last executing test programs: 20m39.720309034s ago: executing program 32 (id=203): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x6, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc0, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x2}, {0x0, 0x7ff}, 0x20000000, 0x0, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0xc0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000e00)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2a, 0x0, {{@in6=@local, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0xc, 0xfffffffffffffffc, 0x0, 0x800000, 0x1}, {0x0, 0xa04, 0x40800000000000, 0x800000000000002}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 20m26.923915119s ago: executing program 33 (id=255): r0 = openat$sysfs(0xffffff9c, 0x0, 0x2200, 0xe0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000013c0)={0x10, 0x24, 0x1}, 0x10}], 0x1}, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x4030582b, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_usb_connect$uac2(0x3, 0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201100300000020ba0d001040000102030109027d000301061002080b0100010c200009040000000101200009240180ff071d00040c2403020403050400ff011c"], &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "076938665911e1a3f494364b838e3273da1780d57d81977bcb4d02af9a6bbb298fa4adeed0b246e6aecce087814d45ed6be2a370e5eecdc9b2bbdeea969856fee91065435594f2ad56b735116d68c6a2c67cde381a95b248209d138788673ff32c0c8ef5e5f7c8d86fd4c190e744eac7240b715071e06285c9542c6c14a92b7d8ceff3e73f5d5c27db829d19d62435b946cbb6610355b150d33fba8db0956191c4ed7830fc3f9e075f915f0b7737f50964ce7ad61ade1db48e083bf1eac5b513fa0ac84e5772bd9d73b5b2cad8342342429351cb1535fc0dffdec8496703f3dc9d"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00032e0000002e03"]}, 0x0) 19m36.655507931s ago: executing program 34 (id=439): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 19m25.884003351s ago: executing program 35 (id=470): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x34) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000240)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) linkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', 0x400) 19m2.217831309s ago: executing program 36 (id=532): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b40)=ANY=[@ANYBLOB="12010000000000200304306000000000000109022400010000000009040000010300000009210000000122020009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000200)={&(0x7f0000000280)=[{0x9, 0x29, 0x2000, &(0x7f0000000500)='<'}], 0x1}) 18m41.767898116s ago: executing program 37 (id=611): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000b00)={0x2, 0x0, {&(0x7f0000000940)=""/197, 0xc5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/62, 0x3e, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000a40)={0x2, 0x0, {&(0x7f00000007c0)=""/82, 0x52, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000340)=""/2, 0x2, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f0000000600)=""/13, 0xd, 0x0, 0x3, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f0000000400)=""/192, 0xc0, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 18m25.092132308s ago: executing program 38 (id=669): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) listen(r0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 17m58.11176143s ago: executing program 39 (id=807): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x6, 0x0, 0x2}]}, 0x10) r3 = fcntl$dupfd(r2, 0x0, r1) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0) read$FUSE(r3, &(0x7f0000000400)={0x2020}, 0x2020) close_range(r0, 0xffffffffffffffff, 0x0) 16m58.897625961s ago: executing program 40 (id=1026): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x15) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = epoll_create1(0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES8=r1], 0x54}, 0x1, 0x0, 0x0, 0x4000085}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20) 13m59.377822616s ago: executing program 41 (id=1365): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x6f, r5, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 10m41.425289922s ago: executing program 42 (id=1646): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4004550c, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000016c0)={0x29, 0x0, [{0x2, 0x28, &(0x7f0000000080)=""/40}, {0xd100828e98ba2273, 0xef, &(0x7f00000015c0)=""/239}]}) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x304008000) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0xf0, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000"], 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket(0x2b, 0x1, 0x1) socket$inet_smc(0x2b, 0x1, 0x0) 5m30.796976784s ago: executing program 43 (id=2359): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x22004006, &(0x7f00000010c0)={[{@jqfmt_vfsold}, {@nouid32}, {@nobh}, {@stripe={'stripe', 0x3d, 0xffff}}, {@block_validity}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x47b, &(0x7f0000000280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r1, 0xc0096616, 0x0) 4m48.984972446s ago: executing program 44 (id=2511): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fanotify_init(0x1a, 0x1) syz_io_uring_setup(0x7db6, &(0x7f0000000380)={0x0, 0xe4a6, 0x2, 0x2, 0x1af}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x29, 0x2, 0x0) read(r7, &(0x7f00000004c0)=""/59, 0x3b) 4m26.821444401s ago: executing program 7 (id=2587): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00000000000000000003,resv_level=000000006,coherency=full,localflocks,coherency=full,noacl,\x00'/136], 0x1, 0x4435, &(0x7f000000cd80)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 4m23.143009053s ago: executing program 7 (id=2603): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f00000003c0)='dns_resolver\x00', &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000080)="00000102", 0xfffff, r1) 4m20.309276616s ago: executing program 7 (id=2620): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x5}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0xc, 0x1}]}]}]}}]}, 0x60}}, 0x0) 4m18.288171341s ago: executing program 7 (id=2625): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000ac0)="$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") chdir(&(0x7f0000000040)='./file0\x00') sendmsg$sock(0xffffffffffffffff, 0x0, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 4m17.174962056s ago: executing program 7 (id=2631): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000005c0), 0x12) read(r1, &(0x7f0000000240)=""/81, 0x51) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x220) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4m12.95879959s ago: executing program 7 (id=2646): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 4m12.379333133s ago: executing program 45 (id=2646): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000540)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f00090401efff01022000090401010101022000090501"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[], 0x0) syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 3m46.394343893s ago: executing program 3 (id=2737): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r5, {0x2}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xd, 0x6, 0x0, 0x4, 0x7, 0x4, 0x7, 0x8, 0x7, 0x1000, 0x3, 0x1f, 0x9, 0x4, 0x7800, 0x80000001}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m46.038910861s ago: executing program 3 (id=2741): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r2, 0x4) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) accept$packet(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x24040050}, 0x88d8) recvfrom$packet(r1, &(0x7f00000000c0)=""/36, 0x24, 0x60, 0x0, 0x0) 3m45.848363705s ago: executing program 3 (id=2745): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x4000, 0x1000000, 0x2033f, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x2000, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 3m41.062779302s ago: executing program 3 (id=2752): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000280)={[{@dioread_lock}, {@resgid}]}, 0x6, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000100)='./bus\x00', 0x1fb978507dcbbbd6) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000e80)=[{{&(0x7f0000000640)=@file={0x1, './file0/../file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004000}}], 0x1, 0x0) mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x0) 3m39.301202651s ago: executing program 3 (id=2759): writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000180)='.\x00', 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m38.209707806s ago: executing program 3 (id=2768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x7) writev(r1, &(0x7f0000001840)=[{&(0x7f00000002c0)="9d", 0x1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x0, 0x6, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 3m37.730908486s ago: executing program 46 (id=2768): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x7) writev(r1, &(0x7f0000001840)=[{&(0x7f00000002c0)="9d", 0x1}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x25dfdbfb, {0xa, 0x10, 0x20, 0x0, 0x6, 0x0, 0x0, 0x3}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 2m40.512977414s ago: executing program 1 (id=2944): r0 = socket(0x2a, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x1, 0x1009, 0x7f}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2b, 0x2, {0x60, 0x0, 0x0, r4, {}, {0xfff1, 0xa}, {0x0, 0x5}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x10) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m38.636861606s ago: executing program 1 (id=2947): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2m34.068313129s ago: executing program 1 (id=2956): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000c40)=0x2, 0x4) 2m31.37508827s ago: executing program 1 (id=2959): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd04cc000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace(0x8, r2) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000000)="b9ff03030018698cb89e40f086dd6000000e00002f00630677", 0x0, 0xfa, 0x2000000, 0x3f, 0xc0, &(0x7f0000000440), &(0x7f0000000080), 0x4}, 0x50) 2m31.211339054s ago: executing program 5 (id=2960): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2m30.034828941s ago: executing program 5 (id=2965): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0xf, 0xa7, &(0x7f0000000040)="$eJzs17GJAkEYBeD/9uD2UhMRDIw3sQdLEUNNxEgR7EBsxFYsYTsw2FTEEdwBETMDA/2+YODNY2DSdzjt+7sqIm0iUtWbl+lusVxNx7P2DD5SERFlRPxHxKDT5uOo7X5yXzfrSd38Pj/+2779vwAAwOuKGD7mS8oX57wCb6GbpwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA17kGAAD///n9J6M=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002e00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) r0 = getpid() syz_pidfd_open(r0, 0x0) creat(&(0x7f0000000580)='./bus\x00', 0x9e) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r1}, &(0x7f0000000300), &(0x7f0000000280)=r2}, 0x20) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x11, &(0x7f0000000400)=ANY=[], 0x0) 2m29.076710972s ago: executing program 5 (id=2967): socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8946, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x1, 0x2}, {0x8, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4) 2m28.738944s ago: executing program 9 (id=2969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)={0x24, 0x0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2m27.122522386s ago: executing program 1 (id=2970): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/rt_cache\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0xcc, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x8e5, 0x8b39, 0x3a, 0x40}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x1, 0x3b7, 0x5}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x1000, 0xa8c, 0xfffffff8, 0xd}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x6b}]}, 0xcc}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtfilter={0x30, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xf}, {}, {0xffff, 0x6}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.465342661s ago: executing program 9 (id=2974): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) socket$key(0xf, 0x3, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010101, @in=@broadcast, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x2000000000000, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@local}}, 0xe8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2m26.402919302s ago: executing program 5 (id=2975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 2m24.799173919s ago: executing program 5 (id=2977): socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syslog(0x4, &(0x7f0000000200)=""/29, 0x1d) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x20}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 2m23.591105946s ago: executing program 9 (id=2979): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa20}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000300)=0x3, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) ptrace(0x10, 0x0) 2m21.767464107s ago: executing program 9 (id=2982): syz_open_dev$vim2m(0x0, 0xffffffbb, 0x2) ptrace$poke(0x5, 0x0, &(0x7f0000000200), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_usb_connect(0x3, 0x96d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010102e21b5140b1134200e8a9010203010902"], 0x0) syz_open_dev$I2C(0x0, 0x1, 0x2003) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) open$dir(0xffffffffffffffff, 0x200400, 0xd2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x7f) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x1, 0x71, 0x100005, 0xe8e8, 0xf}]}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x9) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"c718ae3ddd25e4c2826499cb6a055b56a5a7336f377a556f824db28eb6743cf045afd0e932534b9eb3b847abbcef63c85319991745999ed89ff49783a84d57cf175a89f8733d74a1bdddcb0a6c3f7535e7976e79da1b52de6403f6710d606fafaf685ec19f369b7829b12aa2b8cd2ab52f9c688683979cdb9516cb61f2adb9aefd44fee30bddb81ebefa818f31f60d89a4e390920c7ed0e2512fd59f719e734b0a1d1f3ff7babb54258a1585514aac0b000000733671e0543929c06f72fc598939003ac6777f3497523536fd25ac4f1e265f5038fa7455f2cc6131d4a189a16b0f0b89e6a495e1d95b840c36488adc22cb2d1b8af57f6dce7214152ba1b3c0d3ad0a6db821518e44b24cb36a02d76ea11a1c45879fc77e7bb2af8c345ddddf49f41228df2114f2c27d16499fa36097a5015ad61a6a9484c09e0a2dfb50f7b7ca71135dc32804a80380a6e20e0ae03be775e472cd31d6a31e615937c38e746a5cf6c9d8194242990dd497a2c52ab50300000000000000cebbd983c3f86dbe92c4b751c04693cb09af88521ab305ceabf6d2bab40bb1b219fbe95ace2f6c49fea798e76b4ef336dff5ac0f7ab022b800ac1aa42fd231b52465a410177ed85dcc9c6d794e2aa0b90cdc409541aa85fa16e3cbc3a9d6c83ffd4d01e5ba898555eeffccf0cb28ce5df0ba31cb793675276162de2fdcb486455bca57edf4fb14e1533554eb22527d66a28a960c430f6136927f54e670c46292454fe28485f35405025844fd24fe846f6656c77d9b5f2b4750ac4805897b02c85caba80000bb96f71f468c9e746d860238b3b113ab1eef51e1507f8832d5d69528083d44548e491477cda51d7e083a134097438e9d7ea34eae8a2e6b516327db9310c7478a37f5c562037196131cc7c84fa29c3c2576f2ae7570b5a98aaa49ca7ddfd5a8c046ce82e4a2d06082ad7a3ab0dfbe208630b1410b674781855752c9c57c1c5ab0a74a336ce89b3a9c0d37a3ca4e698a798a85faf7f4f1dc020b7dd5750062c9810c4bc1ad7afe338f2b0f29059e684fe16098eb30da105be01ca11a293635dfc6d25ecc770ba72792fd3c6851d951b770d0f9edafb1cb4241350d85b04ed737a9bfd7e8301c43b65a95dda76d6850860ba3195040b14c8ad1a8b52472785521147182352a1dbd93595cbc26e813ccd75e16f9247fe82ed150c121f0041022522ec76476f0a9cffa3be1d3ffffffffffffffff29358bbfd8b7a12fe94a0355beb9420eee0a5c11220100c782b89e9430de84b220e8c0df4bd40be3400c58f149319f891fe86fba751dab3326bf2deb9e782b37ec9c7adf36025a091a4b3600000000000000000000000000000000000000000000000000000000000000000600"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m21.387916506s ago: executing program 1 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m20.990537215s ago: executing program 9 (id=2984): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x9, 0x100000001002089}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x6, 0x0, 0x0) 2m18.238902878s ago: executing program 5 (id=2985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)={0x24, 0x0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2m18.237909507s ago: executing program 9 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m5.055524465s ago: executing program 47 (id=2983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r4, 0x800454e0, &(0x7f0000000200)=r3) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031c00d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m1.127065653s ago: executing program 48 (id=2995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x5, 0x7, 0xfffffffc}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x4}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m0.965727268s ago: executing program 49 (id=2985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x6, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000240)={0x24, 0x0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40048b0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 26.819551024s ago: executing program 8 (id=3136): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) syz_emit_ethernet(0x3e, &(0x7f0000000340)=ANY=[@ANYBLOB="31e02b0eaf4eaaaaaaaaaabb86dd6000000000083a000000000000000000000000000000000000000000000001800090780000000664d9f0cac8ce5826dacd17836d233bcb631794b4218f7d6acda2a5252b3691e768a7783249848d21ed29872e08870fbb1ad488b2b76fd070132fe07793aacceb2b4a9be5e425c470038b7338f9a5bf2f6b2c72212a77d6a7a6ee4ec4677b8d6a768876a6ee636d621ada8744227364df2fcc51f88ccb318ac0fb7443678ee2d64da348535ff529d17dd9a2a3be775d15ae8381a9feb8d4de9d5887871777d3c3360de4dfa4528e38"], 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) r5 = socket$inet(0x2, 0x801, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) shutdown(r5, 0x1) sendto$inet(r2, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 26.362894804s ago: executing program 8 (id=3140): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0x535920cc79e1d292}, 0x0, 0x0}) 23.510157408s ago: executing program 6 (id=3144): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, 0x0, 0xfffffffffffffffe) restart_syscall() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, &(0x7f0000000240)={0x1, [0x8a, 0xfffffffd, 0x101], [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x7, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7, 0xb94, 0x1, 0x1}, {0x8d7c, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x9, 0x77a1, 0x1, 0x1, 0x1}, {0x71e, 0x0, 0x1}, {0x5, 0x1ff, 0x1, 0x1, 0x0, 0x1}, {0x5e1c80e2, 0x4, 0x1, 0x1, 0x1, 0x1}, {0x0, 0x7fffffff, 0x1, 0x0, 0x1, 0x1}, {0x3, 0x0, 0x0, 0x0, 0x1}], 0x4}) mount(&(0x7f0000000000)=@sg0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='nfs\x00', 0x0, &(0x7f0000000240)) socket(0x2, 0x80805, 0x0) 22.437109113s ago: executing program 4 (id=3146): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffffcd) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, 0x0) sched_setscheduler(r3, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r4, 0x89e6, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x100000001, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x3, 0x0, 0x7fffffff}, 0x0, 0x0) 21.094936243s ago: executing program 8 (id=3148): r0 = socket$rds(0x15, 0x5, 0x0) syz_open_pts(0xffffffffffffffff, 0x81) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a7565aba55a87d2a251c295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507a0592c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd106926acb583ad63a4e7e1ca17c1b6aac63fefa9dcbe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0xa, 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000100a14000100009a"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x20024090) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x2000010}, [@generic={0x6b, 0x1, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000000c0)={"ff87c89d4e3e6bd4ae7ee3551b880c0ac56cb2a58b7da498a7045278c8043bbe"}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000280)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x7, 0x7800, 0x67a, 0x7, {{0x6, 0x4, 0x2, 0x29, 0x18, 0x64, 0x0, 0x6, 0x2f, 0x0, @remote, @remote, {[@ra={0x94, 0x4}]}}}}}) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 19.711938454s ago: executing program 4 (id=3150): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000001c0)=0x1) syz_open_dev$dri(&(0x7f00000000c0), 0xfadf, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f00000000c0)=0x7) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5, 0x15, 0x4}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x44}}, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000200)=0xf0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x2) 16.301270481s ago: executing program 0 (id=3152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) fchown(r3, r4, r5) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r3) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000000c0)={0x2, @pix={0x6, 0x8, 0x31435641, 0x9, 0x5, 0x88, 0x3, 0x10000, 0x0, 0x6, 0x2, 0x74c3924ecb75b6cd}}) 15.02767387s ago: executing program 6 (id=3153): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f00000005c0)='..&-^\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x5a2d, 0x0, 0x1, 0x32f}, &(0x7f0000000940)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4e32, 0x80000, 0x2, 0x27c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd9d2, 0x8000, 0x3, 0x1bd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc55d, 0x200, 0x0, 0x1d8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc90, 0x2000, 0x1, 0x2ce}}], 0x4, 0x0, &(0x7f000001b2c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_mr_vif\x00') pread64(r3, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_']) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0x5c}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) socket$netlink(0x10, 0x3, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040), 0x10) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) 13.758967459s ago: executing program 6 (id=3154): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r4, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0xe, 0x6, 0x200, 0x0}) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r5, &(0x7f00000001c0)='./file0\x00', r5, 0x0, 0x4) write$cgroup_pid(r5, &(0x7f00000001c0)=r1, 0x12) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x60, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9, 0xfffffb5b, 0x0, 0x100, 0x400}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_AUTH_ENABLE={{0x12}, 0x5}}}, 0x7) 11.551984619s ago: executing program 0 (id=3156): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x441, 0x104) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f", @ANYRES64=r6], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 11.197787787s ago: executing program 0 (id=3157): memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x6c, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000480)={0x0, 0x2, 0x1000, 0xfffffffc, 0x24b, 0x0, r2}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x8, 0x1000000, 0x2032e, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1755, 0x2000, 0x0, 0x146, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b59, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x8000, 0x2, 0xdfffffff, 0x0, r5}}], 0x1, 0x0, 0x0) 11.02696018s ago: executing program 2 (id=3158): unshare(0x22020400) r0 = syz_open_dev$video4linux(0x0, 0x5, 0x200000) tee(r0, 0xffffffffffffffff, 0x2, 0x1) openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x4) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x28, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 10.933955062s ago: executing program 2 (id=3159): socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[], 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040), 0x6) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, 0x0}}], 0x1, 0x14) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40880a0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x28) 9.901066236s ago: executing program 2 (id=3160): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 9.657303181s ago: executing program 0 (id=3161): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r1, 0x4, 0x40800) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000780)={'gre0\x00'}) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000080)=0xfffff001, 0x4) ftruncate(r3, 0x2000009) sendfile(r1, r3, 0x0, 0x7ffff004) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000080)='./mnt\x00', 0x14) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, &(0x7f0000000000)={0x3, 0xffffffff, 0x4, 0x1, 0xc75a, 0x2}) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 8.610631075s ago: executing program 4 (id=3162): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) kexec_load(0x1, 0x0, 0x0, 0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, 0x0, 0x4800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x1, 0x7, 0x4, 0xc}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) socket$nl_route(0x10, 0x3, 0x0) 8.609182715s ago: executing program 6 (id=3163): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010105, 0x4e25, 0x0, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae03, 0x17) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f00000006c0)=""/145, &(0x7f0000000480), &(0x7f0000000780), 0x4, r4}, 0x38) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x44, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42890}, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80000, 0x1) open_by_handle_at(r7, &(0x7f0000000080)=@reiserfs_2={0x8, 0x2, {0x6}}, 0x40000) getsockopt$PNPIPE_HANDLE(r7, 0x113, 0x3, 0x0, &(0x7f00000000c0)) 8.442958129s ago: executing program 8 (id=3164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8000000000100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x20084884) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="74000000090601020000000000"], 0x74}, 0x1, 0x300, 0x0, 0x10040003}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, 0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r4, 0x0, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffeb, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@new_dev={0x4, 0x40d}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000600000004000000000000070000000000000000000000010500000140b900000000000001000085020000000000000002000000000000400000"], &(0x7f0000000340)=""/142, 0x52, 0x8e, 0x1}, 0x28) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x1a, 0x7, 0x70bd2a, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0xffff, 0x0, 0x4e22, 0xfffd, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x3c}, @in=@multicast1, {0x5a, 0xb400, 0x2, 0xfeffff7f00000001, 0x0, 0x60000}, {0x9, 0x200000, 0x7, 0x1}, {0x40000, 0x0, 0x80}, 0x2000, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x0) 8.419147879s ago: executing program 0 (id=3165): creat(&(0x7f0000000280)='./file0\x00', 0x155adae9f4f0a7c9) openat(0xffffffffffffff9c, 0x0, 0x0, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, 0x0, &(0x7f0000000040), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a000004090001007379"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 7.417321292s ago: executing program 2 (id=3166): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) capset(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = userfaultfd(0x801) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) close_range(r0, 0xffffffffffffffff, 0x0) 7.413685412s ago: executing program 4 (id=3167): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fanotify_init(0x1a, 0x1) syz_io_uring_setup(0x7db6, &(0x7f0000000380)={0x0, 0xe4a6, 0x2, 0x2, 0x1af}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x29, 0x2, 0x0) read(r7, &(0x7f00000004c0)=""/59, 0x3b) 5.940588495s ago: executing program 8 (id=3168): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fanotify_init(0x1a, 0x1) syz_io_uring_setup(0x7db6, &(0x7f0000000380)={0x0, 0xe4a6, 0x2, 0x2, 0x1af}, 0x0, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x29, 0x2, 0x0) read(r7, &(0x7f00000004c0)=""/59, 0x3b) 5.940365415s ago: executing program 0 (id=3169): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x805, 0x0) getsockopt(r5, 0x114, 0x271d, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = fsopen(&(0x7f0000000100)='devtmpfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) fanotify_init(0x1a, 0x1) socket$packet(0x11, 0x2, 0x300) r7 = socket$kcm(0x29, 0x2, 0x0) read(r7, &(0x7f00000004c0)=""/59, 0x3b) 5.224200751s ago: executing program 6 (id=3170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x8042, 0x1a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x100, 0x0) socket$inet6(0xa, 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}}], {0x14}}, 0x94}}, 0x0) 3.748146265s ago: executing program 6 (id=3171): signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000) mount$9p_rdma(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000001c0), 0x10000, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=rdma.']) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) gettid() bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 3.086926039s ago: executing program 4 (id=3172): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x810004, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x1, 0x80000000008}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, 0x0) 1.899452587s ago: executing program 4 (id=3173): r0 = add_key$user(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000280)="f56ef59747a505fa80c49d58be5c2a3981c401b828e0a12934c431b7f5c3b4108470b39105d1d63df37f263426fe3e0207ecf2b549deb85bafa831d495599ce0284cd45813cf4547593be63d052394f9f228d301", 0x54, 0xfffffffffffffffe) r1 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000180)={0x0, "44ee4dcf6df6b457eba45bc88153e9b5cbf7cc1af7b76983c2717759237e827d8b738dbbf41db40d00"}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000480)={0x0, "9b92cdd557ccbac1f757f51c9457cebc12105753b7703b7d99674e7c7c4c2f05c9aa6e0d8cc7d35bcd8b5615147de5b9ccee6e225c88c8508f5a4a1739470a17", 0x2f}, 0x48, 0xfffffffffffffff9) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x50) keyctl$KEYCTL_PKEY_QUERY(0x18, r2, 0x0, 0x0, &(0x7f0000000540)) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x2, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x7}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r6, 0x40044103, 0x0) close(r4) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r7, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 1.227051742s ago: executing program 2 (id=3174): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r3 = socket(0xa, 0x3, 0x87) sendto(r3, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@RTA_IIF={0x8, 0x3, r5}, @RTA_DST={0x8, 0x1, @remote}, @RTA_SRC={0x8, 0x2, @private=0xa010100}]}, 0x34}}, 0xea5bc50b6199d77e) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, 0x0, 0x0) 1.084786335s ago: executing program 8 (id=3175): r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f0000000040)="06", 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0xd04cc000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendfile(r0, r0, &(0x7f0000001000), 0xffff) 0s ago: executing program 2 (id=3176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1200000009", @ANYRES32=0x0, @ANYBLOB], 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) msgsnd(0x0, &(0x7f0000001d00)={0x2}, 0x8, 0x800) r3 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r5 = dup3(r3, r4, 0x0) read$FUSE(r5, &(0x7f0000004e80)={0x2020}, 0x2020) msgrcv(0x0, 0x0, 0x0, 0x2, 0x3800) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x40) sendto(0xffffffffffffffff, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) kernel console output (not intermixed with test programs): 688164][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1066.739107][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1066.830688][T14873] device veth0_vlan entered promiscuous mode [ 1066.861437][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1066.898283][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1066.965365][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1067.012599][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1067.141446][T14873] device veth1_vlan entered promiscuous mode [ 1067.218827][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1067.272536][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1067.337725][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1067.370884][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1067.405755][T14873] device veth0_macvtap entered promiscuous mode [ 1067.440045][T14873] device veth1_macvtap entered promiscuous mode [ 1067.519406][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.541261][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.587675][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.631547][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.649455][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.660218][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.673184][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.683862][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.729567][T14873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.790931][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1067.805229][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1067.829032][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1067.858332][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1068.013472][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.038329][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.081210][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.093235][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.121953][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.154782][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.191725][T14873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.220915][T14873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.253838][T14873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.281384][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1068.307384][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1068.366296][T14873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.396240][T14873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.405031][T14873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.451743][T14873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.671088][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.710596][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.747271][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1068.813247][ T8859] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.827143][ T8859] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.863609][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1069.347239][T15171] input: syz1 as /devices/virtual/input/input14 [ 1070.093395][T15050] Set syz1 is full, maxelem 65536 reached [ 1071.056934][ T8960] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1071.262441][ T8960] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1071.281506][ T8960] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.321622][ T8960] usb 8-1: config 0 descriptor?? [ 1072.177254][ T8960] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1072.186894][ T8960] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1072.206354][ T8960] [drm:udl_init] *ERROR* Selecting channel failed [ 1072.233972][ T8960] [drm] Initialized udl 0.0.1 20120220 for 8-1:0.0 on minor 2 [ 1072.252539][ T8960] [drm] Initialized udl on minor 2 [ 1072.274223][ T8960] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1072.294078][ T8960] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1072.371205][ T8960] usb 8-1: USB disconnect, device number 4 [ 1072.410491][T15268] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1072.420931][ T8971] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1072.435805][ T8971] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1072.454913][T15268] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1072.464552][ T8971] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 1072.482490][T15268] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2463'. [ 1072.543236][T15268] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1075.561560][T15329] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2475'. [ 1076.324859][ T4611] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1076.631253][ T4611] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1076.775859][ T4611] usb 8-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1076.925714][ T4611] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1076.940688][ T4611] usb 8-1: Product: syz [ 1076.949574][ T4611] usb 8-1: Manufacturer: syz [ 1076.965104][ T4611] usb 8-1: SerialNumber: syz [ 1077.452563][ T4611] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 1079.420071][ T8960] usb 8-1: USB disconnect, device number 5 [ 1079.441856][ T8960] usblp0: removed [ 1079.571565][T15407] device gretap1 entered promiscuous mode [ 1080.275738][T15419] loop4: detected capacity change from 0 to 128 [ 1080.292074][T15419] FAT-fs (loop4): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1) [ 1082.117844][T15457] netlink: 'syz.6.2507': attribute type 4 has an invalid length. [ 1082.318850][T15457] netlink: 'syz.6.2507': attribute type 4 has an invalid length. [ 1083.507956][T15480] loop7: detected capacity change from 0 to 128 [ 1084.808433][T15498] loop7: detected capacity change from 0 to 2048 [ 1084.868380][T15498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1085.991372][ T4293] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1086.010215][ T4293] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1086.035581][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1086.048458][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1086.058750][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1086.067045][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1086.157452][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2525'. [ 1086.170433][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1086.204846][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1088.387534][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1088.646177][T15516] chnl_net:caif_netlink_parms(): no params data found [ 1088.843368][T15539] tipc: Enabling of bearer rejected, failed to enable media [ 1089.072053][T15516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.091088][T15516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.124880][T15516] device bridge_slave_0 entered promiscuous mode [ 1089.216190][T15516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.241785][T15516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.295844][T15516] device bridge_slave_1 entered promiscuous mode [ 1089.438573][T15516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.514888][T15516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.695059][T15516] team0: Port device team_slave_0 added [ 1089.811155][T15516] team0: Port device team_slave_1 added [ 1089.910137][T15516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.940093][T15516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.097509][T15516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1090.167766][T15516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.193391][T15516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.308974][T15516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.442189][T15567] loop7: detected capacity change from 0 to 16 [ 1090.497359][T15567] erofs: (device loop7): mounted with root inode @ nid 36. [ 1090.509208][T15516] device hsr_slave_0 entered promiscuous mode [ 1090.599047][ T48] Bluetooth: hci1: command 0x041b tx timeout [ 1090.619133][T15516] device hsr_slave_1 entered promiscuous mode [ 1090.689551][T15516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.730461][T15516] Cannot create hsr debugfs directory [ 1093.202768][ T48] Bluetooth: hci1: command 0x040f tx timeout [ 1095.385820][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1095.455234][T15632] netlink: 'syz.9.2544': attribute type 4 has an invalid length. [ 1095.519915][T15630] netlink: 'syz.9.2544': attribute type 4 has an invalid length. [ 1097.095771][T11553] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1097.308817][T15516] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1097.315843][T11553] usb 8-1: Using ep0 maxpacket: 32 [ 1097.325005][T11553] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1097.347435][T15516] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1097.355527][T11553] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1097.394882][T11553] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1097.426620][T11553] usb 8-1: Product: syz [ 1097.431150][T11553] usb 8-1: Manufacturer: syz [ 1097.441226][T11553] usb 8-1: SerialNumber: syz [ 1097.467371][T11553] usb 8-1: config 0 descriptor?? [ 1097.484133][T15645] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1097.513274][T11553] hub 8-1:0.0: bad descriptor, ignoring hub [ 1097.519260][T11553] hub: probe of 8-1:0.0 failed with error -5 [ 1097.533149][T15516] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1097.589228][T15516] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1098.020347][T15516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.063657][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1098.103174][T11905] usb 8-1: USB disconnect, device number 6 [ 1098.111808][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1098.152790][T15516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.248289][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1098.269885][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1098.329272][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.336545][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.387822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1098.413662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1098.462804][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.470101][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.500231][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1098.516449][T11905] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1098.554538][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1098.601670][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1098.647360][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1098.746694][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1098.756675][T11905] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 1098.779342][T11905] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1098.789925][ T8859] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1098.812860][T11905] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1098.848340][T11905] usb 8-1: Product: syz [ 1098.853084][T11905] usb 8-1: Manufacturer: syz [ 1098.857739][T11905] usb 8-1: SerialNumber: syz [ 1098.866082][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1098.888269][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1098.912524][T11905] usb 8-1: config 0 descriptor?? [ 1098.918362][T15661] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1098.934416][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1098.957874][T11905] hub 8-1:0.0: bad descriptor, ignoring hub [ 1098.971071][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1098.978287][T11905] hub: probe of 8-1:0.0 failed with error -5 [ 1099.042964][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1099.089557][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1099.122634][T15516] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1099.328999][ T8971] usb 8-1: USB disconnect, device number 7 [ 1099.683269][T15690] block device autoloading is deprecated and will be removed. [ 1100.563397][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1100.584365][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1100.615278][T15516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1101.309019][T15728] loop2: detected capacity change from 0 to 7 [ 1101.360307][T13253] Dev loop2: unable to read RDB block 7 [ 1101.366016][T13253] loop2: unable to read partition table [ 1101.393376][T13253] loop2: partition table beyond EOD, truncated [ 1101.423625][T15728] Dev loop2: unable to read RDB block 7 [ 1101.429386][T15728] loop2: unable to read partition table [ 1101.491710][T15728] loop2: partition table beyond EOD, truncated [ 1101.531498][T15728] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1101.593239][ T3638] Dev loop2: unable to read RDB block 7 [ 1101.609501][ T3638] loop2: unable to read partition table [ 1101.643235][ T3638] loop2: partition table beyond EOD, truncated [ 1102.317260][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1102.333013][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1102.426674][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1102.457369][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1102.505301][T15516] device veth0_vlan entered promiscuous mode [ 1102.513596][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1102.557138][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1102.595164][T15516] device veth1_vlan entered promiscuous mode [ 1102.701960][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1102.723334][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1102.793265][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1102.855324][T12005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1102.891348][T15516] device veth0_macvtap entered promiscuous mode [ 1102.927311][T15516] device veth1_macvtap entered promiscuous mode [ 1103.042212][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.107434][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.161437][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.194508][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.256232][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.310380][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.352274][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.400653][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.461055][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1103.516950][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.556792][T15516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1103.597976][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1103.608168][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1103.646050][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1103.687584][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1103.734747][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.783973][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.854561][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1103.911886][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1103.964756][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.015171][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.071778][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.119288][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.160438][T15516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1104.197936][T15516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1104.244683][T15516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1104.284187][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1104.309453][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1104.369076][T15764] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2576'. [ 1104.397274][T15516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.425033][T15516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.485914][T15516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.498105][T15516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1104.894394][ T8855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1104.906521][ T8855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.065198][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1105.141158][ T8855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1105.149095][ T8855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1105.200747][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1105.292163][T15688] syz.1.2560 (15688): drop_caches: 3 [ 1105.939187][T15796] loop5: detected capacity change from 0 to 128 [ 1106.076388][ T26] audit: type=1800 audit(1784694721.327:151): pid=15796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2581" name="bus" dev="loop5" ino=1048700 res=0 errno=0 [ 1109.317672][T15812] loop7: detected capacity change from 0 to 32768 [ 1109.557676][T15812] JBD2: Ignoring recovery information on journal [ 1109.852588][T15812] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1109.859001][T15861] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2601'. [ 1110.216257][T14873] ocfs2: Unmounting device (7,7) on (node local) [ 1112.561844][T15921] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 1112.774599][T15928] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2617'. [ 1113.283768][T15939] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2620'. [ 1113.371096][T15940] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2620'. [ 1113.478325][ T3598] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1115.124771][ T3598] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1115.151163][ T3598] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.201184][ T3598] usb 6-1: config 0 descriptor?? [ 1115.280544][T15962] loop7: detected capacity change from 0 to 512 [ 1115.420632][T15962] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 1115.644118][T15962] loop7: detected capacity change from 512 to 0 [ 1115.662524][ C0] I/O error, dev loop7, sector 280 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1115.672362][ C0] I/O error, dev loop7, sector 288 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1115.672391][T15962] EXT4-fs error (device loop7): ext4_get_inode_loc:4658: inode #12: block 35: comm syz.7.2625: unable to read itable block [ 1115.682155][ C0] I/O error, dev loop7, sector 272 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1115.709981][T15971] loop2: detected capacity change from 0 to 7 [ 1115.771748][T13253] loop2: [ 1115.780892][T13253] loop2: partition table partially beyond EOD, truncated [ 1115.826072][ T4581] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1115.835495][T15971] loop2: [ 1115.844422][T15971] loop2: partition table partially beyond EOD, truncated [ 1115.858766][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1115.868373][ C0] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1115.879080][ C0] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 1115.887439][T15962] EXT4-fs (loop7): I/O error while writing superblock [ 1116.073600][ C1] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1116.202388][ C0] I/O error, dev loop7, sector 272 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1116.212182][ C0] I/O error, dev loop7, sector 280 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 1116.212183][T14873] EXT4-fs error (device loop7): ext4_get_inode_loc:4658: inode #2: block 34: comm syz-executor: unable to read itable block [ 1116.328142][ T11] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1116.338704][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1116.348262][ C1] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1116.357781][ C1] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 1116.367707][T14873] EXT4-fs (loop7): I/O error while writing superblock [ 1116.379307][T14873] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5952: IO failure [ 1116.394452][ T11] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1116.424339][ C1] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 1116.432729][T14873] EXT4-fs (loop7): I/O error while writing superblock [ 1116.441062][ T3598] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1116.450223][ T3598] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1116.456259][T14873] EXT4-fs error (device loop7): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 1116.477734][ T3598] [drm:udl_init] *ERROR* Selecting channel failed [ 1116.508294][ T68] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1116.532191][ T3598] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 1116.534087][ C0] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 1116.548191][T14873] EXT4-fs (loop7): I/O error while writing superblock [ 1116.556153][ T3598] [drm] Initialized udl on minor 2 [ 1116.573654][ T3598] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1116.579729][ T68] EXT4-fs error (device loop7): __ext4_get_inode_loc_noinmem:4643: inode #2: block 34: comm kworker/u4:4: unable to read itable block [ 1116.616399][ T3598] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1116.635518][T11904] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1116.668611][ T3598] usb 6-1: USB disconnect, device number 10 [ 1116.698529][ C0] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 1116.703372][ T8960] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1116.707251][ T68] EXT4-fs (loop7): I/O error while writing superblock [ 1116.732160][ T8960] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1116.741177][T14873] EXT4-fs (loop7): unmounting filesystem. [ 1116.755420][ T8960] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1116.796504][ T8859] loop: Write error at byte offset 9223372036854775807, length 4096. [ 1116.856624][ C1] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 1116.865004][T14873] EXT4-fs (loop7): I/O error while writing superblock [ 1117.549397][T11904] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.450866][T11904] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.700430][T11904] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.913894][T11904] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1124.187206][T13369] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1124.203184][T13369] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1124.212124][ T4293] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1124.224972][T13369] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1124.232632][T13369] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1124.240952][T13369] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1125.174958][ T8960] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1125.379964][ T8960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.399155][ T8960] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.411721][T16101] overlayfs: failed to clone lowerpath [ 1125.417372][ T8960] usb 6-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1125.439360][ T8960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.462058][ T8960] usb 6-1: config 0 descriptor?? [ 1126.771200][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1126.874182][T16067] chnl_net:caif_netlink_parms(): no params data found [ 1127.003056][T11904] device hsr_slave_0 left promiscuous mode [ 1127.066199][T11904] device hsr_slave_1 left promiscuous mode [ 1127.098246][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.105845][T11904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.208038][T11904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.226422][T11904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.240675][ T8960] hid-led 0003:27B8:01ED.0014: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.5-1/input0 [ 1127.252296][T11904] device bridge_slave_1 left promiscuous mode [ 1127.269109][T11904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.306736][ T8960] hid-led 0003:27B8:01ED.0014: ThingM blink(1) initialized [ 1127.337112][T11904] device bridge_slave_0 left promiscuous mode [ 1127.343511][T11904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.458779][ T128] usb 6-1: USB disconnect, device number 11 [ 1127.576916][T11904] device veth1_macvtap left promiscuous mode [ 1127.598455][T11904] device veth0_macvtap left promiscuous mode [ 1127.630660][T11904] device veth1_vlan left promiscuous mode [ 1127.652225][T11904] device veth0_vlan left promiscuous mode [ 1127.812320][T16125] fido_id[16125]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1128.669288][T16114] overlayfs: failed to clone upperpath [ 1128.978954][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1130.788607][T11904] team0 (unregistering): Port device team_slave_1 removed [ 1130.938069][T11904] team0 (unregistering): Port device team_slave_0 removed [ 1131.055451][T11904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.191866][T11904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.201217][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1131.894516][T16175] overlayfs: failed to clone upperpath [ 1132.228951][T11904] bond0 (unregistering): Released all slaves [ 1132.237637][T15748] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1132.440422][T15748] usb 2-1: Using ep0 maxpacket: 32 [ 1132.449981][T15748] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1132.478405][T15748] usb 2-1: config 0 has no interface number 0 [ 1132.503327][T15748] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1132.534497][T15748] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1132.577425][T15748] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1132.606726][T15748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.632406][T15748] usb 2-1: Product: syz [ 1132.650219][T15748] usb 2-1: Manufacturer: syz [ 1132.666758][T15748] usb 2-1: SerialNumber: syz [ 1132.680974][T15748] usb 2-1: config 0 descriptor?? [ 1132.895646][T16067] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.918122][T15748] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1132.963914][T16067] bridge0: port 1(bridge_slave_0) entered disabled state [ 1132.972378][T16067] device bridge_slave_0 entered promiscuous mode [ 1133.042880][T15748] cx231xx 2-1:0.1: Failed to read PCB config [ 1133.049047][T15748] cx231xx: probe of 2-1:0.1 failed with error -71 [ 1133.059858][T16067] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.105051][T16067] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.124333][T15748] usb 2-1: USB disconnect, device number 18 [ 1133.140211][T16067] device bridge_slave_1 entered promiscuous mode [ 1133.258464][T16067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1133.351644][T16067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1133.426689][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1133.448747][T16067] team0: Port device team_slave_0 added [ 1133.504000][T16067] team0: Port device team_slave_1 added [ 1133.541084][T15748] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1133.553569][T16067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1133.560804][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.601501][T16067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1133.632115][T16067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1133.649294][T16067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1133.683128][T16219] loop5: detected capacity change from 0 to 512 [ 1133.711760][T16219] EXT4-fs (loop5): can't mount with commit=9, fs mounted w/o journal [ 1133.726582][T16067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1133.737578][T15748] usb 2-1: Using ep0 maxpacket: 32 [ 1133.756382][T15748] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1133.786591][T15748] usb 2-1: config 0 has no interface number 0 [ 1133.800109][T15748] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1133.830868][T15748] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1133.871104][T15748] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1133.891374][T15748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.902206][T15748] usb 2-1: Product: syz [ 1133.906575][T15748] usb 2-1: Manufacturer: syz [ 1133.911269][T15748] usb 2-1: SerialNumber: syz [ 1133.991495][T15748] usb 2-1: config 0 descriptor?? [ 1134.114185][T16067] device hsr_slave_0 entered promiscuous mode [ 1134.134040][T16067] device hsr_slave_1 entered promiscuous mode [ 1134.157009][T16229] tipc: Enabling of bearer rejected, failed to enable media [ 1134.229901][T15748] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1134.282703][T15748] cx231xx 2-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 1134.428244][T15748] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 1134.449147][T15748] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1134.481195][T15748] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 1134.522688][T15748] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1134.563480][T15748] cx231xx 2-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 1134.602175][T15748] cx231xx 2-1:0.1: Failed to set devmode to analog: error: -71 [ 1134.696016][T15748] i2c i2c-2: Added multiplexed i2c bus 4 [ 1134.737193][T15748] i2c i2c-2: Added multiplexed i2c bus 5 [ 1134.762978][T15748] cx231xx 2-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 1134.823746][T15748] cx231xx 2-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 1134.927350][T15748] cx231xx: probe of 2-1:0.1 failed with error -71 [ 1134.964851][T15748] usb 2-1: USB disconnect, device number 19 [ 1135.609712][T16067] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1135.661687][T16067] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1136.276140][T16067] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1136.371563][T16067] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1136.697430][T16259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2699'. [ 1136.733165][T16067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1136.800437][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1137.859214][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1137.906153][T16067] 8021q: adding VLAN 0 to HW filter on device team0 [ 1137.963749][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1137.988258][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1138.040342][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1138.047519][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1138.145088][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1138.203614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1138.241198][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1138.266673][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1138.273854][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1138.325825][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1138.392177][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1138.455986][ T3598] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1138.465871][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1138.506452][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1138.567710][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1138.627369][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1138.649517][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1138.672164][ T3598] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.683327][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1138.691291][ T3598] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1138.691381][ T3598] usb 2-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1138.691407][ T3598] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.726700][ T3598] usb 2-1: config 0 descriptor?? [ 1138.802219][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1138.840457][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1138.849031][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1138.903751][T16067] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1139.301614][T16291] tipc: Enabling of bearer rejected, failed to enable media [ 1139.715053][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1139.740705][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1139.780823][T16067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1139.858467][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1139.881719][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1139.946998][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1139.968656][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1140.008383][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1140.040676][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1140.066002][T16067] device veth0_vlan entered promiscuous mode [ 1141.600139][T16067] device veth1_vlan entered promiscuous mode [ 1141.624371][ T4612] usb 2-1: USB disconnect, device number 20 [ 1141.695328][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1141.717219][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1141.750004][T16067] device veth0_macvtap entered promiscuous mode [ 1141.773068][T16067] device veth1_macvtap entered promiscuous mode [ 1141.807784][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.825629][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.853554][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.902845][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.920788][T16327] overlayfs: failed to clone upperpath [ 1141.949671][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1141.968546][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1141.989786][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.000517][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.017371][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1142.041234][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.096764][T16067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1142.132778][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1142.141235][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1142.166537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1142.185652][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1142.230516][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.248890][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.258779][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.316089][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.334312][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.366215][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.387234][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.419955][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.430700][T16067] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1142.452198][T16067] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1142.474781][T16067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1142.482611][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1142.533010][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1142.570840][T16067] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.579654][T16067] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.607813][T16067] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.652860][T16067] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.674083][ T4323] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1142.892464][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1142.908140][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.925219][ T4323] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1142.954742][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.964915][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.009638][ T4323] usb 2-1: config 0 descriptor?? [ 1143.009658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1143.045033][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1143.065707][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.107803][ T68] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1143.254542][ T4323] usbhid 2-1:0.0: can't add hid device: -71 [ 1143.274755][ T4323] usbhid: probe of 2-1:0.0 failed with error -71 [ 1143.305314][ T4323] usb 2-1: USB disconnect, device number 21 [ 1144.573256][T16370] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2720'. [ 1144.963046][ T4323] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1145.178515][ T4323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.213778][ T4323] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1145.251614][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.309028][ T4323] usb 2-1: config 0 descriptor?? [ 1145.797577][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2730'. [ 1146.154590][T16405] overlayfs: failed to clone upperpath [ 1146.192477][ T4323] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 1146.208422][ T4323] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15 [ 1146.627516][T15748] usb 2-1: USB disconnect, device number 22 [ 1151.814828][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.821215][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1152.162293][T16468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1152.356318][T16476] netlink: 76 bytes leftover after parsing attributes in process `syz.9.2751'. [ 1152.471393][T16477] loop3: detected capacity change from 0 to 512 [ 1152.596753][T16477] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1152.709701][T16477] EXT4-fs (loop3): 1 truncate cleaned up [ 1152.741456][T16477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1153.309030][T16477] loop3: detected capacity change from 512 to 0 [ 1153.500740][ C0] blk_print_req_error: 10 callbacks suppressed [ 1153.500760][ C0] I/O error, dev loop3, sector 18 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1153.534322][ C1] I/O error, dev loop3, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1153.542757][T16489] EXT4-fs error (device loop3): ext4_get_inode_loc:4658: inode #18: block 9: comm syz.3.2752: unable to read itable block [ 1153.571293][ C0] I/O error, dev loop3, sector 10 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 2 [ 1153.651251][ T4581] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1153.668350][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1153.678005][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1153.687519][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1153.695942][T16489] EXT4-fs (loop3): I/O error while writing superblock [ 1153.711121][T16489] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: IO failure [ 1153.725431][ T4581] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1153.746330][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1153.755945][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1153.765475][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1153.787548][T16489] EXT4-fs (loop3): I/O error while writing superblock [ 1153.796453][T16489] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #18: comm syz.3.2752: mark_inode_dirty error [ 1153.819365][ T68] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1153.841188][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1153.850820][ C0] I/O error, dev loop3, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 1153.860373][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1153.874184][T16489] EXT4-fs (loop3): I/O error while writing superblock [ 1153.881204][ C1] I/O error, dev loop3, sector 70 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 1154.032293][T16067] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 1154.080064][T16067] EXT4-fs error (device loop3): ext4_get_inode_loc:4658: inode #2: block 5: comm syz-executor: unable to read itable block [ 1154.115145][ T8861] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1154.136430][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1154.144815][T16067] EXT4-fs (loop3): I/O error while writing superblock [ 1154.155357][T16067] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: IO failure [ 1154.183328][ T46] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1154.208457][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1154.216839][T16067] EXT4-fs (loop3): I/O error while writing superblock [ 1154.228432][T16067] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 1154.297210][ T4854] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1154.316847][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1154.325256][T16067] EXT4-fs (loop3): I/O error while writing superblock [ 1154.410751][ T4500] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4643: inode #18: block 9: comm kworker/u4:9: unable to read itable block [ 1154.460597][ T46] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1154.498805][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1154.502872][T16515] overlayfs: failed to clone upperpath [ 1154.512958][ T4500] EXT4-fs (loop3): I/O error while writing superblock [ 1154.523434][ T4500] EXT4-fs error (device loop3): __ext4_get_inode_loc_noinmem:4643: inode #2: block 5: comm kworker/u4:9: unable to read itable block [ 1154.560401][ T8859] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1154.600394][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1154.608779][ T4500] EXT4-fs (loop3): I/O error while writing superblock [ 1154.645358][T16067] EXT4-fs (loop3): unmounting filesystem. [ 1154.681519][ T8861] loop: Write error at byte offset 9223372036854776831, length 1024. [ 1154.696678][ C0] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 1154.883235][T16524] overlayfs: failed to get index nlink (file0/file2, err=-61) [ 1155.330630][ T8861] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.501882][ T8861] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.690945][ T8861] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.844099][ T8861] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.658768][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1156.672701][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1156.694865][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1156.707472][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1156.715226][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1156.741507][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1157.993211][T16600] device wlan1 entered promiscuous mode [ 1158.981545][T13369] Bluetooth: hci2: command 0x0409 tx timeout [ 1159.250612][T16617] kvm: pic: non byte write [ 1159.319597][T16565] chnl_net:caif_netlink_parms(): no params data found [ 1159.576515][T16633] loop5: detected capacity change from 0 to 16 [ 1159.634311][T16633] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1159.650449][T16565] bridge0: port 1(bridge_slave_0) entered blocking state [ 1159.658092][T16565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.713337][T16565] device bridge_slave_0 entered promiscuous mode [ 1159.759073][T16633] cramfs: Unknown parameter '0xffffffffffffffff0x00000000000000000x00000000000000000x00000000000000000xffffffffffffffff18446744073709551615ÿÿÿÿ18446744073709551615¬-[[‰EÕ~xidŽ¾¸Òq—c´¿?fg¿r&Ò³Y?&!Žš_º.}Afx}§7³€_°¦‚â‘RqòÀ)a· rejected, failed to enable media [ 1167.580719][T16565] team0: Port device team_slave_0 added [ 1167.644149][T16565] team0: Port device team_slave_1 added [ 1167.797786][T16565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.804809][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.934968][T16565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1168.010347][T16565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1168.017370][T16565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1168.276718][T16565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.766362][T16565] device hsr_slave_0 entered promiscuous mode [ 1169.798104][T16565] device hsr_slave_1 entered promiscuous mode [ 1171.569457][T16820] loop5: detected capacity change from 0 to 16 [ 1171.629542][T16820] erofs: (device loop5): mounted with root inode @ nid 36. [ 1171.846559][T16823] erofs: (device loop5): erofs_find_target_block: corrupted dir block 0 @ nid 36 [ 1171.908602][T16820] erofs: (device loop5): erofs_map_blocks_flatmode: internal error @ nid: 36 (size 18446462598732841076), m_la 0x1000 [ 1173.850504][T16565] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1173.900205][T16565] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1173.931286][T16565] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1173.962314][T16565] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1174.041840][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2836'. [ 1174.126392][T16866] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1174.147746][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2836'. [ 1174.283381][T16862] device bond2 entered promiscuous mode [ 1174.315471][T16862] device bridge1 entered promiscuous mode [ 1174.346568][T16862] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1174.481132][T16565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1174.531743][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1174.548333][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1174.583869][T16565] 8021q: adding VLAN 0 to HW filter on device team0 [ 1174.609764][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1174.624593][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1174.644368][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.651662][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1174.695258][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1174.704436][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1174.714047][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1174.728774][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1174.736053][T12033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1174.773607][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1174.812870][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1174.841320][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1174.887200][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1174.926697][T16886] overlayfs: failed to clone lowerpath [ 1174.941219][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1174.951570][T16886] overlayfs: failed to clone lowerpath [ 1174.976686][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1174.985939][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1175.000764][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1175.017150][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1175.036279][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1175.047691][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1175.167063][T16565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1178.474871][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1178.483508][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1178.498652][T16565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.535175][T16922] device syzkaller0 entered promiscuous mode [ 1178.553246][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1178.572863][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1179.428228][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1179.437132][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1179.448106][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1179.461355][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1179.488827][T16565] device veth0_vlan entered promiscuous mode [ 1179.564088][T16565] device veth1_vlan entered promiscuous mode [ 1179.848526][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1179.865978][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1180.624520][T16565] device veth0_macvtap entered promiscuous mode [ 1181.670303][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1181.744766][T16565] device veth1_macvtap entered promiscuous mode [ 1181.773530][T16954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2856'. [ 1181.793544][T16954] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1181.834445][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.874972][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.916626][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.927562][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.937701][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.948624][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.960056][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.971429][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1181.982619][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1181.994279][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.024851][T16565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1182.055303][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1182.075317][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1182.106574][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.128756][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.176707][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.181030][ T8960] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1182.198299][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.303326][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.357663][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.400989][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1182.449059][ T8960] usb 2-1: Using ep0 maxpacket: 16 [ 1182.464315][ T8960] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.485871][ T8960] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1182.502322][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1182.519245][ T8960] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1182.564920][ T8960] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.619822][ T8960] usb 2-1: Product: syz [ 1182.644695][ T8960] usb 2-1: Manufacturer: syz [ 1182.668518][ T8960] usb 2-1: SerialNumber: syz [ 1183.156795][ T8960] usb 2-1: 0:2 : does not exist [ 1183.194217][ T8960] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1183.214353][T16565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1183.264343][T16565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1183.275852][T16565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1183.284951][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1183.321616][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1183.348207][T16565] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.367185][T16565] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.380018][ T8960] usb 2-1: USB disconnect, device number 23 [ 1183.402385][T16565] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.432180][T16565] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1183.655772][T16482] udevd[16482]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1183.731048][ T4500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.762394][ T4500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.832071][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1183.923090][ T4500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.949154][ T4500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.978327][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1186.781345][T16995] device syzkaller0 entered promiscuous mode [ 1191.336755][T17053] xt_recent: Unsupported userspace flags (000000de) [ 1191.551419][T17061] loop2: detected capacity change from 0 to 1024 [ 1191.560375][T17061] EXT4-fs: Ignoring removed orlov option [ 1191.610740][T17061] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1192.413358][T16565] EXT4-fs (loop2): unmounting filesystem. [ 1198.326562][T17113] device syzkaller0 entered promiscuous mode [ 1198.930170][T17123] overlayfs: failed to clone lowerpath [ 1198.941053][T17123] overlayfs: failed to clone lowerpath [ 1199.438218][T17136] loop5: detected capacity change from 0 to 256 [ 1199.588718][T17099] blk_print_req_error: 19 callbacks suppressed [ 1199.588738][T17099] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1200.822205][T17165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1201.860893][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1201.870156][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1201.979960][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1202.019128][T17171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2911'. [ 1202.445353][T17185] device syzkaller0 entered promiscuous mode [ 1205.462202][ T4608] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1206.051380][ T4608] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1206.124254][ T4608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.144751][ T4608] usb 6-1: Product: syz [ 1206.162423][ T4608] usb 6-1: Manufacturer: syz [ 1206.184053][ T4608] usb 6-1: SerialNumber: syz [ 1206.184323][T17226] netlink: 550 bytes leftover after parsing attributes in process `syz.6.2927'. [ 1206.462026][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1207.989305][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 1209.036318][T17245] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1209.107055][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1209.117866][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1209.142539][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 1209.165566][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1209.195186][T17247] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2933'. [ 1209.615551][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1209.828678][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 1209.976597][T17255] device gtp0 entered promiscuous mode [ 1210.120363][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 1210.177778][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 1210.224192][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 1210.255009][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 1210.271739][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 1210.284385][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 1210.307686][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1210.458841][ T4608] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1210.469727][ T4608] lan78xx: probe of 6-1:1.0 failed with error -71 [ 1210.481816][ T4608] usb 6-1: USB disconnect, device number 12 [ 1212.720272][ T4323] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1212.910498][T17291] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 1212.933212][ T4323] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1212.952893][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.000312][ T4323] usb 3-1: config 0 descriptor?? [ 1213.006537][ T4608] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1213.220004][ T4608] usb 6-1: Using ep0 maxpacket: 8 [ 1213.242613][ T4608] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1213.261557][ T4608] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.281973][ T4608] usb 6-1: Product: syz [ 1213.293233][ T4608] usb 6-1: Manufacturer: syz [ 1213.312891][ T4608] usb 6-1: SerialNumber: syz [ 1213.334931][ T4608] usb 6-1: config 0 descriptor?? [ 1213.372175][ T4608] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1214.512986][ T4608] gspca_sonixj: reg_w1 err -110 [ 1214.518162][ T4608] sonixj: probe of 6-1:0.0 failed with error -110 [ 1215.132965][ T4608] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1215.294458][ T4323] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 1215.361251][ T4323] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 1215.406399][ T4323] [drm:udl_init] *ERROR* Selecting channel failed [ 1215.441274][ T4608] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1215.514151][ T4608] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1215.732695][ T4608] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.751216][ T4608] usb 2-1: config 0 descriptor?? [ 1215.758991][ T4323] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 1215.768110][ T4323] [drm] Initialized udl on minor 2 [ 1215.776364][ T4608] pwc: Askey VC010 type 2 USB webcam detected. [ 1215.827412][ T4323] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1215.835651][ T4323] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1215.862577][ T4323] usb 3-1: USB disconnect, device number 2 [ 1215.869369][ T4612] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1215.892472][ T4612] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1215.911278][ T4612] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 1215.929412][ T8970] usb 6-1: USB disconnect, device number 13 [ 1217.195750][ T4608] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1217.216155][ T4608] pwc: recv_control_msg error -32 req 02 val 2700 [ 1217.236283][ T4608] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1217.255243][ T4608] pwc: recv_control_msg error -32 req 04 val 1000 [ 1217.266001][ T4608] pwc: recv_control_msg error -32 req 04 val 1300 [ 1217.292445][ T4608] pwc: recv_control_msg error -32 req 04 val 1400 [ 1217.335367][ T4608] pwc: recv_control_msg error -32 req 02 val 2000 [ 1217.383719][ T4608] pwc: recv_control_msg error -32 req 02 val 2100 [ 1217.398388][ T4608] pwc: recv_control_msg error -32 req 04 val 1500 [ 1217.421194][ T4608] pwc: recv_control_msg error -32 req 02 val 2500 [ 1217.447117][ T4608] pwc: recv_control_msg error -32 req 02 val 2400 [ 1217.454044][ T8970] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1217.458304][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1217.458404][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1217.644154][ T8970] usb 6-1: Using ep0 maxpacket: 32 [ 1217.651482][ T8970] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1217.682091][ T8970] usb 6-1: config 0 has no interface number 0 [ 1217.692921][ T8970] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1217.715952][ T8970] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1217.740092][ T8970] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.769848][ T8970] usb 6-1: Product: syz [ 1217.775140][ T8970] usb 6-1: Manufacturer: syz [ 1217.779798][ T8970] usb 6-1: SerialNumber: syz [ 1217.820580][ T4608] pwc: recv_control_msg error -71 req 02 val 2900 [ 1217.836869][ T8970] usb 6-1: config 0 descriptor?? [ 1217.847327][ T4608] pwc: recv_control_msg error -71 req 02 val 2800 [ 1217.875750][ T4608] pwc: recv_control_msg error -71 req 04 val 1100 [ 1217.893465][ T4608] pwc: recv_control_msg error -71 req 04 val 1200 [ 1218.017539][ T8970] smsc75xx v1.0.0 [ 1219.015492][ T4608] pwc: Registered as video103. [ 1219.030042][ T4608] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 1219.076627][ T4608] usb 2-1: USB disconnect, device number 24 [ 1219.498922][ T8970] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1219.580764][ T8970] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1219.674392][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 1222.029677][ T8970] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 1222.089381][ T8970] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 1222.099026][ T8970] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1222.168584][ T8970] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 1222.212849][ T8970] usb 6-1: USB disconnect, device number 14 [ 1223.389900][T17402] loop5: detected capacity change from 0 to 64 [ 1223.432670][T17402] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 1224.512334][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2967'. [ 1226.595469][T17412] team0: Port device team_slave_0 removed [ 1226.667717][T17427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1232.108892][T17474] device syzkaller0 entered promiscuous mode [ 1237.415721][ T26] audit: type=1326 audit(1784694844.246:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17509 comm="syz.2.2987" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8074f9de99 code=0x0 [ 1241.695504][T17553] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2996'. [ 1250.178582][T13369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1250.194555][T13369] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1250.203935][T13369] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1250.212457][T13369] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1250.220504][T13369] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1250.242126][T13369] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1252.501926][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 1253.359498][T17602] chnl_net:caif_netlink_parms(): no params data found [ 1254.831938][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 1254.859047][T13369] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1254.873754][T13369] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1254.892484][T13369] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1254.901248][T13369] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1254.911669][T13369] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1254.919051][T13369] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.118768][T13369] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1255.135442][T13369] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1255.311284][T13369] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1255.319857][T13369] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1255.328293][T13369] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1255.335862][T13369] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1256.249698][T17602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.275746][T17602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.300822][T17602] device bridge_slave_0 entered promiscuous mode [ 1256.532636][ T5923] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1256.603425][T17602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.629227][T17602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.651194][T17602] device bridge_slave_1 entered promiscuous mode [ 1256.695075][T17661] tipc: Enabling of bearer rejected, failed to enable media [ 1257.627890][T13369] Bluetooth: hci3: command 0x0409 tx timeout [ 1257.636557][T13369] Bluetooth: hci5: command 0x040f tx timeout [ 1257.644622][ T48] Bluetooth: hci1: command 0x0409 tx timeout [ 1257.790003][ T5923] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.008124][T17602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.045477][T17602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.086282][ T5923] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.165427][T17602] team0: Port device team_slave_0 added [ 1259.266675][ T5923] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1259.306861][T17602] team0: Port device team_slave_1 added [ 1259.422461][T17602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.430216][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.456841][T17602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.512608][T17602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1259.519656][T17602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.608145][T17602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1259.725084][T17645] chnl_net:caif_netlink_parms(): no params data found [ 1259.853887][T13369] Bluetooth: hci5: command 0x0419 tx timeout [ 1259.859984][T13369] Bluetooth: hci1: command 0x041b tx timeout [ 1259.864872][ T48] Bluetooth: hci3: command 0x041b tx timeout [ 1259.899239][T17602] device hsr_slave_0 entered promiscuous mode [ 1259.918226][T17602] device hsr_slave_1 entered promiscuous mode [ 1259.927692][T17602] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1259.936515][T17602] Cannot create hsr debugfs directory [ 1260.008466][T17642] chnl_net:caif_netlink_parms(): no params data found [ 1261.766231][T17645] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.790649][T17645] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.847497][T17645] device bridge_slave_0 entered promiscuous mode [ 1262.132066][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 1262.139393][T13369] Bluetooth: hci1: command 0x040f tx timeout [ 1262.595493][T17645] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.610282][T17645] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.641513][T17645] device bridge_slave_1 entered promiscuous mode [ 1262.678234][T17642] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.689629][T17642] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.718922][T17642] device bridge_slave_0 entered promiscuous mode [ 1262.719857][T17724] loop2: detected capacity change from 0 to 64 [ 1262.760326][T17724] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing [ 1262.903808][T17642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.916134][T17642] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.967474][T17642] device bridge_slave_1 entered promiscuous mode [ 1263.111285][T17645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.168172][T17642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.224375][T17645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.746806][T17642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1264.352546][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 1264.359017][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 1264.449757][T17645] team0: Port device team_slave_0 added [ 1265.356817][T17642] team0: Port device team_slave_0 added [ 1265.505341][T17645] team0: Port device team_slave_1 added [ 1266.889521][T17642] team0: Port device team_slave_1 added [ 1267.168246][T17645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.180521][T17645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.218555][T17645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.557252][T17642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.588231][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.623934][T17642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.643585][T17645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.661864][T17645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.791889][T17645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.068518][T17642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1268.136191][T17642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1268.256107][T17642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.383675][T17642] device hsr_slave_0 entered promiscuous mode [ 1268.409247][T17642] device hsr_slave_1 entered promiscuous mode [ 1268.432919][T17642] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1268.455577][T17642] Cannot create hsr debugfs directory [ 1269.245128][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3034'. [ 1269.255070][T17774] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3034'. [ 1271.899923][ T5923] device hsr_slave_0 left promiscuous mode [ 1271.939047][ T5923] device hsr_slave_1 left promiscuous mode [ 1271.946201][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.970846][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1272.007489][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1272.022412][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1272.034225][ T5923] device bridge_slave_1 left promiscuous mode [ 1272.059149][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.083561][ T5923] device bridge_slave_0 left promiscuous mode [ 1272.098899][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.177432][ T5923] device veth1_macvtap left promiscuous mode [ 1272.183578][ T5923] device veth0_macvtap left promiscuous mode [ 1272.200023][ T5923] device veth1_vlan left promiscuous mode [ 1272.205932][ T5923] device veth0_vlan left promiscuous mode [ 1276.419184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1276.723842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.096738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1277.506216][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 1277.849392][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.376942][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.315095][ T5923] bond0 (unregistering): Released all slaves [ 1279.362425][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051ae9800: rx timeout, send abort [ 1279.388622][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888051ae9800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1279.406485][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880787df800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1279.528299][T17645] device hsr_slave_0 entered promiscuous mode [ 1279.539650][T17645] device hsr_slave_1 entered promiscuous mode [ 1279.546502][T17645] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1279.554439][T17645] Cannot create hsr debugfs directory [ 1279.578779][T17825] netlink: 'syz.6.3038': attribute type 2 has an invalid length. [ 1280.274332][T17642] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.318404][T17602] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1280.359444][T17602] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1280.538003][T17642] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.581981][T17860] tipc: Enabling of bearer rejected, failed to enable media [ 1280.594856][T17602] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1280.645439][T17602] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1280.756194][T17642] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.776046][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880787dc000: rx timeout, send abort [ 1280.787263][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880787dc000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1280.801804][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c3aec00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1281.066904][T17642] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.282358][T17602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1281.405681][ T5923] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.450079][T17602] 8021q: adding VLAN 0 to HW filter on device team0 [ 1281.489520][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1281.505301][ T4348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1281.616143][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1281.641971][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1281.672045][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1281.679347][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1281.706027][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1281.852420][ T5923] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1281.882236][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1281.898562][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1281.911153][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.918423][T12033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.034733][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1283.109597][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1283.116342][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1283.324296][ T5923] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.379139][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1283.399374][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1283.444100][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1283.641077][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1283.652353][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1283.678310][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1283.706941][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1283.742957][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1283.774972][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1283.818295][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1283.897568][ T5923] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.977340][T17602] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1284.049678][T17913] loop2: detected capacity change from 0 to 128 [ 1284.374971][T17916] FAT-fs (loop2): error, invalid access to FAT (entry 0x0fff0000) [ 1284.383735][T17916] FAT-fs (loop2): Filesystem has been set read-only [ 1285.293964][T17642] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1285.340487][ T5923] tipc: Disabling bearer [ 1285.365135][ T5923] tipc: Left network mode [ 1285.375711][T17642] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1285.511013][T17642] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1286.454989][T17642] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1286.956337][T17936] loop2: detected capacity change from 0 to 32768 [ 1287.392308][T17936] XFS (loop2): Mounting V5 Filesystem [ 1287.723973][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1287.731611][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1287.777555][T17936] XFS (loop2): Ending clean mount [ 1287.792013][T17936] XFS (loop2): Quotacheck needed: Please wait. [ 1287.808499][T13369] Bluetooth: hci3: command 0x0405 tx timeout [ 1287.955576][T17936] XFS (loop2): Quotacheck: Done. [ 1288.132072][T17602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.783544][T16565] XFS (loop2): Unmounting Filesystem [ 1288.925917][T17645] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1289.006453][T17645] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1289.107314][T17645] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1290.375953][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1290.416996][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1290.435307][T17645] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1290.607919][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1290.620350][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1290.645841][T17602] device veth0_vlan entered promiscuous mode [ 1290.737415][T17642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.744495][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1290.766073][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1290.799582][T17602] device veth1_vlan entered promiscuous mode [ 1290.801376][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1290.974402][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1290.994076][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1291.023979][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1291.053530][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1291.092357][T17642] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.156877][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1291.167610][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.177181][T12033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.184377][T12033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.193016][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1291.224403][T17602] device veth0_macvtap entered promiscuous mode [ 1291.285036][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1291.295208][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1291.316251][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1291.335038][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1291.352568][T12033] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.359878][T12033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.389170][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1291.444098][T17645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.727480][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1291.739068][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1291.764726][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1291.802887][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1291.820820][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1291.835937][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1291.858003][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1291.942768][T17602] device veth1_macvtap entered promiscuous mode [ 1292.829662][T17988] x_tables: duplicate underflow at hook 1 [ 1292.937471][T17645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1293.020032][T17645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1293.033062][T17645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.099080][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.109090][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.118012][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1293.126364][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1293.138944][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1293.150973][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1293.162932][T15748] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1293.180585][ T8861] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.187846][ T8861] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1293.199355][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1293.223346][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1293.234616][ T8861] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.241858][ T8861] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1293.256121][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1293.272731][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1293.286748][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1293.317902][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1293.331870][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1293.348398][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1293.361665][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1293.370053][T15748] usb 3-1: Using ep0 maxpacket: 8 [ 1293.384264][T15748] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 1293.399530][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1293.411103][T15748] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1293.437843][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1293.503739][T15748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1293.518970][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1293.591127][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1293.599004][T15748] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1293.650258][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1293.681086][T15748] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1293.782270][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.799663][T15748] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1293.819244][T17642] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1293.852315][T17642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.860310][T15748] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1293.909167][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1293.932601][T15748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.991522][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.016547][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.041461][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.054889][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.067354][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.079582][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.090454][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.100464][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1294.111401][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.161641][T17602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.185885][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1294.196312][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1294.205493][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1294.226199][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1294.241691][T15748] usb 3-1: GET_CAPABILITIES returned 0 [ 1294.251040][T15748] usbtmc 3-1:16.0: can't read capabilities [ 1294.279620][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.312226][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.339116][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.360727][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.381605][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.403213][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.423011][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.444523][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.454429][T17602] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1294.494921][T17602] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1294.496398][T17602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1294.553482][ T5923] device hsr_slave_0 left promiscuous mode [ 1294.554159][ T5923] device hsr_slave_1 left promiscuous mode [ 1294.554793][ T5923] batman_adv: batadv0: Interface deactivated: dummy0 [ 1294.554864][ T5923] batman_adv: batadv0: Removing interface: dummy0 [ 1294.555524][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1294.555556][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1294.556264][ T5923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1294.556297][ T5923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1294.556898][ T5923] device bridge_slave_1 left promiscuous mode [ 1294.557043][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.558822][ T5923] device bridge_slave_0 left promiscuous mode [ 1294.558976][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.578520][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1294.578852][T18011] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1294.767924][ T5923] device bond1 left promiscuous mode [ 1294.769314][ T5923] device veth1_macvtap left promiscuous mode [ 1294.769440][ T5923] device veth0_macvtap left promiscuous mode [ 1294.769649][ T5923] device veth0_vlan left promiscuous mode [ 1294.972398][T16347] usb 3-1: USB disconnect, device number 3 [ 1295.063346][ T5923] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1295.745528][ T5923] device bridge1 left promiscuous mode [ 1297.324281][ T5923] bond2 (unregistering): Released all slaves [ 1297.403204][ T5923] team0 (unregistering): Port device macvlan2 removed [ 1297.788961][ T5923] bond1 (unregistering): Released all slaves [ 1299.212052][ T5923] team0 (unregistering): Port device team_slave_1 removed [ 1299.292969][ T5923] team0 (unregistering): Port device team_slave_0 removed [ 1299.381074][ T5923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.390141][ T5923] device bond_slave_1 left promiscuous mode [ 1299.469906][ T5923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.479756][ T5923] device bond_slave_0 left promiscuous mode [ 1300.212814][ T5923] team0 (unregistering): Port device bridge0 removed [ 1300.270112][ T5923] bond0 (unregistering): Released all slaves [ 1300.392025][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1300.401669][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1300.442641][T17602] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.459094][T17602] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.470553][T17602] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.482084][T17602] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.857040][T12033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.864942][T12033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.894580][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1300.936485][ T4500] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.953255][ T4500] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.001592][T12033] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1301.061171][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1301.068767][ T8861] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1301.192911][T18048] 9pnet_virtio: no channels available for device ./bus [ 1301.225665][T17642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1302.064397][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1302.072028][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1302.120854][T17645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1304.587817][T18069] tipc: Enabling of bearer rejected, failed to enable media [ 1306.776436][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1306.789586][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1306.904065][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1306.931288][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1306.974069][T17642] device veth0_vlan entered promiscuous mode [ 1306.988458][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1307.009122][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1307.041873][T17642] device veth1_vlan entered promiscuous mode [ 1307.131607][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1307.149278][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1307.177204][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1307.205953][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1307.235441][T17642] device veth0_macvtap entered promiscuous mode [ 1307.261813][T17642] device veth1_macvtap entered promiscuous mode [ 1307.302495][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1307.316606][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1307.347788][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1307.372320][ T4500] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1307.401777][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.438757][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.448674][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.502828][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.524321][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.563689][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.599105][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.626518][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.673699][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1307.684248][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.742905][T17642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1307.761393][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1307.774932][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1307.819320][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.851886][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1307.887436][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1307.897956][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.058374][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.117991][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.208112][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1308.252734][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.131393][T17642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.175483][T17642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.207816][T17642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.238910][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1309.557035][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1309.732193][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1309.936904][T11904] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1310.228639][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1310.374874][ T4854] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1310.436398][T17642] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.610150][T17642] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.660050][T17642] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.669175][T17642] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.715633][T17645] device veth0_vlan entered promiscuous mode [ 1311.073532][T17645] device veth1_vlan entered promiscuous mode [ 1311.169259][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1311.181211][ T5923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1311.224609][T17645] device veth0_macvtap entered promiscuous mode [ 1311.294720][T17645] device veth1_macvtap entered promiscuous mode [ 1311.448074][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.488784][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.531745][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.555142][T18137] kvm [18136]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7900 [ 1311.583790][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.624368][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.656197][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.695352][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.745765][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.788051][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.833041][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.866066][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1311.901762][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.936788][T17645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.985588][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1312.002310][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.016747][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1312.049377][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.083815][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.117086][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.160259][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.180743][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.214089][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.240949][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.312609][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.386222][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.425808][T17645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1312.512374][T17645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1312.706147][T17645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1312.940284][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1313.046098][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1313.103077][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1313.169715][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1313.222863][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1313.231178][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1313.240099][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1313.270582][T17645] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.311037][T17645] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.398975][T17645] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.429656][T17645] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.617644][ T8855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.626050][ T8855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.691652][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1314.727099][ T8855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1314.910602][ T8855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1314.935636][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1315.003334][ T8855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.032367][ T8855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.081019][ T8855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1318.272881][T18203] netlink: 'syz.4.3092': attribute type 4 has an invalid length. [ 1318.885789][T18213] netlink: 'syz.4.3095': attribute type 4 has an invalid length. [ 1320.926408][T18226] loop4: detected capacity change from 0 to 512 [ 1320.944137][T18226] EXT4-fs: Ignoring removed oldalloc option [ 1320.962450][T18226] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1321.070138][T18226] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1321.101467][T18226] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1322.562112][T18252] Bluetooth: MGMT ver 1.22 [ 1323.139510][T17642] EXT4-fs (loop4): unmounting filesystem. [ 1327.032655][T18322] tipc: Enabling of bearer rejected, failed to enable media [ 1332.435526][T18378] loop2: detected capacity change from 0 to 32768 [ 1332.452017][T18378] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1332.460302][T18378] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1332.490153][T18378] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 1332.499899][T16347] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1332.520702][T16347] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1332.580700][T16347] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 56ms [ 1332.602173][T16347] gfs2: fsid=syz:syz.0: jid=0: Done [ 1332.640282][T18378] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1334.405428][T18378] gfs2: fsid=syz:syz.0: found 1 quota changes [ 1334.697476][T18380] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 1334.697476][T18380] inode = 11 2339 [ 1334.697476][T18380] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 1334.944659][ T26] audit: type=1800 audit(1784694935.365:153): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3116" name="file1" dev="loop2" ino=2341 res=0 errno=0 [ 1335.158364][T18380] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 1335.167675][T18380] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:18380 [gfs2_quotad] gfs2_quota_sync+0x355/0x780 [ 1335.180411][T18380] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 1335.188710][T18380] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 1335.283444][ T4749] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.689845][ T4749] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.928683][ T4749] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.139308][ T4749] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.204514][ T4749] tipc: Left network mode [ 1340.732380][T18380] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 1340.792578][T18380] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 1340.896002][T18380] gfs2: fsid=syz:syz.0: File system withdrawn [ 1340.909783][T18380] CPU: 1 PID: 18380 Comm: gfs2_quotad Not tainted syzkaller #0 [ 1340.917427][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1340.927571][T18380] Call Trace: [ 1340.930890][T18380] [ 1340.933858][T18380] dump_stack_lvl+0x188/0x24e [ 1340.938608][T18380] ? show_regs_print_info+0x12/0x12 [ 1340.943870][T18380] ? load_image+0x410/0x410 [ 1340.948433][T18380] ? kobject_uevent_env+0x364/0x890 [ 1340.953694][T18380] gfs2_withdraw+0xc69/0x1450 [ 1340.958535][T18380] ? gfs2_lm+0x240/0x240 [ 1340.962843][T18380] ? wake_bit_function+0x200/0x200 [ 1340.968093][T18380] ? gfs2_consist_inode_i+0xf1/0x110 [ 1340.973448][T18380] gfs2_inode_refresh+0xb2d/0x1190 [ 1340.978641][T18380] ? gfs2_inode_metasync+0xf0/0xf0 [ 1340.983824][T18380] ? gfs2_glock_nq+0xcee/0x14d0 [ 1340.988835][T18380] gfs2_instantiate+0x15e/0x210 [ 1340.993761][T18380] gfs2_glock_wait+0x1d0/0x2a0 [ 1340.998611][T18380] do_sync+0x4af/0xbb0 [ 1341.002766][T18380] ? gfs2_quota_sync+0x355/0x780 [ 1341.007782][T18380] ? slot_put+0x1e0/0x1e0 [ 1341.012202][T18380] ? __lock_acquire+0x7c40/0x7c40 [ 1341.017292][T18380] ? do_raw_spin_lock+0x128/0x2f0 [ 1341.022379][T18380] ? gfs2_quota_sync+0x355/0x780 [ 1341.027414][T18380] ? do_raw_spin_unlock+0x11d/0x230 [ 1341.032740][T18380] gfs2_quota_sync+0x355/0x780 [ 1341.037579][T18380] gfs2_quotad+0x421/0x690 [ 1341.042043][T18380] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 1341.047198][T18380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1341.053130][T18380] ? wake_bit_function+0x200/0x200 [ 1341.058284][T18380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1341.064223][T18380] ? __kthread_parkme+0x71/0x1c0 [ 1341.069209][T18380] ? __kthread_parkme+0x15b/0x1c0 [ 1341.074317][T18380] kthread+0x29d/0x330 [ 1341.078423][T18380] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 1341.083579][T18380] ? kthread_blkcg+0xd0/0xd0 [ 1341.088213][T18380] ret_from_fork+0x1f/0x30 [ 1341.092687][T18380] [ 1341.124375][T18447] tmpfs: Bad value for 'mpol' [ 1341.734146][T16565] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 1341.819564][T18457] No such timeout policy "syz1" [ 1341.843281][T18457] loop4: detected capacity change from 0 to 256 [ 1342.037030][T16565] CPU: 1 PID: 16565 Comm: syz-executor Not tainted syzkaller #0 [ 1342.044756][T16565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1342.054850][T16565] Call Trace: [ 1342.058175][T16565] [ 1342.061146][T16565] dump_stack_lvl+0x188/0x24e [ 1342.065881][T16565] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 1342.071048][T16565] ? show_regs_print_info+0x12/0x12 [ 1342.076297][T16565] ? load_image+0x410/0x410 [ 1342.080854][T16565] ? do_raw_spin_unlock+0x11d/0x230 [ 1342.086098][T16565] gfs2_assert_warn_i+0x187/0x2c0 [ 1342.091181][T16565] gfs2_quota_cleanup+0x48c/0x670 [ 1342.096287][T16565] gfs2_put_super+0x22f/0x920 [ 1342.101029][T16565] ? gfs2_evict_inode+0x1290/0x1290 [ 1342.106269][T16565] generic_shutdown_super+0x130/0x340 [ 1342.111776][T16565] kill_block_super+0x7c/0xe0 [ 1342.116499][T16565] deactivate_locked_super+0x93/0xf0 [ 1342.121824][T16565] cleanup_mnt+0x471/0x4f0 [ 1342.126421][T16565] task_work_run+0x1d0/0x260 [ 1342.131071][T16565] ? task_work_cancel+0x220/0x220 [ 1342.136190][T16565] ? exit_to_user_mode_loop+0x3b/0x110 [ 1342.141810][T16565] exit_to_user_mode_loop+0xe6/0x110 [ 1342.147149][T16565] exit_to_user_mode_prepare+0xee/0x180 [ 1342.152743][T16565] syscall_exit_to_user_mode+0x16/0x40 [ 1342.158309][T16565] do_syscall_64+0x58/0xa0 [ 1342.162770][T16565] ? clear_bhb_loop+0x60/0xb0 [ 1342.167505][T16565] ? clear_bhb_loop+0x60/0xb0 [ 1342.172231][T16565] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1342.178183][T16565] RIP: 0033:0x7f8074f9f0d7 [ 1342.182645][T16565] Code: a2 c7 05 1c 26 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 1342.202459][T16565] RSP: 002b:00007fffb6143df8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1342.210990][T16565] RAX: 0000000000000000 RBX: 00007f807503330a RCX: 00007f8074f9f0d7 [ 1342.219005][T16565] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb6143eb0 [ 1342.227018][T16565] RBP: 00007fffb6143eb0 R08: 00007fffb6144eb0 R09: 00000000ffffffff [ 1342.235032][T16565] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffb6144f40 [ 1342.243045][T16565] R13: 00007f807503330a R14: 000000000013a4a1 R15: 00007fffb6144f80 [ 1342.251097][T16565] [ 1344.848200][T18467] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3133'. [ 1345.122586][T18480] input: syz1 as /devices/virtual/input/input17 [ 1346.806501][T18467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3133'. [ 1347.298027][ T8960] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 1347.537732][ T8960] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1347.564554][ T8960] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.590972][ T8960] usb 9-1: Product: syz [ 1347.604719][ T8960] usb 9-1: Manufacturer: syz [ 1347.619957][ T8960] usb 9-1: SerialNumber: syz [ 1347.643348][ T8960] usb 9-1: config 0 descriptor?? [ 1347.906794][ T8960] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1349.742298][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1349.748823][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1349.765656][ T8960] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -110 [ 1350.776321][T18527] loop2: detected capacity change from 0 to 512 [ 1350.947064][T18527] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1351.610291][ T4749] device hsr_slave_0 left promiscuous mode [ 1351.668949][ T4749] device hsr_slave_1 left promiscuous mode [ 1351.947951][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1351.948263][T18527] EXT4-fs (loop2): 1 truncate cleaned up [ 1351.955568][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1351.975973][ T4749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1351.984078][ T4749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1351.992487][ T4749] device bridge_slave_1 left promiscuous mode [ 1351.998978][ T4749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.007752][ T4749] device bridge_slave_0 left promiscuous mode [ 1352.014991][ T4749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.076702][ T3598] usb 9-1: USB disconnect, device number 13 [ 1352.127662][T18527] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 1353.168266][ T4749] device veth1_macvtap left promiscuous mode [ 1353.347131][T16565] EXT4-fs (loop2): unmounting filesystem. [ 1353.359906][ T4749] device veth0_macvtap left promiscuous mode [ 1353.434118][ T4749] device veth1_vlan left promiscuous mode [ 1353.493936][ T4749] device veth0_vlan left promiscuous mode [ 1353.515382][T18543] ceph: No mds server is up or the cluster is laggy [ 1353.750144][ T4608] libceph: connect (1)[c::]:6789 error -101 [ 1353.761309][ T4608] libceph: mon0 (1)[c::]:6789 connect error [ 1354.126286][ T4612] libceph: connect (1)[c::]:6789 error -101 [ 1354.148393][ T4612] libceph: mon0 (1)[c::]:6789 connect error [ 1354.918137][ T4612] libceph: connect (1)[c::]:6789 error -101 [ 1355.053625][ T4612] libceph: mon0 (1)[c::]:6789 connect error [ 1359.919937][T13369] Bluetooth: hci4: unexpected event for opcode 0x0c20 [ 1363.033333][ T4749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1363.480143][ T4749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1364.368107][ T4749] bond0 (unregistering): Released all slaves [ 1364.516852][T18556] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 1364.676259][T18616] tipc: Enabling of bearer rejected, failed to enable media [ 1365.600889][T18630] netlink: 96 bytes leftover after parsing attributes in process `syz.8.3164'. [ 1367.559241][T18643] overlayfs: missing 'lowerdir' [ 1371.702049][T18672] netlink: 'syz.4.3173': attribute type 13 has an invalid length. [ 1372.001250][T18672] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1372.122938][T18672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1372.153518][T18672] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1374.700760][T18380] ================================================================== [ 1374.708919][T18380] BUG: KASAN: use-after-free in __lock_acquire+0x107/0x7c40 [ 1374.716399][T18380] Read of size 8 at addr ffff88805e91cbb0 by task gfs2_quotad/18380 [ 1374.724506][T18380] [ 1374.726909][T18380] CPU: 0 PID: 18380 Comm: gfs2_quotad Not tainted syzkaller #0 [ 1374.734501][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1374.744608][T18380] Call Trace: [ 1374.747914][T18380] [ 1374.750868][T18380] dump_stack_lvl+0x188/0x24e [ 1374.755591][T18380] ? __lock_acquire+0x7c40/0x7c40 [ 1374.760652][T18380] ? show_regs_print_info+0x12/0x12 [ 1374.765921][T18380] ? load_image+0x410/0x410 [ 1374.770455][T18380] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 1374.775942][T18380] ? __virt_addr_valid+0x188/0x540 [ 1374.781172][T18380] ? __virt_addr_valid+0x467/0x540 [ 1374.786320][T18380] ? __lock_acquire+0x107/0x7c40 [ 1374.791380][T18380] print_report+0xa8/0x210 [ 1374.795876][T18380] kasan_report+0x10b/0x140 [ 1374.800487][T18380] ? __lock_acquire+0x107/0x7c40 [ 1374.805489][T18380] __lock_acquire+0x107/0x7c40 [ 1374.810314][T18380] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1374.816341][T18380] ? lock_chain_count+0x20/0x20 [ 1374.821260][T18380] ? __free_object+0x218/0xa60 [ 1374.826150][T18380] ? lockdep_hardirqs_on+0x94/0x140 [ 1374.831384][T18380] ? verify_lock_unused+0x140/0x140 [ 1374.836620][T18380] ? alloc_object+0x640/0x640 [ 1374.841344][T18380] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1374.847355][T18380] ? __lock_acquire+0x7c40/0x7c40 [ 1374.852413][T18380] ? lock_chain_count+0x20/0x20 [ 1374.857296][T18380] lock_acquire+0x1bb/0x4a0 [ 1374.861830][T18380] ? finish_wait+0xbb/0x1c0 [ 1374.866359][T18380] ? timer_delete_sync+0x20/0x20 [ 1374.871315][T18380] ? read_lock_is_recursive+0x10/0x10 [ 1374.876725][T18380] _raw_spin_lock_irqsave+0xb0/0x100 [ 1374.882125][T18380] ? finish_wait+0xbb/0x1c0 [ 1374.886655][T18380] ? _raw_spin_lock+0x40/0x40 [ 1374.891367][T18380] ? update_process_times+0x1b0/0x1b0 [ 1374.896772][T18380] finish_wait+0xbb/0x1c0 [ 1374.901134][T18380] gfs2_quotad+0x501/0x690 [ 1374.905575][T18380] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 1374.910714][T18380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1374.916643][T18380] ? wake_bit_function+0x200/0x200 [ 1374.921785][T18380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1374.927709][T18380] ? __kthread_parkme+0x71/0x1c0 [ 1374.932737][T18380] ? __kthread_parkme+0x15b/0x1c0 [ 1374.937806][T18380] kthread+0x29d/0x330 [ 1374.941901][T18380] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 1374.947046][T18380] ? kthread_blkcg+0xd0/0xd0 [ 1374.951655][T18380] ret_from_fork+0x1f/0x30 [ 1374.956111][T18380] [ 1374.959154][T18380] [ 1374.961501][T18380] Allocated by task 4581: [ 1374.965925][T18380] kasan_set_track+0x4b/0x70 [ 1374.970543][T18380] __kasan_kmalloc+0x8e/0xa0 [ 1374.975161][T18380] __kmalloc_node_track_caller+0xb0/0x240 [ 1374.980978][T18380] __alloc_skb+0x226/0x7d0 [ 1374.985422][T18380] nsim_dev_trap_report_work+0x24f/0xa80 [ 1374.991130][T18380] process_one_work+0x8ab/0x1160 [ 1374.996091][T18380] worker_thread+0xaf5/0x12a0 [ 1375.000792][T18380] kthread+0x29d/0x330 [ 1375.004878][T18380] ret_from_fork+0x1f/0x30 [ 1375.009320][T18380] [ 1375.011658][T18380] Freed by task 4581: [ 1375.015653][T18380] kasan_set_track+0x4b/0x70 [ 1375.020272][T18380] kasan_save_free_info+0x27/0x40 [ 1375.025319][T18380] ____kasan_slab_free+0x126/0x1f0 [ 1375.030461][T18380] slab_free_freelist_hook+0x133/0x1b0 [ 1375.035941][T18380] __kmem_cache_free+0xb6/0x200 [ 1375.040816][T18380] skb_release_data+0x5e9/0x7e0 [ 1375.045691][T18380] consume_skb+0xa2/0x100 [ 1375.050047][T18380] nsim_dev_trap_report_work+0x71f/0xa80 [ 1375.055704][T18380] process_one_work+0x8ab/0x1160 [ 1375.060674][T18380] worker_thread+0xaf5/0x12a0 [ 1375.065378][T18380] kthread+0x29d/0x330 [ 1375.069465][T18380] ret_from_fork+0x1f/0x30 [ 1375.073904][T18380] [ 1375.076247][T18380] The buggy address belongs to the object at ffff88805e91c000 [ 1375.076247][T18380] which belongs to the cache kmalloc-4k of size 4096 [ 1375.090408][T18380] The buggy address is located 2992 bytes inside of [ 1375.090408][T18380] 4096-byte region [ffff88805e91c000, ffff88805e91d000) [ 1375.103904][T18380] [ 1375.106258][T18380] The buggy address belongs to the physical page: [ 1375.112771][T18380] page:ffffea00017a4600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5e918 [ 1375.122943][T18380] head:ffffea00017a4600 order:3 compound_mapcount:0 compound_pincount:0 [ 1375.131291][T18380] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1375.139299][T18380] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888017442140 [ 1375.147909][T18380] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1375.156509][T18380] page dumped because: kasan: bad access detected [ 1375.162956][T18380] page_owner tracks the page as allocated [ 1375.168718][T18380] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4581, tgid 4581 (kworker/u4:12), ts 1367295251230, free_ts 1365876006817 [ 1375.191334][T18380] post_alloc_hook+0x173/0x1a0 [ 1375.196133][T18380] get_page_from_freelist+0x206b/0x2180 [ 1375.201824][T18380] __alloc_pages+0x1ec/0x4f0 [ 1375.206532][T18380] alloc_slab_page+0x5d/0x180 [ 1375.211239][T18380] new_slab+0x87/0x2d0 [ 1375.215337][T18380] ___slab_alloc+0xbc5/0x1240 [ 1375.220033][T18380] __kmem_cache_alloc_node+0x126/0x270 [ 1375.225519][T18380] __kmalloc_node_track_caller+0xa0/0x240 [ 1375.231304][T18380] __alloc_skb+0x226/0x7d0 [ 1375.235749][T18380] nsim_dev_trap_report_work+0x24f/0xa80 [ 1375.241407][T18380] process_one_work+0x8ab/0x1160 [ 1375.246370][T18380] worker_thread+0xaf5/0x12a0 [ 1375.251070][T18380] kthread+0x29d/0x330 [ 1375.255157][T18380] ret_from_fork+0x1f/0x30 [ 1375.259606][T18380] page last free stack trace: [ 1375.264296][T18380] free_unref_page_prepare+0x8e5/0x9e0 [ 1375.269787][T18380] free_unref_page+0x2e/0x3f0 [ 1375.274494][T18380] __unfreeze_partials+0x188/0x1e0 [ 1375.279635][T18380] put_cpu_partial+0x17c/0x250 [ 1375.284435][T18380] qlist_free_all+0x76/0xe0 [ 1375.288975][T18380] kasan_quarantine_reduce+0x144/0x160 [ 1375.294496][T18380] __kasan_slab_alloc+0x1e/0x80 [ 1375.299392][T18380] slab_post_alloc_hook+0x4b/0x490 [ 1375.304527][T18380] kmem_cache_alloc+0x18b/0x2f0 [ 1375.309397][T18380] getname_flags+0xb7/0x500 [ 1375.313916][T18380] do_sys_openat2+0xdd/0x4f0 [ 1375.318617][T18380] __x64_sys_openat+0x135/0x160 [ 1375.323491][T18380] do_syscall_64+0x4c/0xa0 [ 1375.327933][T18380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1375.333850][T18380] [ 1375.336187][T18380] Memory state around the buggy address: [ 1375.341834][T18380] ffff88805e91ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1375.349914][T18380] ffff88805e91cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1375.357991][T18380] >ffff88805e91cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1375.366067][T18380] ^ [ 1375.371718][T18380] ffff88805e91cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1375.379798][T18380] ffff88805e91cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1375.388158][T18380] ================================================================== [ 1375.396274][T18380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1375.403497][T18380] CPU: 0 PID: 18380 Comm: gfs2_quotad Not tainted syzkaller #0 [ 1375.411082][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1375.421173][T18380] Call Trace: [ 1375.424485][T18380] [ 1375.427449][T18380] dump_stack_lvl+0x188/0x24e [ 1375.432171][T18380] ? memcpy+0x3c/0x60 [ 1375.436210][T18380] ? show_regs_print_info+0x12/0x12 [ 1375.441451][T18380] ? load_image+0x410/0x410 [ 1375.445988][T18380] panic+0x2d3/0x710 [ 1375.449951][T18380] ? __lock_acquire+0x7c40/0x7c40 [ 1375.455009][T18380] ? bpf_jit_dump+0xd0/0xd0 [ 1375.459545][T18380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1375.465467][T18380] ? _raw_spin_unlock+0x40/0x40 [ 1375.470346][T18380] check_panic_on_warn+0x80/0xa0 [ 1375.475416][T18380] ? __lock_acquire+0x107/0x7c40 [ 1375.480394][T18380] end_report+0x66/0x110 [ 1375.484761][T18380] kasan_report+0x118/0x140 [ 1375.489291][T18380] ? __lock_acquire+0x107/0x7c40 [ 1375.494261][T18380] __lock_acquire+0x107/0x7c40 [ 1375.499063][T18380] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1375.505084][T18380] ? lock_chain_count+0x20/0x20 [ 1375.509959][T18380] ? __free_object+0x218/0xa60 [ 1375.514760][T18380] ? lockdep_hardirqs_on+0x94/0x140 [ 1375.519983][T18380] ? verify_lock_unused+0x140/0x140 [ 1375.525212][T18380] ? alloc_object+0x640/0x640 [ 1375.529932][T18380] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1375.535947][T18380] ? __lock_acquire+0x7c40/0x7c40 [ 1375.540999][T18380] ? lock_chain_count+0x20/0x20 [ 1375.545881][T18380] lock_acquire+0x1bb/0x4a0 [ 1375.550407][T18380] ? finish_wait+0xbb/0x1c0 [ 1375.554936][T18380] ? timer_delete_sync+0x20/0x20 [ 1375.559893][T18380] ? read_lock_is_recursive+0x10/0x10 [ 1375.565323][T18380] _raw_spin_lock_irqsave+0xb0/0x100 [ 1375.570638][T18380] ? finish_wait+0xbb/0x1c0 [ 1375.575166][T18380] ? _raw_spin_lock+0x40/0x40 [ 1375.579866][T18380] ? update_process_times+0x1b0/0x1b0 [ 1375.585261][T18380] finish_wait+0xbb/0x1c0 [ 1375.589620][T18380] gfs2_quotad+0x501/0x690 [ 1375.594070][T18380] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 1375.599204][T18380] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1375.605133][T18380] ? wake_bit_function+0x200/0x200 [ 1375.610269][T18380] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1375.616183][T18380] ? __kthread_parkme+0x71/0x1c0 [ 1375.621151][T18380] ? __kthread_parkme+0x15b/0x1c0 [ 1375.626205][T18380] kthread+0x29d/0x330 [ 1375.630304][T18380] ? gfs2_wake_up_statfs+0xc0/0xc0 [ 1375.635472][T18380] ? kthread_blkcg+0xd0/0xd0 [ 1375.640080][T18380] ret_from_fork+0x1f/0x30 [ 1375.644529][T18380] [ 1375.648182][T18380] Kernel Offset: disabled [ 1375.652525][T18380] Rebooting in 86400 seconds..