscuous mode [ 77.492667][ T4253] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.499946][ T4253] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.508215][ T4253] device bridge_slave_0 entered promiscuous mode [ 77.519028][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.550120][ T4253] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.557590][ T4253] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.566341][ T4253] device bridge_slave_1 entered promiscuous mode [ 77.575350][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.594297][ T4259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.606203][ T4259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.656559][ T4251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.682075][ T4262] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.689491][ T4262] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.697608][ T4262] device bridge_slave_0 entered promiscuous mode [ 77.714245][ T4251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.733014][ T4253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.747768][ T4252] team0: Port device team_slave_0 added [ 77.753977][ T4262] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.761086][ T4262] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.769802][ T4262] device bridge_slave_1 entered promiscuous mode [ 77.779505][ T4259] team0: Port device team_slave_0 added [ 77.787871][ T4259] team0: Port device team_slave_1 added [ 77.802575][ T4253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.822254][ T4252] team0: Port device team_slave_1 added [ 77.846594][ T4251] team0: Port device team_slave_0 added [ 77.886904][ T4251] team0: Port device team_slave_1 added [ 77.893896][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.900925][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.926947][ T4259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.941380][ T4253] team0: Port device team_slave_0 added [ 77.966469][ T4262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.986310][ T4259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.993368][ T4259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.019645][ T4259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.032498][ T4253] team0: Port device team_slave_1 added [ 78.039098][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.046455][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.072438][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.085879][ T4262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.116553][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.123750][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.149872][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.170357][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.177603][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.209535][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.222706][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.230337][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.256496][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.281113][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.288299][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.314505][ T4253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.337494][ T4262] team0: Port device team_slave_0 added [ 78.349616][ T4253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.356777][ T4253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.383118][ T4253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.423153][ T4262] team0: Port device team_slave_1 added [ 78.477541][ T4259] device hsr_slave_0 entered promiscuous mode [ 78.484520][ T4259] device hsr_slave_1 entered promiscuous mode [ 78.495232][ T4252] device hsr_slave_0 entered promiscuous mode [ 78.502688][ T4252] device hsr_slave_1 entered promiscuous mode [ 78.509590][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.518185][ T4252] Cannot create hsr debugfs directory [ 78.527340][ T4251] device hsr_slave_0 entered promiscuous mode [ 78.534282][ T4251] device hsr_slave_1 entered promiscuous mode [ 78.540800][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.549178][ T4251] Cannot create hsr debugfs directory [ 78.555388][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.562376][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.584427][ T4271] Bluetooth: hci4: command 0x0409 tx timeout [ 78.588787][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 78.594532][ T4269] Bluetooth: hci0: command 0x0409 tx timeout [ 78.600700][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 78.607419][ T4268] Bluetooth: hci3: command 0x0409 tx timeout [ 78.619494][ T4262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.659703][ T4262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.667048][ T4262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.693643][ T4262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.741015][ T4253] device hsr_slave_0 entered promiscuous mode [ 78.748340][ T4253] device hsr_slave_1 entered promiscuous mode [ 78.755193][ T4253] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.762808][ T4253] Cannot create hsr debugfs directory [ 78.896506][ T4262] device hsr_slave_0 entered promiscuous mode [ 78.904202][ T4262] device hsr_slave_1 entered promiscuous mode [ 78.910812][ T4262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.918472][ T4262] Cannot create hsr debugfs directory [ 79.159987][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.173115][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.184543][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.194346][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.245103][ T4259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.256058][ T4259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.266083][ T4259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.281927][ T4259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.366274][ T4253] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.380403][ T4253] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.391128][ T4253] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.422313][ T4253] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.459581][ T4262] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.470096][ T4262] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.508893][ T4262] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.519576][ T4262] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.533106][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.604889][ T4252] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.619040][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.630735][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.645234][ T4252] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.662660][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.670677][ T4252] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.681368][ T4252] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.701043][ T4259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.725519][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.735166][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.744868][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.752104][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.763232][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.800424][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.810183][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.820563][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.827770][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.836311][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.845040][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.858421][ T4259] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.867945][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.907239][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.916524][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.927071][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.936215][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.943415][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.951364][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.960505][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.969415][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.976607][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.984476][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.994406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.004383][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.012522][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.039220][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.049007][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.059562][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.084964][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.094786][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.104406][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.113005][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.121858][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.150639][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.160502][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.171575][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.181836][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.191356][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.200324][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.210856][ T4253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.222945][ T4262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.251067][ T4259] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.281250][ T4259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.304501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.312922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.321722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.333117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.343160][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.352298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.365632][ T4262] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.400175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.416186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.431526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.460540][ T4253] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.481921][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.494985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.504532][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.511691][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.520473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.529471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.539430][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.546886][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.555732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.585923][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.604310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.632439][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.639645][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.653549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.662647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.663721][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 80.676904][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 80.683040][ T4269] Bluetooth: hci4: command 0x041b tx timeout [ 80.685307][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.689218][ T4271] Bluetooth: hci2: command 0x041b tx timeout [ 80.703273][ T4268] Bluetooth: hci1: command 0x041b tx timeout [ 80.704716][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.716440][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.734233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.751130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.779688][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.806748][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.821856][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.831217][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.841202][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.850758][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.859919][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.883188][ T4262] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.895151][ T4262] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.925066][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.932102][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.941973][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.952952][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.962130][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.971305][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.980190][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.990264][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.999348][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.008070][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.016394][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.024006][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.032767][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.041654][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.049787][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.058926][ T2914] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.082624][ T4253] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.093274][ T4253] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.122811][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.132585][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.149347][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.161361][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.177778][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.189005][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.202489][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.215932][ T4259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.236568][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.244904][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.254874][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.270618][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.277986][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.290744][ T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.345644][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.369526][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.397134][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.413829][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.433786][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.440944][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.455571][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.474712][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.494148][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.514149][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.575573][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.598154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.614373][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.651871][ T4251] device veth0_vlan entered promiscuous mode [ 81.670708][ T4259] device veth0_vlan entered promiscuous mode [ 81.699087][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.708855][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.738364][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.754400][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.762986][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.794121][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.802721][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.824981][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.841527][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.851842][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.866473][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.878926][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.889002][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.900982][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.911568][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.923064][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.940758][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.965491][ T4251] device veth1_vlan entered promiscuous mode [ 81.979487][ T4253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.011442][ T4259] device veth1_vlan entered promiscuous mode [ 82.049941][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.069862][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.104454][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.112072][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.149919][ T4262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.252897][ T4259] device veth0_macvtap entered promiscuous mode [ 82.298181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.318100][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.364187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.373024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.417697][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.449951][ T4259] device veth1_macvtap entered promiscuous mode [ 82.475245][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.494442][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.529715][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.558109][ T4251] device veth0_macvtap entered promiscuous mode [ 82.568577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.589689][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.630534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.652256][ T4262] device veth0_vlan entered promiscuous mode [ 82.662555][ T4251] device veth1_macvtap entered promiscuous mode [ 82.677407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.704212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.724331][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.743969][ T47] Bluetooth: hci3: command 0x040f tx timeout [ 82.743989][ T4269] Bluetooth: hci2: command 0x040f tx timeout [ 82.744023][ T4269] Bluetooth: hci0: command 0x040f tx timeout [ 82.750017][ T47] Bluetooth: hci4: command 0x040f tx timeout [ 82.756174][ T4271] Bluetooth: hci1: command 0x040f tx timeout [ 82.802488][ T4262] device veth1_vlan entered promiscuous mode [ 82.821426][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.838045][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.855824][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.870803][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.909855][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.920685][ T4259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.931618][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.944920][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.966831][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.975154][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.986042][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.993933][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.001452][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.010897][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.019957][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.029186][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.049687][ T4259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.058826][ T4259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.068796][ T4259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.077977][ T4259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.093206][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.105530][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.117522][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.139586][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.149064][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.160017][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.169253][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.178544][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.187857][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.201212][ T4262] device veth0_macvtap entered promiscuous mode [ 83.212763][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.221655][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.231689][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.240712][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.267710][ T4262] device veth1_macvtap entered promiscuous mode [ 83.306008][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.315753][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.327396][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.336693][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.345823][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.355151][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.363162][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.382555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.391708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.405206][ T4253] device veth0_vlan entered promiscuous mode [ 83.431467][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.444509][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.454806][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.467547][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.478870][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.490501][ T4252] device veth0_vlan entered promiscuous mode [ 83.497511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.507973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.516553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.526024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.573798][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.586216][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.596676][ T4262] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.607533][ T4262] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.619217][ T4262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.629890][ T4253] device veth1_vlan entered promiscuous mode [ 83.652919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.664804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.676004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.688803][ T4262] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.698344][ T4262] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.707942][ T4262] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.717015][ T4262] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.748170][ T4252] device veth1_vlan entered promiscuous mode [ 83.804695][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.833556][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.857908][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.872946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.882145][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.891073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.900752][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.918795][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.934014][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.942075][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.959634][ T4253] device veth0_macvtap entered promiscuous mode [ 83.968144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.981233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.991383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.000625][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.008832][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.033288][ T4252] device veth0_macvtap entered promiscuous mode [ 84.058284][ T4253] device veth1_macvtap entered promiscuous mode [ 84.068676][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.078575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.089396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.099310][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.111808][ T4252] device veth1_macvtap entered promiscuous mode [ 84.130527][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.139824][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.149758][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.172116][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.180137][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.199598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.230630][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.259544][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.270370][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.281265][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.292996][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.304284][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.329635][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.340017][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.370082][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.380047][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.392231][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.403144][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.413741][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.433362][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.444424][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.457310][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.464994][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.479336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.491956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.502517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.513097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.537505][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.538176][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.556351][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.567409][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.577714][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.589956][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.610422][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.621430][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.639842][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.667577][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.691785][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.721986][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.739685][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.752638][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.770233][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.782354][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.823954][ T47] Bluetooth: hci4: command 0x0419 tx timeout [ 84.823983][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 84.830038][ T47] Bluetooth: hci1: command 0x0419 tx timeout [ 84.830072][ T47] Bluetooth: hci3: command 0x0419 tx timeout [ 84.836231][ T4266] Bluetooth: hci2: command 0x0419 tx timeout [ 84.849256][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.905405][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 84.957856][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.993724][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.026501][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.107569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.154126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.224436][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.314165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.331335][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.450105][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.518932][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.527659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 85.596416][ T4253] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.659220][ T4253] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.669547][ T4356] loop0: detected capacity change from 0 to 4096 [ 85.691543][ T4253] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.704021][ T4253] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.752342][ T4252] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.775086][ T4359] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.788779][ T4358] loop3: detected capacity change from 0 to 4096 [ 85.794627][ T4252] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.811125][ T26] audit: type=1800 audit(1750636594.453:2): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 85.821376][ T4252] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.852064][ T4252] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.912865][ T26] audit: type=1800 audit(1750636594.483:3): pid=4356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 85.923817][ T4361] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.045052][ T4356] syz.0.10 (4356) used greatest stack depth: 19344 bytes left [ 86.053674][ T26] audit: type=1800 audit(1750636594.633:4): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 86.220219][ T26] audit: type=1800 audit(1750636594.633:5): pid=4358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 86.270553][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.293425][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.302566][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.373730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.382128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.390479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.398822][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 86.556132][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.614219][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.662587][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.672059][ T7] cfg80211: failed to load regulatory.db [ 86.809027][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.885928][ T4374] block device autoloading is deprecated and will be removed. [ 86.897024][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.972999][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.042059][ T4310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.299678][ T4310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.317406][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.029571][ T4392] loop1: detected capacity change from 0 to 4096 [ 89.202724][ T4401] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 89.246106][ T26] audit: type=1800 audit(1750636597.893:6): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 89.339414][ T26] audit: type=1800 audit(1750636597.893:7): pid=4392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 89.417917][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 89.909305][ T4422] Zero length message leads to an empty skb [ 89.975822][ T4422] loop1: detected capacity change from 0 to 512 [ 89.990629][ T4422] EXT4-fs: Ignoring removed nobh option [ 90.122858][ T4422] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 90.134993][ T4422] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.27: invalid indirect mapped block 2683928664 (level 1) [ 90.167120][ T4422] EXT4-fs (loop1): 1 truncate cleaned up [ 90.173381][ T4422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 90.777355][ T4262] EXT4-fs (loop1): unmounting filesystem. [ 92.215390][ T4447] loop1: detected capacity change from 0 to 4096 [ 92.912830][ T4458] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.932801][ T26] audit: type=1800 audit(1750636601.573:8): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 93.079160][ T4459] Set syz1 is full, maxelem 1038 reached [ 93.120081][ T4460] netlink: 'syz.4.38': attribute type 4 has an invalid length. [ 93.142082][ T26] audit: type=1800 audit(1750636601.603:9): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.36" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 96.135714][ T4490] loop1: detected capacity change from 0 to 4096 [ 96.272779][ T4495] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 96.291880][ T4494] Set syz1 is full, maxelem 1038 reached [ 96.299541][ T26] audit: type=1800 audit(1750636604.953:10): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 96.368592][ T26] audit: type=1800 audit(1750636604.953:11): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.51" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 97.042812][ T4504] loop0: detected capacity change from 0 to 512 [ 97.052347][ T4504] EXT4-fs: Ignoring removed nobh option [ 97.163952][ T4504] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 97.174861][ T4504] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.57: invalid indirect mapped block 2683928664 (level 1) [ 97.191943][ T4504] EXT4-fs (loop0): 1 truncate cleaned up [ 97.198093][ T4504] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 97.850133][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 98.064809][ T4517] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.925507][ T4531] loop3: detected capacity change from 0 to 4096 [ 100.096638][ T4539] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.126790][ T26] audit: type=1800 audit(1750636608.773:12): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 100.191867][ T26] audit: type=1800 audit(1750636608.793:13): pid=4531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.65" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 101.244487][ T4557] netlink: 'syz.0.73': attribute type 4 has an invalid length. [ 103.703211][ T4582] loop2: detected capacity change from 0 to 4096 [ 103.803672][ T4561] loop3: detected capacity change from 0 to 40427 [ 103.838522][ T4587] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 103.871121][ T26] audit: type=1800 audit(1750636612.513:14): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 103.925005][ T4561] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 103.951830][ T4561] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 103.961649][ T26] audit: type=1800 audit(1750636612.513:15): pid=4582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.84" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 104.062681][ T4561] F2FS-fs (loop3): invalid crc value [ 104.128602][ T4561] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 105.103023][ T4561] F2FS-fs (loop3): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 105.227832][ T4561] F2FS-fs (loop3): Failed to read root inode [ 105.683990][ T4607] loop0: detected capacity change from 0 to 32768 [ 105.722724][ T4607] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 scanned by syz.0.93 (4607) [ 105.799502][ T4607] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 105.810364][ T4607] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 105.819289][ T4607] BTRFS info (device loop0): using free space tree [ 105.861442][ T4611] Set syz1 is full, maxelem 1038 reached [ 106.360560][ T4607] BTRFS info (device loop0): enabling ssd optimizations [ 106.679725][ T4251] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 106.868111][ T4643] loop2: detected capacity change from 0 to 4096 [ 107.037961][ T4654] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.058307][ T26] audit: type=1800 audit(1750636615.703:16): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.100" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 107.150485][ T26] audit: type=1800 audit(1750636615.733:17): pid=4643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.100" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 108.509625][ T4667] netlink: 'syz.0.101': attribute type 4 has an invalid length. [ 108.897912][ T4652] loop3: detected capacity change from 0 to 40427 [ 108.968206][ T4652] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 109.003445][ T4652] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.079549][ T4652] F2FS-fs (loop3): invalid crc value [ 109.190877][ T4652] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 109.483880][ T4652] F2FS-fs (loop3): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 109.557185][ T4652] F2FS-fs (loop3): Failed to read root inode [ 109.564833][ T4680] loop1: detected capacity change from 0 to 4096 [ 109.665465][ T4683] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 109.680903][ T26] audit: type=1800 audit(1750636618.323:18): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.111" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 109.758920][ T26] audit: type=1800 audit(1750636618.353:19): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.111" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 109.814536][ T4682] loop2: detected capacity change from 0 to 32768 [ 109.843921][ T4682] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.112 (4682) [ 109.869019][ T4682] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 109.879286][ T4682] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 109.888091][ T4682] BTRFS info (device loop2): using free space tree [ 110.003432][ T4682] BTRFS info (device loop2): enabling ssd optimizations [ 110.656202][ T4707] loop4: detected capacity change from 0 to 4096 [ 110.685080][ T4252] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 110.749338][ T4713] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 110.784405][ T26] audit: type=1800 audit(1750636619.433:20): pid=4707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.116" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 111.068476][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 112.402975][ T4716] ptrace attach of "./syz-executor exec"[4251] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ÿÿÿÿÿÿÿÿ @  ª ÿÿÿÿ À    üÿÿÿ ªªª ª»»»»»» H 4 x¬»¬)Õ¡à»\x07 N$ |IšKp‘¦D“9„[9¼cÌÈ`Ñ\x0cÁ» €!.°»Ãò3ŸæÉ„Ê}-(Ï C×£RLí¹lÖ§”%üã²M¶üÖÚœœ y¨º+º ë‹ç‹-I‡ ·2}\x0dõRÙºVÓX2ˆM€¥—@QÑ\x0b¾Ýæp™5ˆ¥‰ÖÅ n|±€„Ü·ÿ?j†Šk3ûrêí/HÖ¶E¼ôòVñéµH†ó÷ë”ÆŠ¿°{rAfÇ g:eh¾ug•x\x1br\x09îq[¿÷öüëDCBADCBA\x5c x [ 112.634297][ T4737] Set syz1 is full, maxelem 1038 reached [ 113.460316][ T4751] loop2: detected capacity change from 0 to 4096 [ 113.630395][ T4755] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.653903][ T26] audit: type=1800 audit(1750636622.303:21): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.127" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.763539][ T26] audit: type=1800 audit(1750636622.333:22): pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.127" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 113.839146][ T4756] loop3: detected capacity change from 0 to 4096 [ 113.980121][ T26] audit: type=1800 audit(1750636622.623:23): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.129" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 113.990273][ T4762] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 114.093371][ T26] audit: type=1800 audit(1750636622.623:24): pid=4756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.129" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 114.226582][ T4756] syz.3.129 (4756) used greatest stack depth: 19328 bytes left [ 114.770793][ T4772] tmpfs: Bad value for 'mpol' [ 116.237264][ T4795] loop3: detected capacity change from 0 to 4096 [ 116.344540][ T4802] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.372311][ T26] audit: type=1800 audit(1750636625.013:25): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 116.469672][ T26] audit: type=1800 audit(1750636625.053:26): pid=4795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 116.973549][ T4717] libceph: connect (1)[c::]:6789 error -101 [ 116.973974][ T4717] libceph: mon0 (1)[c::]:6789 connect error [ 116.976970][ T4717] libceph: connect (1)[c::]:6789 error -101 [ 116.977047][ T4717] libceph: mon0 (1)[c::]:6789 connect error [ 116.977722][ T4807] ceph: No mds server is up or the cluster is laggy [ 117.237221][ T4717] libceph: connect (1)[c::]:6789 error -101 [ 117.237341][ T4717] libceph: mon0 (1)[c::]:6789 connect error [ 117.695077][ T4831] Set syz1 is full, maxelem 1038 reached [ 117.826732][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 117.905222][ T4838] tmpfs: Bad value for 'mpol' [ 118.460512][ T4845] loop3: detected capacity change from 0 to 4096 [ 118.502344][ T4846] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.520848][ T26] audit: type=1800 audit(1750636627.163:27): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.156" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 118.542152][ T26] audit: type=1800 audit(1750636627.183:28): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.156" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 119.029687][ T4856] device wg2 entered promiscuous mode [ 119.050114][ T4856] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 119.354569][ T4859] loop2: detected capacity change from 0 to 32768 [ 119.390135][ T4859] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.162 (4859) [ 119.409171][ T4859] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 119.421073][ T4859] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 119.429883][ T4859] BTRFS info (device loop2): using free space tree [ 119.898821][ T4859] BTRFS info (device loop2): enabling ssd optimizations [ 120.145668][ T4252] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 120.394056][ T26] audit: type=1326 audit(1750636629.033:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4893 comm="syz.1.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6478e929 code=0x0 [ 120.472610][ T4898] tmpfs: Bad value for 'mpol' [ 120.649329][ T4902] fuse: Unknown parameter 'group_i00000000000000000000' [ 120.751221][ T4848] loop4: detected capacity change from 0 to 40427 [ 120.803170][ T4848] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 120.818469][ T4848] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 120.993545][ T4848] F2FS-fs (loop4): invalid crc value [ 121.048768][ T4848] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 121.603758][ T4848] F2FS-fs (loop4): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 121.672615][ T4925] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 121.731696][ T4848] F2FS-fs (loop4): Failed to read root inode [ 122.509629][ T4933] fuse: Unknown parameter 'group_i00000000000000000000' [ 122.887966][ T4944] tmpfs: Bad value for 'mpol' [ 123.059029][ T26] audit: type=1326 audit(1750636631.703:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4947 comm="syz.1.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6478e929 code=0x0 [ 123.162813][ T4951] PKCS7: Unknown OID: [5] (bad) [ 123.169057][ T4951] PKCS7: Only support pkcs7_signedData type [ 123.231040][ T4955] Set syz1 is full, maxelem 1038 reached [ 123.663482][ T4301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 123.823536][ T4301] usb 1-1: device descriptor read/64, error -71 [ 124.035502][ T4959] loop4: detected capacity change from 0 to 40427 [ 124.048609][ T4968] fuse: Unknown parameter 'group_i00000000000000000000' [ 124.074079][ T4959] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 124.086248][ T4959] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 124.113753][ T4301] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.128130][ T4959] F2FS-fs (loop4): invalid crc value [ 124.138166][ T4969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 124.181858][ T4959] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 124.283400][ T4301] usb 1-1: device descriptor read/64, error -71 [ 124.398053][ T4959] F2FS-fs (loop4): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 124.411482][ T4301] usb usb1-port1: attempt power cycle [ 124.433278][ T4959] F2FS-fs (loop4): Failed to read root inode [ 124.833697][ T4301] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.875817][ T4301] usb 1-1: device descriptor read/8, error -71 [ 125.164465][ T4301] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 125.204500][ T4301] usb 1-1: device descriptor read/8, error -71 [ 125.381201][ T4301] usb usb1-port1: unable to enumerate USB device [ 125.867142][ T4995] tmpfs: Bad value for 'mpol' [ 126.384066][ T26] audit: type=1326 audit(1750636635.033:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4997 comm="syz.4.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x0 [ 128.612794][ T5021] vivid-002: disconnect [ 128.648075][ T5021] vivid-002: reconnect [ 128.711023][ T5021] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.237792][ T5028] tmpfs: Bad value for 'mpol' [ 129.547935][ T5019] loop2: detected capacity change from 0 to 40427 [ 129.601911][ T5019] F2FS-fs (loop2): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 129.640660][ T5019] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 129.668603][ T4717] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.697408][ T5019] F2FS-fs (loop2): invalid crc value [ 129.794956][ T5019] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 129.834167][ T26] audit: type=1326 audit(1750636638.483:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5032 comm="syz.1.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6478e929 code=0x0 [ 129.874963][ T4717] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 129.907036][ T4717] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.971830][ T4717] usb 1-1: config 0 descriptor?? [ 130.059359][ T5019] F2FS-fs (loop2): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 130.192839][ T5019] F2FS-fs (loop2): Failed to read root inode [ 130.200819][ T4717] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 130.301141][ T5039] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.003454][ T4301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 132.749653][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.756746][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.772543][ T4301] usb 2-1: Using ep0 maxpacket: 8 [ 132.783663][ T4301] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 132.791916][ T4301] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.811091][ T4301] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.821147][ T4301] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.831730][ T4301] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.879488][ T4301] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.927671][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.006388][ T4717] usb 1-1: USB disconnect, device number 6 [ 133.196399][ T4301] usb 2-1: GET_CAPABILITIES returned 0 [ 133.201960][ T4301] usbtmc 2-1:16.0: can't read capabilities [ 133.262079][ T7] libceph: connect (1)[c::]:6789 error -101 [ 133.272827][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 133.330668][ T5074] ceph: No mds server is up or the cluster is laggy [ 133.524888][ T5057] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 133.532063][ T4717] usb 2-1: USB disconnect, device number 2 [ 133.555268][ T5085] usbtmc 2-1:16.0: usb_control_msg returned -19 [ 135.194588][ T26] audit: type=1326 audit(1750636643.843:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5078 comm="syz.3.236" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x0 [ 136.032632][ T5102] netlink: 52 bytes leftover after parsing attributes in process `syz.2.241'. [ 136.817358][ T5120] loop0: detected capacity change from 0 to 512 [ 136.831147][ T5120] EXT4-fs: Ignoring removed nobh option [ 138.217581][ T5120] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 138.227302][ T5120] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.249: invalid indirect mapped block 2683928664 (level 1) [ 138.249754][ T5120] EXT4-fs (loop0): 1 truncate cleaned up [ 138.256272][ T5120] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 138.740074][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 140.137357][ T26] audit: type=1326 audit(1750636648.783:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 140.247667][ T26] audit: type=1326 audit(1750636648.893:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 140.308650][ T5135] loop0: detected capacity change from 0 to 4096 [ 140.318960][ T26] audit: type=1326 audit(1750636648.893:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 140.470702][ T26] audit: type=1326 audit(1750636648.893:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 140.665083][ T5144] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 141.512568][ T26] audit: type=1326 audit(1750636648.913:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 141.697439][ T26] audit: type=1326 audit(1750636648.913:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 141.903519][ T26] audit: type=1326 audit(1750636648.913:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 142.044836][ T26] audit: type=1326 audit(1750636648.913:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 142.203376][ T26] audit: type=1326 audit(1750636648.913:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x7ffc0000 [ 142.314080][ T26] audit: type=1326 audit(1750636648.923:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5133 comm="syz.4.253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7eff0ed8e929 code=0x0 [ 142.443632][ T26] audit: type=1800 audit(1750636649.323:44): pid=5135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.251" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 143.297974][ T5148] loop4: detected capacity change from 0 to 40427 [ 143.326379][ T5148] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 143.376987][ T5148] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 143.446204][ T5148] F2FS-fs (loop4): invalid crc value [ 143.496902][ T5148] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 144.169026][ T5148] F2FS-fs (loop4): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 144.234490][ T5148] F2FS-fs (loop4): Failed to read root inode [ 144.389143][ T5182] netlink: 'syz.1.262': attribute type 4 has an invalid length. [ 145.183536][ T5202] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 145.210670][ T5202] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 147.852425][ T5212] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 147.968631][ T5215] loop4: detected capacity change from 0 to 512 [ 147.977936][ T5215] EXT4-fs: Ignoring removed nobh option [ 149.570673][ T5215] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 149.580817][ T5215] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.278: invalid indirect mapped block 2683928664 (level 1) [ 149.599842][ T5215] EXT4-fs (loop4): 1 truncate cleaned up [ 149.605876][ T5215] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 149.842124][ T4253] EXT4-fs (loop4): unmounting filesystem. [ 149.886379][ T5219] bridge1: port 1(veth0_to_bond) entered blocking state [ 149.985208][ T5219] bridge1: port 1(veth0_to_bond) entered disabled state [ 150.044080][ T5219] device veth0_to_bond entered promiscuous mode [ 151.229754][ T5237] ptrace attach of "./syz-executor exec"[4252] was attempted by "./syz-executor exec"[5237] [ 151.437024][ T5241] xt_cgroup: invalid path, errno=-2 [ 151.712853][ T5228] loop0: detected capacity change from 0 to 40427 [ 151.775735][ T5228] F2FS-fs (loop0): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 151.863134][ T5228] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 151.901896][ T5228] F2FS-fs (loop0): invalid crc value [ 151.954222][ T5228] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 152.021061][ T5256] Set syz1 is full, maxelem 1038 reached [ 152.163820][ T5228] F2FS-fs (loop0): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 152.199926][ T5228] F2FS-fs (loop0): Failed to read root inode [ 152.243517][ T4717] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.433827][ T4717] usb 4-1: Using ep0 maxpacket: 32 [ 152.444043][ T4717] usb 4-1: config 0 has an invalid interface number: 136 but max is 0 [ 152.523471][ T4717] usb 4-1: config 0 has no interface number 0 [ 152.529763][ T4717] usb 4-1: config 0 interface 136 altsetting 0 has an invalid endpoint with address 0xAD, skipping [ 152.560409][ T4717] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 152.643192][ T4717] usb 4-1: config 0 interface 136 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.673725][ T4717] usb 4-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 152.703497][ T4717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.738171][ T4717] usb 4-1: config 0 descriptor?? [ 153.236991][ T4717] snd-usb-audio: probe of 4-1:0.136 failed with error -2 [ 153.389567][ T5272] udevd[5272]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 154.292406][ T5288] loop4: detected capacity change from 0 to 32768 [ 154.300622][ T5288] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.303 (5288) [ 154.357601][ T5288] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 154.367841][ T5288] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 154.377388][ T5288] BTRFS info (device loop4): using free space tree [ 154.414523][ T5284] netlink: 'syz.0.296': attribute type 4 has an invalid length. [ 154.697784][ T5288] BTRFS info (device loop4): enabling ssd optimizations [ 154.881090][ T4253] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 155.704846][ T4653] usb 4-1: USB disconnect, device number 2 [ 155.844430][ T5322] netlink: 'syz.4.308': attribute type 1 has an invalid length. [ 157.744684][ T5351] loop3: detected capacity change from 0 to 32768 [ 157.775404][ T5351] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 scanned by syz.3.316 (5351) [ 157.789715][ T5351] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 157.799964][ T5351] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 157.808819][ T5351] BTRFS info (device loop3): using free space tree [ 158.180858][ T5351] BTRFS info (device loop3): enabling ssd optimizations [ 158.329793][ T4259] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 159.957106][ T5389] loop2: detected capacity change from 0 to 512 [ 159.967226][ T5389] EXT4-fs: Ignoring removed nobh option [ 161.549843][ T5389] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 161.561473][ T5389] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.323: invalid indirect mapped block 2683928664 (level 1) [ 161.584374][ T5389] EXT4-fs (loop2): 1 truncate cleaned up [ 161.590160][ T5389] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 162.581952][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 163.075874][ T5410] netlink: 'syz.0.324': attribute type 4 has an invalid length. [ 163.462023][ T5404] loop4: detected capacity change from 0 to 40427 [ 163.649435][ T5404] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(3072) [ 163.683477][ T5404] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 163.730545][ T5404] F2FS-fs (loop4): invalid crc value [ 163.911007][ T5404] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10240907051000858085) [ 164.219383][ T5404] F2FS-fs (loop4): sanity_check_inode: inode (ino=3, mode=16877) should not have inline_data, run fsck to fix [ 164.293033][ T5404] F2FS-fs (loop4): Failed to read root inode [ 166.603553][ T4717] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 166.815297][ T4717] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.850593][ T4717] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.879336][ T4717] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.906177][ T4717] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.043474][ T4301] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.163001][ T4717] usb 5-1: usb_control_msg returned -32 [ 167.169111][ T4717] usbtmc 5-1:16.0: can't read capabilities [ 167.346577][ T4301] usb 2-1: Using ep0 maxpacket: 16 [ 167.378481][ T4301] usb 2-1: config 0 has no interfaces? [ 167.391816][ T4301] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 167.508435][ T4301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.511865][ T5465] netlink: 'syz.3.347': attribute type 4 has an invalid length. [ 167.637980][ T4301] usb 2-1: config 0 descriptor?? [ 169.420428][ T4651] usb 5-1: USB disconnect, device number 2 [ 169.687124][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 169.703689][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 169.719333][ T5482] ceph: No mds server is up or the cluster is laggy [ 170.083454][ T4653] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 170.299691][ T4653] usb 4-1: config 7 interface 0 has no altsetting 0 [ 170.319862][ T4653] usb 4-1: string descriptor 0 read error: -22 [ 170.349697][ T4653] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 170.389609][ T4653] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.453881][ T5499] binder: 5498:5499 ioctl 4010640d 200000000280 returned -22 [ 170.456504][ T4653] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 170.530186][ T4653] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.590820][ T4653] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 170.619845][ T4653] usb 4-1: media controller created [ 170.702378][ T4653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.770537][ T4299] usb 2-1: USB disconnect, device number 3 [ 172.949074][ T4301] usb 4-1: USB disconnect, device number 3 [ 174.652953][ T5551] fuse: Invalid rootmode [ 175.601452][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 175.601468][ T26] audit: type=1326 audit(1750636684.243:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 175.813378][ T26] audit: type=1326 audit(1750636684.253:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 175.953541][ T26] audit: type=1326 audit(1750636684.253:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.041020][ T26] audit: type=1326 audit(1750636684.253:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.123559][ T26] audit: type=1326 audit(1750636684.253:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.203446][ T26] audit: type=1326 audit(1750636684.253:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.340803][ T26] audit: type=1326 audit(1750636684.253:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.445253][ T26] audit: type=1326 audit(1750636684.253:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.569240][ T26] audit: type=1326 audit(1750636684.253:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 176.690652][ T26] audit: type=1326 audit(1750636684.253:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5566 comm="syz.3.380" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 178.023503][ T4653] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 178.224995][ T4653] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 178.254583][ T4653] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 178.343476][ T4653] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 178.352481][ T4653] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 178.379505][ T4653] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 178.463157][ T4653] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 178.521150][ T4653] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 178.564728][ T4653] usb 3-1: Product: syz [ 178.589100][ T4653] usb 3-1: Manufacturer: syz [ 178.626823][ T4653] cdc_wdm 3-1:1.0: skipping garbage [ 178.643871][ T4653] cdc_wdm 3-1:1.0: skipping garbage [ 178.690055][ T4653] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 178.727693][ T4653] cdc_wdm 3-1:1.0: Unknown control protocol [ 178.821579][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 178.828373][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 178.836489][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 178.843147][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 178.851384][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 178.858055][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 178.864380][ T4301] usb 3-1: USB disconnect, device number 2 [ 179.995046][ T5616] device ip6gre1 entered promiscuous mode [ 181.596494][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 182.473522][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 182.683224][ T7] usb 2-1: config 0 has no interfaces? [ 182.715927][ T7] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 182.745210][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.774854][ T7] usb 2-1: Product: syz [ 182.787811][ T7] usb 2-1: Manufacturer: syz [ 182.819543][ T7] usb 2-1: SerialNumber: syz [ 182.896629][ T7] usb 2-1: config 0 descriptor?? [ 184.983958][ T5694] loop2: detected capacity change from 0 to 512 [ 184.992997][ T5694] EXT4-fs: Ignoring removed nobh option [ 186.575774][ T5694] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 186.585595][ T5694] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.414: invalid indirect mapped block 2683928664 (level 1) [ 186.607749][ T5694] EXT4-fs (loop2): 1 truncate cleaned up [ 186.613756][ T5694] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 187.179247][ T4252] EXT4-fs (loop2): unmounting filesystem. [ 187.496847][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 187.683532][ T4299] usb 5-1: Using ep0 maxpacket: 32 [ 188.476028][ T4299] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 188.605465][ T4299] usb 5-1: can't read configurations, error -71 [ 188.869077][ T7] usb 2-1: USB disconnect, device number 4 [ 189.519769][ T5728] input: syz0 as /devices/virtual/input/input5 [ 190.195566][ T5749] netlink: 'syz.3.431': attribute type 7 has an invalid length. [ 190.229855][ T5749] netlink: 32 bytes leftover after parsing attributes in process `syz.3.431'. [ 190.485718][ T5752] fuse: Bad value for 'fd' [ 190.749998][ T5760] loop6: detected capacity change from 0 to 524287999 [ 191.643455][ T4651] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 191.834438][ T4651] usb 5-1: Using ep0 maxpacket: 8 [ 191.841943][ T4651] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 191.879396][ T4651] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.926644][ T4651] usb 5-1: config 0 descriptor?? [ 192.405290][ T4651] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 192.439260][ T4651] asix: probe of 5-1:0.0 failed with error -32 [ 192.756105][ T5767] sctp: failed to load transform for md5: -4 [ 192.758648][ T5771] sctp: failed to load transform for md5: -2 [ 193.056947][ T7] usb 5-1: USB disconnect, device number 5 [ 194.187881][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.195176][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.681530][ T5834] netlink: 188 bytes leftover after parsing attributes in process `syz.3.456'. [ 198.009636][ T4299] libceph: connect (1)[c::]:6789 error -101 [ 198.022225][ T4299] libceph: mon0 (1)[c::]:6789 connect error [ 198.022229][ T5861] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.022229][ T5861] The task syz.0.466 (5861) triggered the difference, watch for misbehavior. [ 198.033504][ T5855] ceph: No mds server is up or the cluster is laggy [ 198.132968][ T5863] bridge0: port 3(vlan2) entered blocking state [ 198.160588][ T5863] bridge0: port 3(vlan2) entered disabled state [ 198.175602][ T5863] device vlan2 entered promiscuous mode [ 198.181463][ T5863] device bond0 entered promiscuous mode [ 198.194174][ T5863] device bond_slave_0 entered promiscuous mode [ 198.202009][ T5863] device bond_slave_1 entered promiscuous mode [ 198.344712][ T4269] Bluetooth: hci4: command 0x0405 tx timeout [ 198.565756][ T5875] capability: warning: `syz.1.472' uses deprecated v2 capabilities in a way that may be insecure [ 200.087989][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 200.088005][ T26] audit: type=1326 audit(1750636708.733:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5872 comm="syz.3.471" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x0 [ 201.383516][ T4271] Bluetooth: hci0: command 0x0406 tx timeout [ 201.389621][ T4266] Bluetooth: hci2: command 0x0406 tx timeout [ 201.389638][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 201.395732][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 201.395769][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 204.926844][ T26] audit: type=1326 audit(1750636713.573:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5945 comm="syz.1.490" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6478e929 code=0x0 [ 206.993385][ T4717] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 207.071989][ T5991] mmap: syz.0.507 (5991) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.294743][ T4717] usb 2-1: config 0 has an invalid interface number: 185 but max is 0 [ 207.309954][ T4717] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.391028][ T4717] usb 2-1: config 0 has no interface number 0 [ 207.427932][ T4717] usb 2-1: config 0 interface 185 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 207.511049][ T4717] usb 2-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 207.602872][ T4717] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 207.661218][ T4717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.708923][ T4717] usb 2-1: Product: syz [ 207.733420][ T4717] usb 2-1: Manufacturer: syz [ 207.738090][ T4717] usb 2-1: SerialNumber: syz [ 207.851432][ T4717] usb 2-1: config 0 descriptor?? [ 207.908532][ T4717] usb 2-1: bad CDC descriptors [ 207.992718][ T4717] usb 2-1: unsupported MDLM descriptors [ 209.859578][ T7] usb 2-1: USB disconnect, device number 5 [ 209.960459][ T26] audit: type=1326 audit(1750636718.603:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 210.051055][ T26] audit: type=1326 audit(1750636718.633:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe382d2ab19 code=0x7ffc0000 [ 210.187499][ T26] audit: type=1326 audit(1750636718.633:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 210.271040][ T26] audit: type=1326 audit(1750636718.633:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe382d2ab19 code=0x7ffc0000 [ 210.367254][ T26] audit: type=1326 audit(1750636718.633:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 210.481096][ T26] audit: type=1326 audit(1750636718.633:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe382d2ab19 code=0x7ffc0000 [ 210.682956][ T26] audit: type=1326 audit(1750636718.633:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 210.901780][ T26] audit: type=1326 audit(1750636718.643:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe382d2ab19 code=0x7ffc0000 [ 210.976915][ T26] audit: type=1326 audit(1750636718.643:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x7ffc0000 [ 211.040912][ T26] audit: type=1326 audit(1750636718.643:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6020 comm="syz.3.515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe382d2ab19 code=0x7ffc0000 [ 212.388647][ T6044] vivid-000: disconnect [ 212.790572][ T6034] vivid-000: reconnect [ 213.058424][ T4299] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 213.184042][ T6055] capability: warning: `syz.1.524' uses 32-bit capabilities (legacy support in use) [ 213.256328][ T4299] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.291449][ T4299] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.335015][ T4299] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 213.358881][ T4299] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 213.380442][ T4299] usb 3-1: Product: syz [ 213.390528][ T4299] usb 3-1: Manufacturer: syz [ 213.414357][ T4299] usb 3-1: SerialNumber: syz [ 213.447164][ T4299] usb 3-1: config 0 descriptor?? [ 213.476599][ T4299] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 213.520071][ T4299] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 213.552617][ T4299] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 213.873390][ T4299] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 214.973330][ T6067] netlink: 'syz.4.526': attribute type 4 has an invalid length. [ 217.031160][ T4651] usb 3-1: USB disconnect, device number 3 [ 217.200030][ T4299] usb 2-1: unable to get BOS descriptor or descriptor too short [ 217.223929][ T4299] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 217.302058][ T4299] usb 2-1: can't read configurations, error -71 [ 217.375137][ T6047] delete_channel: no stack [ 219.593361][ T4717] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 219.679874][ T6124] input: syz0 as /devices/virtual/input/input6 [ 219.720641][ T6124] input: failed to attach handler leds to device input6, error: -6 [ 219.806485][ T4717] usb 5-1: config 0 has no interfaces? [ 219.829297][ T4717] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 219.859911][ T4717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.928519][ T4717] usb 5-1: Product: syz [ 219.955219][ T4717] usb 5-1: Manufacturer: syz [ 219.984648][ T4717] usb 5-1: SerialNumber: syz [ 220.014499][ T4717] usb 5-1: config 0 descriptor?? [ 222.278688][ T6157] loop0: detected capacity change from 0 to 512 [ 222.288096][ T6157] EXT4-fs: Ignoring removed nobh option [ 223.880483][ T6157] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 223.890520][ T6157] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.556: invalid indirect mapped block 2683928664 (level 1) [ 223.911709][ T6157] EXT4-fs (loop0): 1 truncate cleaned up [ 223.917602][ T6157] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 224.592890][ T4251] EXT4-fs (loop0): unmounting filesystem. [ 225.430031][ T4717] usb 5-1: USB disconnect, device number 6 [ 226.579211][ T6195] futex_wake_op: syz.2.567 tries to shift op by 36; fix this program [ 228.872779][ T6221] x_tables: ip6_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 2 [ 229.174319][ T4651] libceph: connect (1)[c::]:6789 error -101 [ 229.197578][ T4651] libceph: mon0 (1)[c::]:6789 connect error [ 229.250870][ T6224] ceph: No mds server is up or the cluster is laggy [ 230.452309][ T6194] rtc_cmos 00:00: Alarms can be up to one day in the future [ 230.998568][ T6255] xt_hashlimit: size too large, truncated to 1048576 [ 236.549998][ T4299] rtc_cmos 00:00: Alarms can be up to one day in the future [ 236.579268][ T4299] rtc_cmos 00:00: Alarms can be up to one day in the future [ 236.627992][ T4299] rtc_cmos 00:00: Alarms can be up to one day in the future [ 236.656663][ T4299] rtc_cmos 00:00: Alarms can be up to one day in the future [ 236.678563][ T4299] rtc rtc0: __rtc_set_alarm: err=-22 [ 237.793339][ T4651] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 238.532915][ T4242] hid-generic 0000:0005:0009.0001: unknown main item tag 0x1 [ 238.560286][ T4242] hid-generic 0000:0005:0009.0001: unknown main item tag 0x0 [ 238.627859][ T4242] hid-generic 0000:0005:0009.0001: unknown main item tag 0x0 [ 238.690788][ T4242] hid-generic 0000:0005:0009.0001: hidraw0: HID v0.02 Device [syz0] on syz1 [ 240.905039][ T6352] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'. [ 243.073577][ T4651] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.091358][ T4651] usb 4-1: unable to read config index 0 descriptor/start: -32 [ 243.136187][ T4651] usb 4-1: chopping to 0 config(s) [ 243.159789][ T4651] usb 4-1: can't read configurations, error -32 [ 243.333488][ T4651] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 243.493351][ T4651] usb 4-1: device descriptor read/64, error -32 [ 244.383466][ T4651] usb usb4-port1: attempt power cycle [ 245.004858][ T4299] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 245.193439][ T4299] usb 5-1: Using ep0 maxpacket: 32 [ 245.205764][ T4299] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 245.252325][ T4299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.277561][ T4299] usb 5-1: Product: syz [ 245.288535][ T4299] usb 5-1: Manufacturer: syz [ 245.300110][ T4299] usb 5-1: SerialNumber: syz [ 245.339906][ T4299] usb 5-1: config 0 descriptor?? [ 245.361924][ T6402] device syzkaller1 entered promiscuous mode [ 245.557796][ T4299] snd-usb-6fire 5-1:0.0: unable to receive device firmware state. [ 245.576006][ T4299] snd-usb-6fire: probe of 5-1:0.0 failed with error -121 [ 245.966142][ T6355] ALSA: mixer_oss: invalid OSS volume '' [ 246.039766][ T4299] usb 5-1: USB disconnect, device number 7 [ 246.941556][ T26] kauditd_printk_skb: 68 callbacks suppressed [ 246.941572][ T26] audit: type=1326 audit(1750636755.583:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6409 comm="syz.3.630" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe382d8e929 code=0x0 [ 249.273492][ T4717] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 249.466778][ T4717] usb 3-1: Using ep0 maxpacket: 16 [ 249.478664][ T4717] usb 3-1: config index 0 descriptor too short (expected 1828, got 36) [ 249.530381][ T4717] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 249.579686][ T4717] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 249.618296][ T4717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 249.670053][ T4717] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 249.718766][ T4717] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 249.736517][ T4717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.750379][ T4717] usb 3-1: Product: syz [ 249.757351][ T4717] usb 3-1: Manufacturer: syz [ 249.762214][ T4717] usb 3-1: SerialNumber: syz [ 249.778627][ T4717] usb 3-1: config 0 descriptor?? [ 249.799440][ T4717] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 249.827433][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 249.918622][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 250.020249][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 250.107976][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 250.137282][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 250.156821][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 250.184836][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 250.274727][ T4717] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 250.349275][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 250.370072][ T4717] keyspan 3-1:0.0: unsupported endpoint type 0 [ 250.382364][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 250.419060][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 250.452740][ T4717] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 251.390324][ T4717] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 251.837036][ T4717] usb 3-1: USB disconnect, device number 4 [ 251.879313][ T4717] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 251.911018][ T4717] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 251.931142][ T6486] use of bytesused == 0 is deprecated and will be removed in the future, [ 251.942935][ T4717] keyspan 3-1:0.0: device disconnected [ 251.996679][ T6486] use the actual size instead. [ 252.003587][ T4299] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 252.195098][ T6498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.656'. [ 252.234989][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.274409][ T6498] netlink: 492 bytes leftover after parsing attributes in process `syz.0.656'. [ 252.297010][ T4299] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.316761][ T6499] xt_hashlimit: size too large, truncated to 1048576 [ 252.327373][ T4299] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 252.358512][ T4299] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.394195][ T4299] usb 4-1: config 0 descriptor?? [ 252.822890][ T4299] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 252.861931][ T4299] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 252.906570][ T4299] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0002/input/input7 [ 253.026875][ T4299] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 253.096838][ T4299] usb 4-1: USB disconnect, device number 7 [ 253.350354][ T6505] fido_id[6505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 254.239615][ T6518] [ 254.242024][ T6518] ====================================================== [ 254.249074][ T6518] WARNING: possible circular locking dependency detected [ 254.256137][ T6518] 6.1.141-syzkaller #0 Not tainted [ 254.261276][ T6518] ------------------------------------------------------ [ 254.268412][ T6518] syz.1.659/6518 is trying to acquire lock: [ 254.274328][ T6518] ffff88807b577958 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 254.284076][ T6518] [ 254.284076][ T6518] but task is already holding lock: [ 254.291468][ T6518] ffff88807d426790 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 254.302411][ T6518] [ 254.302411][ T6518] which lock already depends on the new lock. [ 254.302411][ T6518] [ 254.312836][ T6518] [ 254.312836][ T6518] the existing dependency chain (in reverse order) is: [ 254.321870][ T6518] [ 254.321870][ T6518] -> #1 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 254.330592][ T6518] down_write+0x36/0x60 [ 254.335297][ T6518] process_measurement+0x33c/0x1a10 [ 254.341051][ T6518] ima_file_mmap+0x104/0x150 [ 254.346353][ T6518] __se_sys_remap_file_pages+0x53e/0x770 [ 254.354016][ T6518] do_syscall_64+0x4c/0xa0 [ 254.358988][ T6518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.365530][ T6518] [ 254.365530][ T6518] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 254.373234][ T6518] __lock_acquire+0x2cf8/0x7c50 [ 254.378637][ T6518] lock_acquire+0x1b4/0x490 [ 254.383691][ T6518] down_read_killable+0x4c/0x340 [ 254.389180][ T6518] mmap_read_lock_killable+0x1d/0x60 [ 254.395000][ T6518] lock_mm_and_find_vma+0x2b1/0x2f0 [ 254.400730][ T6518] do_user_addr_fault+0x2db/0xb10 [ 254.406317][ T6518] exc_page_fault+0x60/0x100 [ 254.411441][ T6518] asm_exc_page_fault+0x22/0x30 [ 254.416826][ T6518] fault_in_readable+0x13e/0x1f0 [ 254.422391][ T6518] fault_in_iov_iter_readable+0xbb/0x2e0 [ 254.428654][ T6518] generic_perform_write+0x1d2/0x560 [ 254.434481][ T6518] __generic_file_write_iter+0x172/0x430 [ 254.440651][ T6518] generic_file_write_iter+0xab/0x2e0 [ 254.446653][ T6518] vfs_write+0x44c/0x960 [ 254.451426][ T6518] ksys_write+0x143/0x240 [ 254.456301][ T6518] do_syscall_64+0x4c/0xa0 [ 254.461376][ T6518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.467914][ T6518] [ 254.467914][ T6518] other info that might help us debug this: [ 254.467914][ T6518] [ 254.478147][ T6518] Possible unsafe locking scenario: [ 254.478147][ T6518] [ 254.485601][ T6518] CPU0 CPU1 [ 254.490968][ T6518] ---- ---- [ 254.496342][ T6518] lock(&sb->s_type->i_mutex_key#12); [ 254.501820][ T6518] lock(&mm->mmap_lock); [ 254.508675][ T6518] lock(&sb->s_type->i_mutex_key#12); [ 254.516669][ T6518] lock(&mm->mmap_lock); [ 254.521120][ T6518] [ 254.521120][ T6518] *** DEADLOCK *** [ 254.521120][ T6518] [ 254.529264][ T6518] 3 locks held by syz.1.659/6518: [ 254.534291][ T6518] #0: ffff888079701768 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 254.543554][ T6518] #1: ffff88807a584460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x256/0x960 [ 254.552582][ T6518] #2: ffff88807d426790 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 254.563940][ T6518] [ 254.563940][ T6518] stack backtrace: [ 254.569853][ T6518] CPU: 0 PID: 6518 Comm: syz.1.659 Not tainted 6.1.141-syzkaller #0 [ 254.577841][ T6518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.587918][ T6518] Call Trace: [ 254.591258][ T6518] [ 254.594206][ T6518] dump_stack_lvl+0x168/0x22e [ 254.598902][ T6518] ? load_image+0x3b0/0x3b0 [ 254.603439][ T6518] ? show_regs_print_info+0x12/0x12 [ 254.608742][ T6518] ? print_circular_bug+0x12b/0x1a0 [ 254.613995][ T6518] check_noncircular+0x274/0x310 [ 254.618962][ T6518] ? add_chain_block+0x940/0x940 [ 254.623927][ T6518] ? lockdep_lock+0xdc/0x1e0 [ 254.628535][ T6518] ? _find_first_zero_bit+0xcf/0x100 [ 254.633835][ T6518] __lock_acquire+0x2cf8/0x7c50 [ 254.638716][ T6518] ? verify_lock_unused+0x140/0x140 [ 254.643965][ T6518] ? verify_lock_unused+0x140/0x140 [ 254.649187][ T6518] ? verify_lock_unused+0x140/0x140 [ 254.654399][ T6518] ? mark_lock+0x94/0x320 [ 254.658749][ T6518] lock_acquire+0x1b4/0x490 [ 254.663274][ T6518] ? mmap_read_lock_killable+0x1d/0x60 [ 254.668755][ T6518] ? read_lock_is_recursive+0x10/0x10 [ 254.674147][ T6518] ? cmp_ex_search+0x1a/0x70 [ 254.678774][ T6518] ? bsearch+0x8a/0xb0 [ 254.682862][ T6518] ? fault_in_readable+0x13e/0x1f0 [ 254.688160][ T6518] ? search_extable+0x8c/0xd0 [ 254.692849][ T6518] ? trim_init_extable+0x3b0/0x3b0 [ 254.697978][ T6518] ? mmap_read_lock_killable+0x1d/0x60 [ 254.703459][ T6518] down_read_killable+0x4c/0x340 [ 254.708414][ T6518] ? mmap_read_lock_killable+0x1d/0x60 [ 254.713885][ T6518] mmap_read_lock_killable+0x1d/0x60 [ 254.719183][ T6518] lock_mm_and_find_vma+0x2b1/0x2f0 [ 254.724398][ T6518] do_user_addr_fault+0x2db/0xb10 [ 254.729435][ T6518] ? _raw_spin_unlock_irq+0x1f/0x40 [ 254.734675][ T6518] exc_page_fault+0x60/0x100 [ 254.739277][ T6518] asm_exc_page_fault+0x22/0x30 [ 254.744142][ T6518] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 254.749882][ T6518] Code: 78 8e c3 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 8e c3 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a 8e [ 254.769536][ T6518] RSP: 0018:ffffc900049bfa90 EFLAGS: 00050287 [ 254.775617][ T6518] RAX: ffffffff81bd4819 RBX: 0000000000001000 RCX: 0000000000080000 [ 254.783598][ T6518] RDX: ffffc900125c9000 RSI: 0000000000011259 RDI: 000000000001125a [ 254.791581][ T6518] RBP: 0000000000000000 R08: ffff888025878000 R09: 0000000000000002 [ 254.799560][ T6518] R10: 0000000000000006 R11: 0000000000000002 R12: 00002000000a8000 [ 254.807543][ T6518] R13: dffffc0000000000 R14: 00002000000a6240 R15: 00002000000a7000 [ 254.815540][ T6518] ? fault_in_readable+0x139/0x1f0 [ 254.820679][ T6518] fault_in_iov_iter_readable+0xbb/0x2e0 [ 254.826335][ T6518] generic_perform_write+0x1d2/0x560 [ 254.831646][ T6518] ? generic_file_direct_write+0x660/0x660 [ 254.837470][ T6518] ? __file_remove_privs+0x5b0/0x5b0 [ 254.842767][ T6518] ? preempt_count_add+0x8d/0x190 [ 254.847886][ T6518] ? rwsem_write_trylock+0x12f/0x1b0 [ 254.853177][ T6518] ? clear_nonspinnable+0x60/0x60 [ 254.858208][ T6518] ? generic_write_checks_count+0x3d9/0x4c0 [ 254.864111][ T6518] __generic_file_write_iter+0x172/0x430 [ 254.869766][ T6518] generic_file_write_iter+0xab/0x2e0 [ 254.875161][ T6518] vfs_write+0x44c/0x960 [ 254.879416][ T6518] ? file_end_write+0x250/0x250 [ 254.884275][ T6518] ? __fget_files+0x44a/0x4d0 [ 254.888979][ T6518] ? __fdget_pos+0x2ae/0x360 [ 254.893586][ T6518] ? ksys_write+0x71/0x240 [ 254.898014][ T6518] ksys_write+0x143/0x240 [ 254.902351][ T6518] ? __ia32_sys_read+0x80/0x80 [ 254.907128][ T6518] ? lockdep_hardirqs_on+0x94/0x140 [ 254.912335][ T6518] do_syscall_64+0x4c/0xa0 [ 254.916795][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 254.921484][ T6518] ? clear_bhb_loop+0x60/0xb0 [ 254.926168][ T6518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.932079][ T6518] RIP: 0033:0x7f6b6478e929 [ 254.936513][ T6518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.956562][ T6518] RSP: 002b:00007f6b655d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 254.964986][ T6518] RAX: ffffffffffffffda RBX: 00007f6b649b6240 RCX: 00007f6b6478e929 [ 254.972965][ T6518] RDX: 000000000208e24b RSI: 0000200000000240 RDI: 0000000000000007 [ 254.980941][ T6518] RBP: 00007f6b64810b39 R08: 0000000000000000 R09: 0000000000000000 [ 254.988916][ T6518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.996892][ T6518] R13: 0000000000000000 R14: 00007f6b649b6240 R15: 00007ffe1b57de18 [ 255.004982][ T6518] [ 255.008110][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.078944][ T6522] PM: Image not found (code -22) [ 255.277944][ T6509] netlink: 'syz.1.659': attribute type 10 has an invalid length. [ 255.537092][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.547032][ T6509] device team0 entered promiscuous mode [ 255.553614][ T6509] device team_slave_0 entered promiscuous mode [ 255.560697][ T6509] device team_slave_1 entered promiscuous mode [ 255.572406][ T6509] bond0: (slave team0): Enslaving as an active interface with an up link [ 255.625556][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.631875][ T1277] ieee802154 phy1 wpan1: encryption failed: -22