last executing test programs: 10.254421734s ago: executing program 4 (id=3019): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc0}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc00", 0x23) 8.260432192s ago: executing program 4 (id=3029): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4) socket$nl_route(0x10, 0x3, 0x0) 7.879884571s ago: executing program 0 (id=3030): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r10, 0x4) socket$nl_route(0x10, 0x3, 0x0) 7.727998345s ago: executing program 4 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x4, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x28, 0x14, 0x509, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @local}, @IFA_BROADCAST={0x8, 0x4, @broadcast}]}, 0x28}}, 0x0) 7.50069698s ago: executing program 4 (id=3034): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="81be870588ee048c9b5e", 0xa}, {&(0x7f00000003c0)="a8392c7c4b90dfcbc72b1ed0038e8fc310f7223c8f475a44ba34db900b9e5e836efa77de834e53298686bdebda45747158105047dd4a4cffa99b07169bc6342defda389fb4a7f08bfea99e4a146f0ba39ba90830dfb90576b582f02727cf0b9ce3e971", 0x63}], 0x2}}], 0x1, 0x0) 6.448635902s ago: executing program 0 (id=3039): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc0}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc00", 0x23) 6.153159318s ago: executing program 3 (id=3041): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2200c12, &(0x7f0000000c00)=ANY=[@ANYBLOB='check=strict,hide,map[ofu,block=0x0000000000000400,overriderockperm,unhide,\x00'], 0x1, 0x9f1, &(0x7f0000000180)="$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") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000000e80), 0x4000000, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "e0d6fbc377a68e1739644a9bb2e5a6a13765070000000000000000002000"}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 5.978962315s ago: executing program 4 (id=3044): syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x85, &(0x7f0000000240), 0x1, 0x1a2, &(0x7f0000000280)="$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") 5.741236372s ago: executing program 4 (id=3046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000340)={"0180000000000000f2e2ad238a7b44a8d886010284ed9208000000affbf514fd", r5, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5423, &(0x7f0000000000)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000a00)={{0x0, 0x9, 0x3ff, 0x34e, 0x9e, 0x4, 0x6, 0x1ff, 0x81, 0x40d9, 0x1, 0x2, 0x6, 0x524, 0x2}}) socket$nl_netfilter(0x10, 0x3, 0xc) landlock_create_ruleset(&(0x7f00000009c0)={0x0, 0x3}, 0x10, 0x0) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2101}, 0x10, 0x0) landlock_restrict_self(r7, 0x0) r8 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000001e80)=0x6, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 5.076663615s ago: executing program 3 (id=3047): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) fstat(r2, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003780)={&(0x7f0000002800)={0x50, 0x0, 0x6, {0x7, 0x28, 0x10001, 0x20000, 0x0, 0x3ff, 0x1, 0x3}}, &(0x7f00000007c0)={0x18, 0x0, 0x5496, {0x1}}, &(0x7f00000028c0)={0x18, 0x0, 0x9, {0x1ff}}, &(0x7f0000002900)={0x18, 0x0, 0x0, {0x800}}, &(0x7f0000002940)={0x18, 0xffffffffffffffda, 0x0, {0x80000001}}, &(0x7f0000002980)={0x28, 0x0, 0x7f, {{0x4de, 0xffffffffffffffff, 0x0, r0}}}, &(0x7f00000029c0)={0x60, 0x0, 0x7, {{0x3ff, 0x4, 0x7, 0x5, 0xfffffffffffffff9, 0x4, 0x2ff, 0xfffffeff}}}, &(0x7f0000002a40)={0x18, 0x0, 0x9, {0x8}}, &(0x7f0000002b00)=ANY=[@ANYBLOB="340000000000000001000000000000002f7379732f6b65726e656c2f6465627567a157437831965ba8405f89c81b187c3d2f64406d6f6e2f6b64616d6fd6f54c728649d5a5b6650fcd6e645f70696400"], &(0x7f0000002ac0)={0x20, 0x0, 0x7ff, {0x0, 0x8}}, &(0x7f0000002bc0)={0x78, 0xffffffffffffffda, 0x910a, {0x3, 0x3, 0x0, {0x4, 0xa8, 0x7, 0x1, 0x7, 0x0, 0x9, 0x8e, 0x1, 0xa000, 0x40000, 0x0, 0x0, 0x407, 0x1}}}, &(0x7f0000002cc0)={0x90, 0x0, 0xffffffff, {0x6, 0x3, 0x0, 0xffffffff, 0x800, 0x2, {0x4, 0x8000000000000000, 0x100, 0x10001, 0x8, 0x0, 0xfffffffe, 0x1f, 0x8, 0x4000, 0x8, 0x0, 0x0, 0xa, 0x8000}}}, &(0x7f0000002d80)={0x30, 0x0, 0x8, [{0x3, 0x9, 0x2, 0x3, '\'^'}]}, &(0x7f00000032c0)={0x328, 0x0, 0xfffffffffffffff7, [{{0x5, 0x3, 0x1ff, 0x200, 0xa956, 0x3, {0x0, 0xfffffffffe2259e0, 0x2, 0x0, 0x8000, 0x8, 0x7f, 0xaa86, 0x7, 0x8000, 0x4, 0x0, 0x0, 0x3, 0x3}}, {0x1, 0xfff, 0x8, 0x5e5d, '%-010d \x00'}}, {{0x1, 0x2, 0x8, 0x4, 0x8, 0x400, {0x2, 0x1000, 0xc4f, 0x7fffffffffffffff, 0x8, 0x2daf, 0x85d, 0x1b, 0x10001, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x5}}, {0x6, 0x7, 0x0, 0xbc}}, {{0x3, 0x0, 0x8, 0x9, 0xfffffff8, 0xd672, {0x1, 0x7, 0x8, 0xfffffffffffff69c, 0x5, 0x0, 0x1, 0x4, 0x80000000, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0x209d2ff3, 0x8, 0x3bc3, '%-010d \x00'}}, {{0x0, 0x2, 0xd6, 0x7, 0x40, 0x7, {0x1, 0x2, 0x4, 0x3, 0x2, 0xfffffffffffffffe, 0x7ff, 0x5, 0xc15, 0xc000, 0x3, r3, 0x0, 0x9, 0x6}}, {0x0, 0x5, 0x1, 0x4, '\x00'}}, {{0x3, 0x0, 0x80000000, 0x1, 0x1f, 0xffffffff, {0x1, 0x4000, 0x1, 0x4, 0x9, 0x7, 0x86, 0x0, 0x1, 0x2000, 0xffff529c, 0x0, r4, 0x80000000, 0x200}}, {0x6, 0x98, 0x1, 0x1000, '\x00'}}]}, &(0x7f0000003680)={0xa0, 0x0, 0x14, {{0x5, 0x1, 0xba6, 0x2, 0xfffffff7, 0x3, {0x6, 0x0, 0x9, 0x81, 0x8, 0x1000, 0x101, 0x8, 0x0, 0x2000, 0x1000, 0xee01, 0x0, 0x0, 0x15177ce2}}, {0x0, 0x2}}}, &(0x7f0000003740)={0x20, 0x0, 0x101, {0x0, 0x4, 0x4, 0x9}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x49) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x200000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 5.03891553s ago: executing program 1 (id=3049): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4) socket$nl_route(0x10, 0x3, 0x0) 4.927873638s ago: executing program 0 (id=3050): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x0) 4.553071726s ago: executing program 0 (id=3053): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4) socket$nl_route(0x10, 0x3, 0x0) 3.74469109s ago: executing program 3 (id=3054): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="81be870588ee048c9b5e", 0xa}, {&(0x7f00000003c0)="a8392c7c4b90dfcbc72b1ed0038e8fc310f7223c8f475a44ba34db900b9e5e836efa77de834e53298686bdebda45747158105047dd4a4cffa99b07169bc6342defda389fb4a7f08bfea99e4a146f0ba39ba90830dfb90576b582f02727cf0b9ce3e971", 0x63}], 0x2}}], 0x1, 0x0) 3.735051262s ago: executing program 1 (id=3055): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0x400c620e, 0x0) 3.452647666s ago: executing program 1 (id=3057): syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2200c12, &(0x7f0000000c00)=ANY=[@ANYBLOB='check=strict,hide,map[ofu,block=0x0000000000000400,overriderockperm,unhide,\x00'], 0x1, 0x9f1, &(0x7f0000000180)="$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") r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000000e80), 0x4000000, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "e0d6fbc377a68e1739644a9bb2e5a6a13765070000000000000000002000"}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 3.416001901s ago: executing program 2 (id=3058): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f00000018c0)={&(0x7f0000001040)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@rdma_dest={0x18, 0x114, 0xc}], 0x18}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000440)=[{0x2, 0x7f, 0x0, 0x2}]}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r6 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n', 0x4}, {&(0x7f0000000f80)="57e64e474b9e69733d38a780861cda55fbf2678ffc3c625481befbbd9be7d990514d38882d6a167dbb8a6b0149313f2ce740beca23db4922e867913b2f976aaf02e8e57064e2f564ed0744b10e7253268349ab47c89bce2402fa96f0bfd4036e07abc06ebb158b4117c561702f264989ec", 0x71}, {&(0x7f0000001080)="cf53ff5c3a06f85d7e7b0b648e5c427151c0d56df16dde9babe92c4e80b854eaacd11a8e3183a857e427acfd1797561cb69e8f910e8bf54e4fffdaa940f6a7336f32de244da26f9fff9ef1b0d5bf9bdef77649b35fcf58", 0x57}], 0x3}}], 0x4, 0x4048000) accept$inet6(0xffffffffffffffff, &(0x7f0000000680)={0xa, 0x0, 0x0, @private1}, &(0x7f00000000c0)=0x1c) sendfile(0xffffffffffffffff, r4, &(0x7f0000000100), 0x10000) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) pwritev(r6, &(0x7f0000000600)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000380)="b93eee414941b23f7e236a513d8617bc6281d3b018a87b1ffb52203454a05646dffd32b668a062ef912bf5a197e32ca7db6cf716f67daf54fb5ef95d5505f6d67dc42c4eeacc54f1b90b36f6e9205469da4c37407584891e748eaaef6008b191c329ea83c6d68d85792e0000000000000053caba1870d9d9ca89b023ac43ccdcdc", 0x81}, {&(0x7f0000001140)="5016cf957341f1309660144f05a4c852b7c91d465959679f46274313d42623a941d53dda228a21cfe2d24324e88452b9a5826f74c9aa4fa5812d9b4d91a93f16302922eceea74ecda30ce05b11ef5a2bff7c1b3c24d3", 0x56}], 0x5, 0x800000, 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000001200)={0x0, 0x0}) sendfile(r5, r5, 0x0, 0x24002de8) ioctl$LOOP_SET_BLOCK_SIZE(r5, 0x4c09, 0x0) fallocate(r5, 0x50, 0x7f, 0x1003) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) 3.35852509s ago: executing program 0 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000002, &(0x7f0000000e40)={[{@adinicb}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@unhide}, {@nostrict}, {@fileset={'fileset', 0x3d, 0x7}}, {@longad}, {@gid_ignore}, {@uid_ignore}, {}]}, 0x21, 0xc43, &(0x7f00000001c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000001340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x58}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="3b000008000300", @ANYRES32=r10, @ANYBLOB="2000330040000000ffffffffffff0802110000015050505050500000"], 0x3c}}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r11, 0x89f5, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={@remote, 0x1, 0x0, 0x60, 0x0, [{@private}, {@loopback}, {@loopback}, {}, {@local}, {}]}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="60000000200001002cbd7000000000000a2000000000000000000000140003006c6f0000000000000000000000000000140001000000000000000000000000000000000108000f0008000000140011"], 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f40)=@newlink={0xac, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r13}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_BROADCAST={0xa, 0x2, @link_local}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_ADDRESS={0xa, 0x1, @multicast}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x5, 0x8001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x20}}]}]}, @IFLA_PHYS_PORT_ID={0xd, 0x22, "5c1692f5dab57a4469"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_virt_wifi\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x49}]}, 0xac}}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) 3.280752302s ago: executing program 1 (id=3060): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0xc0}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc00", 0x23) 2.680186906s ago: executing program 3 (id=3061): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x0, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4) socket$nl_route(0x10, 0x3, 0x0) 2.594552539s ago: executing program 2 (id=3062): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={0x0, 0x397, &(0x7f0000000180)={0x0, 0xff90}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0xb, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x6}}]}, 0x2c}}, 0x0) 2.372586373s ago: executing program 2 (id=3063): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f00000000c0)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb}}}}]}, 0x40}}, 0x0) 2.145541848s ago: executing program 2 (id=3064): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setresgid(0x0, 0x0, 0x0) fstat(r2, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000800)="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", 0x2000, &(0x7f0000003780)={&(0x7f0000002800)={0x50, 0x0, 0x6, {0x7, 0x28, 0x10001, 0x20000, 0x0, 0x3ff, 0x1, 0x3}}, &(0x7f00000007c0)={0x18, 0x0, 0x5496, {0x1}}, &(0x7f00000028c0)={0x18, 0x0, 0x9, {0x1ff}}, &(0x7f0000002900)={0x18, 0x0, 0x0, {0x800}}, &(0x7f0000002940)={0x18, 0xffffffffffffffda, 0x0, {0x80000001}}, &(0x7f0000002980)={0x28, 0x0, 0x7f, {{0x4de, 0xffffffffffffffff, 0x0, r0}}}, &(0x7f00000029c0)={0x60, 0x0, 0x7, {{0x3ff, 0x4, 0x7, 0x5, 0xfffffffffffffff9, 0x4, 0x2ff, 0xfffffeff}}}, &(0x7f0000002a40)={0x18, 0x0, 0x9, {0x8}}, &(0x7f0000002b00)=ANY=[@ANYBLOB="340000000000000001000000000000002f7379732f6b65726e656c2f6465627567a157437831965ba8405f89c81b187c3d2f64406d6f6e2f6b64616d6fd6f54c728649d5a5b6650fcd6e645f70696400"], &(0x7f0000002ac0)={0x20, 0x0, 0x7ff, {0x0, 0x8}}, &(0x7f0000002bc0)={0x78, 0xffffffffffffffda, 0x910a, {0x3, 0x3, 0x0, {0x4, 0xa8, 0x7, 0x1, 0x7, 0x0, 0x9, 0x8e, 0x1, 0xa000, 0x40000, 0x0, 0x0, 0x407, 0x1}}}, &(0x7f0000002cc0)={0x90, 0x0, 0xffffffff, {0x6, 0x3, 0x0, 0xffffffff, 0x800, 0x2, {0x4, 0x8000000000000000, 0x100, 0x10001, 0x8, 0x0, 0xfffffffe, 0x1f, 0x8, 0x4000, 0x8, 0x0, 0x0, 0xa, 0x8000}}}, &(0x7f0000002d80)={0x30, 0x0, 0x8, [{0x3, 0x9, 0x2, 0x3, '\'^'}]}, &(0x7f00000032c0)={0x328, 0x0, 0xfffffffffffffff7, [{{0x5, 0x3, 0x1ff, 0x200, 0xa956, 0x3, {0x0, 0xfffffffffe2259e0, 0x2, 0x0, 0x8000, 0x8, 0x7f, 0xaa86, 0x7, 0x8000, 0x4, 0x0, 0x0, 0x3, 0x3}}, {0x1, 0xfff, 0x8, 0x5e5d, '%-010d \x00'}}, {{0x1, 0x2, 0x8, 0x4, 0x8, 0x400, {0x2, 0x1000, 0xc4f, 0x7fffffffffffffff, 0x8, 0x2daf, 0x85d, 0x1b, 0x10001, 0x1000, 0x4, 0x0, 0x0, 0x1, 0x5}}, {0x6, 0x7, 0x0, 0xbc}}, {{0x3, 0x0, 0x8, 0x9, 0xfffffff8, 0xd672, {0x1, 0x7, 0x8, 0xfffffffffffff69c, 0x5, 0x0, 0x1, 0x4, 0x80000000, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x9}}, {0x0, 0x209d2ff3, 0x8, 0x3bc3, '%-010d \x00'}}, {{0x0, 0x2, 0xd6, 0x7, 0x40, 0x7, {0x1, 0x2, 0x4, 0x3, 0x2, 0xfffffffffffffffe, 0x7ff, 0x5, 0xc15, 0xc000, 0x3, r3, 0x0, 0x9, 0x6}}, {0x0, 0x5, 0x1, 0x4, '\x00'}}, {{0x3, 0x0, 0x80000000, 0x1, 0x1f, 0xffffffff, {0x1, 0x4000, 0x1, 0x4, 0x9, 0x7, 0x86, 0x0, 0x1, 0x2000, 0xffff529c, 0x0, r4, 0x80000000, 0x200}}, {0x6, 0x98, 0x1, 0x1000, '\x00'}}]}, &(0x7f0000003680)={0xa0, 0x0, 0x14, {{0x5, 0x1, 0xba6, 0x2, 0xfffffff7, 0x3, {0x6, 0x0, 0x9, 0x81, 0x8, 0x1000, 0x101, 0x8, 0x0, 0x2000, 0x1000, 0xee01, 0x0, 0x0, 0x15177ce2}}, {0x0, 0x2}}}, &(0x7f0000003740)={0x20, 0x0, 0x101, {0x0, 0x4, 0x4, 0x9}}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5, r5}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r5, r5}, 0x4) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000040), 0x300, 0x49) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x200000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000600), &(0x7f0000000640)}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 2.098729325s ago: executing program 3 (id=3065): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff0000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4) socket$nl_route(0x10, 0x3, 0x0) 1.217806372s ago: executing program 1 (id=3066): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x3, &(0x7f0000000000)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) bpf$MAP_CREATE(0x16, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.060764206s ago: executing program 2 (id=3067): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0x400c620e, 0x0) 1.019862882s ago: executing program 2 (id=3068): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write$binfmt_script(r0, &(0x7f0000000140), 0xc5) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000), 0x3a}, 0x2) r3 = syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f0000000000)=ANY=[@ANYRES64=0x0], 0x30, 0x30c, &(0x7f00000001c0)="$eJzs3b9u00AcB/Dvz06atFTFtEVILKBCxZ+hosCAWFKhrOwsIKBJpYqoiLZIgJAoiBHxAOy8AvAEDCwgXgAmBsQDdOLQnc+O3ZxdlyZxA9+P1Mg535/f1X/uzogaRPTfutb89vbSD/0jgA8fwFXAA1AHKgCO4lj94drm6man3cqryDcl9I8gLCk9eZbX2q6iupwpYQX6WwWTyTQaDKXU0veyg6BS1cOL1Xft84CavQ79KO/BF916nF0ytoATQwvngEj+NmQb23iEqRLDISKiA8CO/54dJiZNksDzgHk77CfH//Mlh+vw8enPM8Vzbw8ylOG73OlJUrkFEuO/md0p0cf3sNnVXe+ZeZTe70WrxCLBVHd8H0N4ZiXmH2JmYEDOqtLE4o2vrFawsPwcLQ8v0LAS2WbNZys8dSO7RDvnWJvmyK6tiusTqf6kRSGtrHbaNb3hiH9mby3un3ySL3JLArxBK57/VZTow2SOVLBj3uxVdfwXMqqL+hjoXLBz70aj4aVyHTGNHLctWLv0sp49fR+zdUYPCLbiCMI432eXmkb6sULYu8WsluwJNuMqFcTfMtqaTZXy7ZmwsHy/k/soZXD0sZHXckPm8AvvPjQT839PxzeP9PWfXZHJac+MsD9j7pwVkzNIrBzDjN3L5WQcgVX7+w5SUa9wF1cwtfH4yT2/02mv6407jo0Hk+tiU6ovAWeeno3o9pqdp1aonmIb2OqmKO2ZUkWLq/6F0btxrq8V6vtHnKIvH1dmfZXFKd7empjq8y/h5r6K1zGYg9KPjeZnYJiNCgZUs1JAxq6S7080FBsSHXSbMF5yQDRset4lSvTIcQjdWZ0Zw/VHkDNPz19kpmtcjFdw6X9EmDafE+4V3FJWtckVnIi7xYsZa0az5jp1FjidrAS5q5HAxvmPkCa+4jaf/xMRERERERERERERERERERERERERjZph/B+GsvtIRERERERERERERERERERERERERERERDTqCrz/V0n6fTBK/Xb82W/z/t+A7/8lGiF/AgAA//8BlXvf") ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000f80)={0x1, 0x3, 0x4}) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r4, 0x110, 0x3, &(0x7f0000000000), 0x4) r5 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f40)='./file0\x00', 0x82, &(0x7f0000000e80)=ANY=[@ANYBLOB='longad,noadinicb,noadinicb,bs=00000000000000000031,iocharset=cp860,gid=', @ANYRESDEC=0x0, @ANYBLOB="2ca16c63686f72301530303030ffff000000000000643d666f726765742c000000"], 0x0, 0xc39, &(0x7f0000000240)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LNkkJcr6fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lBtwIAuJ/OT3/1+AnPfwB4pFzw//8AAAAAAAAAAAAAAHDQpSjiiUixdH4rzVafu4bPtTtXr81MTN6+2kiqag5U5cuf4edPnDz1pRfGT/fyw+vvtafitekLZ+svL15ZWm6trLTm6zOd9tzifOuet7Db+jcbqw5A/crrV+cvXVqpn3ju5A1fXxv9YOjxI6Nnxp859nSv7MzE5OR0X5na4Mfe+y3uNMLjUBRxLFI8+/0fp2ZEFLH7Y3GXa2e/jVSdGKs6MTMxWXVkod3srJZfTvUORBFR76vU6B2j+3AudqURsVY2v2zwWNm96aXmcvPiQqs+1Vxeba+2FztTqdvasj/1KOJ0iliPiM2hWzc3GEXUIsV3D2+lixEx0DsOX6wGBt+5HcU+9vEelO2sD0asFw/BOTvAhqKIVyPFT94pYq48ZvknvhDxapn/GPFWmS9FpPLCOBXxfnUdjTzglrMXalHEn5Xn/8xWmq/uB737yrmv1b/SubTYV7Z3X3nonw/30wG/Nw1HEc3qjr+VPv5vdgAAAAAAAAAAAAAAAADYayNRxFOR4pV//4NqXHFU49IPnxn/3dGf7x8z/uRdtlOWfS4i1op7G5N7KA8hnkpTKT3gscSPsuEo4o/y+L9vP+jGAAAAAAAAAAAAAAAAAAAAPNKKeC9SvPju0bQe/XOKtzuX6xeaFxe60+X25v7tzZm+vb29XU/dbOSczbmWcz3nRs7NnFHk+jkbOWdzruVcz7mRczNnDOT6ORs5Z3Ou5VzPuZFzM2fUcv2cjZyzOddyrufcyLmZMw7I3L0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ8kRRTxs0jxnW9spUgR0YiYjW5uDPXKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0lAq4geRov57jevrahGRqn+7jpa/nIrGoTI/HY3xMl+KxtmczSprjW8/gPazO4OpiB9FiqHht6+f8Hz+B7ufrl8G8dY3dz79Uq2bA70vRz8YevzI4TPjk7/y5J2W0+0aMHau3bl6rT4zMTk53be6lvf+6b51o3m/xd50nYhYeePN15sLC61lC4/GQq27UIs93fJIxN5ucO8Wat2FfL+KB96eOyw0DkYzdhaiuvff9p7NJ0b5/H8/Uvzmu//Re+D3nv8/1/10/QkfP/3jnef/izdvaJ+e/0/0rXsx/25ksBYxvHplafBIxPDKG28ea19pXm5dbnVOHT/+5fHxL588PngoYvhSe6HVt7TrQwUAAAAAAAAAAAAAAABwf6UifjtSNH+0leoRca0arzV6ZvyZY08PxEA13uqGcVuvTV84W3958crScmtlpTVfn+m05xbnW/e6u+FquNfMxOS+dOauRva5/SPDLy8uvbHcvvz7q7f9/rHhsxdXVpebc7f/OkaiiGj0rxmrGjwzMVk1eqHd7FRVp/ZoYOZgKuI/I8XcqXr6fF6Xx/+V8d5gX9n+8f9rfeur5X0a//epm/aTUhE/jRS/8edPxuerdj4WtxyzXO6vI8XY6c/lcnGoLNdrQ/e9At2RgWXZ/40Uf/+zG8v2+v7ETtnnP9rRPfjK8384UvzgT78Xv5rX3fj+h53xn/3n/7GbN7RP5/8zfeseu+F9BbvuOvn8H4sULz3xdvxaXvdh7/8oYnt7+1sRR3Ph6+/n2Kfz/9m+daPR3e+v7133AQAAAAAAAAAAHlqDqYi/iRRPT9bSC3ndvfz9v/mbN7RPf//rF/vWzd+n+Yp2fVABAAAA4IAYTEW8Fykur759fQx13/jvG8d//tbO3OsT6aZvqz/n+4XqvQF7+ed//Ubzfmd3320AAAAAAAAAAAAAAAAAAAA4UFIq4oU8n/rsXeZT34gUr/z3s7lcOlKW680DP1r9Onx+sXPs7MLC4lxztXlxoVWfXmrOtcq6n4kUW3/1uVy3qOZX7803353jfXi7Nxf7cqSY/Nte2e5c7L25ybvzgXfnYi/LfipS/Nff3Vi2N4/1Z3fKnijL/mWk+Po/3b7skZ2yJ8uy34sUP/x6vVf2sbJs7/2o3XeSDtdiofXc3OLCLa9CrRS7PjUAAAAAAAAAAAAAAAAAAAA8QgZTEX8SKf7nynqs5WH/ef7/3gz8tV7Zt77ZN9//Ta5V8/yPVvP/32n548z/P7pnPQUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIdHiiLejBRL57fSxlD5uWv4XLtz9drMxOTtq42kquZAVb78GX7+xMlTX3ph/HQvP7z+XnsqXpu+cLb+8uKVpeXWykprvj7Tac8tzrfueQu7rb9z6LrGqgNQv/L61flLl1bqJ547ecPX10Y/GHr8yOiZ8WeOPd0rOzMxOTndV6Y2+BH2/pEat+NQFPEXkeLZ7/84/fNQRBG7PxZ3uXb220jVibGqEzMTk1VHFtrNzmr55VTvQBQR9b5Kjd4xug/nYlcaEWtl88sGj5Xdm15qLjcvLrTqU83l1fZqe7EzlbqtLftTjyJOp4j1iNgcunVzg1HE65Hiu4e30r8MRQz0jsMXz09/9fiJO7ej2Mc+3oOynfXBiPXiIThnB9hQFPEPkeIn7xyNfx2KqEX3J74Q8Wp/wZciUnlhnIp4/zbXEQ+nWhTxf+X5P7OV3hkq7we9+8q5r9W/0rm02Fe2d185SM+H7Y9+LY7swW7v3QG/Nw1HET+s7vhb6d/8dw0AAAAAAAAAAAAAAABwgBTxy5HixXePpmp88PUxxe3O5fqF5sWF7rC+3ti/esQflrm9vb1dT91s5JzNuZZzPedGzs2cUeT6ORs5Z3Ou5VzPuZFzM2cM5Po5Gzlnc67lXM+5kXMzZ9Sq2N7e/la3fi3Xz7mWc70WUZT18+fNnHFAxu4BAAAAAAAAAAAAAAAAAACfLEX1T4rvfGMrVXOpNiJmo5sb5gP9xPv/AAAA//+ZYP5q") mknodat$loop(r5, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ppoll(&(0x7f0000000100)=[{}], 0x1, &(0x7f0000000180)={0x0, 0x989680}, 0x0, 0x0) r6 = syz_open_dev$vivid(&(0x7f0000000f00), 0x2, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000001140)={0x3, 0x9, 0x1, "89276baa5788e5936026cda2eb06a0280347efebfa65d3851ce36444a64aa4f7", 0x41414770}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000240)=ANY=[], 0xed) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r9, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)=ANY=[@ANYBLOB="5c000000020200020000000000000000050000000800054000000002100002800c00028005000100a0daa940280001800c000280050001002f0000000600034000030000060003000002000006000340000100000800084000000002"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0xac3646ac7ef0b7a7) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r10, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) syz_mount_image$hfs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2810880, &(0x7f0000000180)=ANY=[], 0x8b, 0x28e, &(0x7f0000000680)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) 197.203159ms ago: executing program 3 (id=3069): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) write$ppp(r0, &(0x7f0000000140)="1627", 0x2) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1a, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet(0x2, 0x0, 0x84) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r3}, 0x38) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)="869b132bd023614380db065e0361c17ea4a123b3bb9e097016930f86e5770aad078c4c277a1395029b04e6e395582175a5a51337a9cca6caa5dbca7d39f50d3c0953ced75eb50ab4bd376a823a25e25fedb026cc0bfe050a853add29e084638e80ea15d545bc95fa88627d7655fabad382915947827999877ccda8219594061cf48fe5dab16ef146649e7e028814bfaf30cab93eb504eed401a2fb150716a6846135fbe3ed3b14696dfa17f7f4e2c25287e53088614a50682c0c2fc16acefd8d9efd4fda8c9e43260fc9fdfb1c88e806ed60f2ada4838b9121780a8f84cdbf51e94b168394c9548cf4", 0xe9}, {0x0}], 0x2}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x54, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x6}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x1}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xfffffff9}}]}, 0x54}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) bind$alg(r10, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2c, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00", @ANYRES32, @ANYBLOB], 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000280)=r11, 0x4) socket$nl_route(0x10, 0x3, 0x0) 132.747059ms ago: executing program 1 (id=3070): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) gettid() r1 = syz_open_dev$loop(&(0x7f0000000e80), 0x4000000, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x12, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "e0d6fbc377a68e1739644a9bb2e5a6a13765070000000000000000002000"}}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = dup(0xffffffffffffffff) ioctl$PTP_EXTTS_REQUEST2(r2, 0xc0603d06, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x0, 0x0) 0s ago: executing program 0 (id=3071): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-arm64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)="81be870588ee048c9b5e", 0xa}, {&(0x7f00000003c0)="a8392c7c4b90dfcbc72b1ed0038e8fc310f7223c8f475a44ba34db900b9e5e836efa77de834e53298686bdebda45747158105047dd4a4cffa99b07169bc6342defda389fb4a7f08bfea99e4a146f0ba39ba90830dfb90576b582f02727cf0b9ce3e971", 0x63}], 0x2}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 28 bytes leftover after parsing attributes in process `syz.0.1311'. [ 417.621095][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 418.367459][ T9397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.708546][ T9413] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 419.637965][ T9433] 9pnet: Insufficient options for proto=fd [ 420.097108][ T9437] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 420.131995][ T9439] udc-core: couldn't find an available UDC or it's busy [ 420.133797][ T9439] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 422.649293][ T9463] devtmpfs: Bad value for 'nr_inodes' [ 422.799072][ T9463] loop4: detected capacity change from 0 to 4096 [ 423.067269][ T9463] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 423.350086][ T9449] loop0: detected capacity change from 0 to 32768 [ 423.454094][ T9463] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 423.486409][ T9463] ntfs3: loop4: Failed to load root. [ 423.529987][ T9472] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 423.718962][ T9482] udc-core: couldn't find an available UDC or it's busy [ 423.722384][ T9482] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 423.751840][ T9485] AppArmor: change_hat: Invalid input '0' [ 423.847302][ T9489] loop4: detected capacity change from 0 to 1024 [ 423.942419][ T9498] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1398'. [ 423.945543][ T9489] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv1,bsddf,barrier=0x0000000000000000,norecovery,debug_want_extra_isize=0x0000000000000080,resuid=0x0000000000000000,nodelalloc,acl,noinit_itable,,errors=continue. Quota mode: none. [ 424.021682][ T9489] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 424.225326][ T9508] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 424.379443][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1403'. [ 424.447108][ T9513] loop3: detected capacity change from 0 to 512 [ 424.462855][ T9511] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1403'. [ 424.542748][ T9516] loop2: detected capacity change from 0 to 512 [ 424.547422][ T9513] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,inode_readahead_blks=0x0000000000000800,,errors=continue. Quota mode: writeback. [ 424.640996][ T9516] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 424.696925][ T9523] loop4: detected capacity change from 0 to 16 [ 424.744406][ T9523] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 424.937100][ T9534] loop1: detected capacity change from 0 to 512 [ 425.136363][ T9534] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,nogrpid,inode_readahead_blks=0x0000000000000800,,errors=continue. Quota mode: writeback. [ 425.270258][ T9548] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 425.321378][ T9521] loop0: detected capacity change from 0 to 32768 [ 425.385723][ T26] audit: type=1326 audit(425.334:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9550 comm="syz.1.1415" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff805be328 code=0x0 [ 425.434625][ T26] audit: type=1326 audit(425.384:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.2.1416" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff9ec00328 code=0x0 [ 425.458474][ T9521] XFS (loop0): Mounting V5 Filesystem [ 425.480837][ T9564] loop1: detected capacity change from 0 to 128 [ 425.619807][ T9521] XFS (loop0): Ending clean mount [ 425.690068][ T8778] XFS (loop0): Unmounting Filesystem [ 425.980736][ T9566] loop4: detected capacity change from 0 to 32768 [ 426.077385][ T9566] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1418 (9566) [ 426.122656][ T9566] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm [ 426.125890][ T9566] BTRFS info (device loop4): using free space tree [ 426.130112][ T9566] BTRFS info (device loop4): has skinny extents [ 426.480675][ T9599] loop3: detected capacity change from 0 to 1024 [ 426.644981][ T9566] BTRFS info (device loop4): enabling ssd optimizations [ 426.690040][ T4544] hfsplus: b-tree write err: -5, ino 4 [ 426.909968][ T4017] Bluetooth: hci0: command 0x0401 tx timeout [ 427.069741][ T9611] loop3: detected capacity change from 0 to 8 [ 427.126578][ T9611] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported [ 427.315060][ T9621] loop3: detected capacity change from 0 to 512 [ 427.340372][ T9621] EXT4-fs (loop3): Ignoring removed orlov option [ 427.380899][ T9621] EXT4-fs (loop3): Test dummy encryption mode enabled [ 427.396163][ T9593] loop2: detected capacity change from 0 to 32768 [ 427.412108][ T9621] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a014e09c, mo2=0002] [ 427.429836][ T9621] System zones: 1-12 [ 427.465809][ T9621] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.1431: casefold flag without casefold feature [ 427.471325][ T9621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.1431: missing EA_INODE flag [ 427.504420][ T9601] loop1: detected capacity change from 0 to 32768 [ 427.505567][ T9621] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.1431: error while reading EA inode 12 err=-117 [ 427.526550][ T9621] EXT4-fs (loop3): 1 orphan inode deleted [ 427.528130][ T9621] EXT4-fs (loop3): mounted filesystem without journal. Opts: orlov,minixdf,max_dir_size_kb=0x0000000000009c7c,debug,grpquota,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: writeback. [ 427.543823][ T9624] loop4: detected capacity change from 0 to 1024 [ 427.549243][ T9601] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1424 (9601) [ 427.603203][ T9601] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm [ 427.609608][ T9601] BTRFS info (device loop1): setting nodatacow, compression disabled [ 427.615742][ T9624] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,noload,lazytime,usrquota,discard,data_err=abort,,errors=continue. Quota mode: writeback. [ 427.629579][ T9601] BTRFS info (device loop1): enabling auto defrag [ 427.631684][ T9601] BTRFS info (device loop1): max_inline at 0 [ 427.633291][ T9601] BTRFS info (device loop1): using free space tree [ 427.651618][ T9601] BTRFS info (device loop1): has skinny extents [ 427.722933][ T9621] fscrypt: AES-256-XTS using implementation "xts-aes-ce" [ 427.938582][ T9656] loop3: detected capacity change from 0 to 1024 [ 428.021828][ T9656] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 428.215167][ T9670] loop4: detected capacity change from 0 to 64 [ 428.268381][ T9673] loop2: detected capacity change from 0 to 64 [ 428.588380][ T9689] loop4: detected capacity change from 0 to 128 [ 429.117958][ T9677] loop3: detected capacity change from 0 to 32768 [ 429.129585][ T9677] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1442 (9677) [ 429.236959][ T9677] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm [ 429.239334][ T9677] BTRFS info (device loop3): setting nodatacow, compression disabled [ 429.247082][ T9677] BTRFS info (device loop3): enabling auto defrag [ 429.248728][ T9677] BTRFS info (device loop3): max_inline at 0 [ 429.267471][ T9677] BTRFS info (device loop3): using free space tree [ 429.269145][ T9677] BTRFS info (device loop3): has skinny extents [ 429.360506][ T9685] loop2: detected capacity change from 0 to 40427 [ 429.409362][ T9697] loop4: detected capacity change from 0 to 32768 [ 429.427067][ T9685] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 429.429095][ T9685] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 429.492519][ T9677] BTRFS warning (device loop3): get dev_stats failed, device not found [ 429.524428][ T9685] F2FS-fs (loop2): Found nat_bits in checkpoint [ 429.564323][ T9697] XFS (loop4): Mounting V5 Filesystem [ 429.568471][ T9685] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 429.587712][ T9685] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 429.859040][ T9697] XFS (loop4): Ending clean mount [ 429.864436][ T4102] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4102) [ 429.923587][ T4704] attempt to access beyond end of device [ 429.923587][ T4704] loop2: rw=2049, want=45104, limit=40427 [ 429.989093][ T4544] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.995540][ T7448] XFS (loop4): Unmounting Filesystem [ 430.109483][ T4544] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.203024][ T4544] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.256173][ T9733] chnl_net:caif_netlink_parms(): no params data found [ 430.345996][ T4544] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.544067][ T9733] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.545872][ T9733] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.548555][ T9733] device bridge_slave_0 entered promiscuous mode [ 430.620541][ T9733] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.622371][ T9733] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.624997][ T9733] device bridge_slave_1 entered promiscuous mode [ 430.740451][ T9733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.744877][ T9733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.832528][ T9733] team0: Port device team_slave_0 added [ 430.841734][ T9733] team0: Port device team_slave_1 added [ 430.899201][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 430.908222][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.920280][ T9733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 430.924439][ T9733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 430.926180][ T9733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.959769][ T9733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.077390][ T9733] device hsr_slave_0 entered promiscuous mode [ 431.130268][ T9733] device hsr_slave_1 entered promiscuous mode [ 431.150372][ T9733] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.152406][ T9733] Cannot create hsr debugfs directory [ 431.799763][ T3770] Bluetooth: hci1: command 0x0409 tx timeout [ 432.203233][ T4544] device hsr_slave_0 left promiscuous mode [ 432.287527][ T4544] device hsr_slave_1 left promiscuous mode [ 432.369909][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.371895][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.380526][ T4544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.387131][ T4544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.405244][ T4544] device bridge_slave_1 left promiscuous mode [ 432.410570][ T4544] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.465100][ T4544] device bridge_slave_0 left promiscuous mode [ 432.466991][ T4544] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.600019][ T4544] device veth1_macvtap left promiscuous mode [ 432.601700][ T4544] device veth0_macvtap left promiscuous mode [ 432.603349][ T4544] device veth1_vlan left promiscuous mode [ 432.604941][ T4544] device veth0_vlan left promiscuous mode [ 433.450713][ T4544] team0 (unregistering): Port device team_slave_1 removed [ 433.496438][ T4544] team0 (unregistering): Port device team_slave_0 removed [ 433.521425][ T4544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 433.589402][ T4544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 433.869777][ T4016] Bluetooth: hci1: command 0x041b tx timeout [ 433.894417][ T4544] bond0 (unregistering): Released all slaves [ 434.058639][ T9733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 434.101576][ T9733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 434.144914][ T9733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 434.184117][ T9733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 434.418180][ T9733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.438252][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 434.447990][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 434.458801][ T9733] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.478342][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 434.481571][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 434.484124][ T4778] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.486025][ T4778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.524488][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 434.526956][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 434.529627][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 434.532653][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.534543][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.549939][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 434.552741][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 434.555460][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 434.558675][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 434.579301][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 434.585046][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 434.612997][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 434.615494][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 434.617941][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 434.627105][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 434.642075][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 434.645894][ T9733] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 434.921366][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 434.923575][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 434.950882][ T9733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.021088][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 435.023752][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 435.092956][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 435.095716][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 435.098538][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 435.102205][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 435.106454][ T9733] device veth0_vlan entered promiscuous mode [ 435.138732][ T9733] device veth1_vlan entered promiscuous mode [ 435.206105][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 435.208612][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 435.211600][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 435.220918][ T9613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 435.225651][ T9733] device veth0_macvtap entered promiscuous mode [ 435.252927][ T9733] device veth1_macvtap entered promiscuous mode [ 435.302953][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.305760][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.308333][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.349676][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.352332][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.355023][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.357492][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.379692][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.410556][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.414305][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 435.416876][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 435.419244][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 435.423729][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 435.510817][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.513491][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.516129][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.518751][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.552237][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.554988][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.557513][ T9733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 435.579665][ T9733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.600386][ T9733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.603773][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 435.606493][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 435.613442][ T9733] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.615693][ T9733] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.618011][ T9733] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.649726][ T9733] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.811783][ T4551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.813983][ T4551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.819220][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 435.826184][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.828420][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.843941][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 435.951120][ T4016] Bluetooth: hci1: command 0x040f tx timeout [ 436.361543][ T9822] loop4: detected capacity change from 0 to 32768 [ 436.582498][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 438.029749][ T9136] Bluetooth: hci1: command 0x0419 tx timeout [ 438.271197][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.272897][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.458264][ T9892] loop4: detected capacity change from 0 to 32768 [ 441.591544][ T9947] loop4: detected capacity change from 0 to 32768 [ 445.797113][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies. Check SNMP counters. [ 446.346731][ T4538] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.385163][ T9989] chnl_net:caif_netlink_parms(): no params data found [ 446.501929][ T4538] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.578430][ T4538] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.633304][ T9989] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.635454][ T9989] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.638151][ T9989] device bridge_slave_0 entered promiscuous mode [ 446.659553][ T4538] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.694330][ T9989] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.696183][ T9989] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.698597][ T9989] device bridge_slave_1 entered promiscuous mode [ 446.732537][ T9989] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.749030][ T9989] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.797536][ T9989] team0: Port device team_slave_0 added [ 446.806086][ T9989] team0: Port device team_slave_1 added [ 446.887764][ T9989] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.889483][ T9989] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.910347][ T9989] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.930519][ T9989] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.932435][ T9989] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.963584][ T9989] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.115430][ T9989] device hsr_slave_0 entered promiscuous mode [ 447.153748][ T9989] device hsr_slave_1 entered promiscuous mode [ 447.551887][ T3770] Bluetooth: hci5: command 0x0409 tx timeout [ 448.119106][ T9989] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.177431][ T9989] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.289326][ T9989] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.351954][ T9989] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.803876][ T9989] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.831385][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.833809][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.839114][ T9989] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.899768][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.902455][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.904946][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.906832][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.908987][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.930280][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.932911][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.934722][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.936918][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.140706][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.143287][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.146050][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.149473][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.190656][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.193500][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.202458][ T9989] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.205127][ T9989] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.256599][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.259170][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.261836][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.264506][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.266942][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.356262][ T4538] device hsr_slave_0 left promiscuous mode [ 449.400304][ T4538] device hsr_slave_1 left promiscuous mode [ 449.470269][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.472359][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.478100][ T4538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.489955][ T4538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.503355][ T4538] device bridge_slave_1 left promiscuous mode [ 449.505019][ T4538] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.548088][ T4538] device bridge_slave_0 left promiscuous mode [ 449.558520][ T4538] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.629928][ T9613] Bluetooth: hci5: command 0x041b tx timeout [ 449.633139][ T4538] device veth0_to_hsr left promiscuous mode [ 449.750098][ T4538] device veth1_macvtap left promiscuous mode [ 449.751919][ T4538] device veth0_macvtap left promiscuous mode [ 449.753513][ T4538] device veth1_vlan left promiscuous mode [ 449.755110][ T4538] device veth0_vlan left promiscuous mode [ 450.511266][ T4538] team0 (unregistering): Port device team_slave_1 removed [ 450.565028][ T4538] team0 (unregistering): Port device team_slave_0 removed [ 450.608749][ T4538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 450.700036][ T4538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.041970][ T4538] bond0 (unregistering): Released all slaves [ 451.210679][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 451.576007][ T9989] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 451.578832][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 451.582293][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 451.614690][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 451.617335][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 451.677587][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 451.680931][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 451.684982][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 451.694134][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.705687][ T9989] device veth0_vlan entered promiscuous mode [ 451.710476][ T4047] Bluetooth: hci5: command 0x040f tx timeout [ 451.732060][ T9989] device veth1_vlan entered promiscuous mode [ 451.783417][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 451.786129][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 451.788859][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.797577][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.809564][ T9989] device veth0_macvtap entered promiscuous mode [ 451.820636][ T9989] device veth1_macvtap entered promiscuous mode [ 451.860771][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.867125][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.879357][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.889134][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.898839][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.907281][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.916705][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 451.923966][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.938694][ T9989] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.950480][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.953095][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.955524][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.958995][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.975785][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.985879][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.993034][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.003386][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.012576][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.020973][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.026984][ T9989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.040320][ T9989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.054023][ T9989] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.060442][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.063318][ T4114] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.076748][ T9989] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.084700][ T9989] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.095155][ T9989] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.102326][ T9989] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.251532][ T4431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.253870][ T4431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.263000][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.303843][ T4551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.306079][ T4551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.319458][ T4047] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.796354][ T4114] Bluetooth: hci5: command 0x0419 tx timeout [ 482.444877][T10269] x_tables: ip_tables: tcp match: only valid for protocol 6 [ 482.666977][T10272] dccp_close: ABORT with 80 bytes unread [ 482.748977][T10275] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1605'. [ 482.908518][T10279] loop4: detected capacity change from 0 to 512 [ 483.012337][T10279] EXT4-fs (loop4): Ignoring removed bh option [ 483.036094][T10279] EXT4-fs (loop4): orphan cleanup on readonly fs [ 483.038709][T10279] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 483.058738][T10279] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1607: invalid indirect mapped block 8 (level 2) [ 483.099580][T10279] EXT4-fs (loop4): Remounting filesystem read-only [ 483.101966][T10279] EXT4-fs (loop4): 1 truncate cleaned up [ 483.103454][T10279] EXT4-fs (loop4): mounted filesystem without journal. Opts: bh,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 484.451582][T10300] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1616'. [ 485.606812][T10328] loop0: detected capacity change from 0 to 1024 [ 485.644771][T10328] EXT4-fs (loop0): Ignoring removed orlov option [ 485.647168][T10328] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 485.650396][T10328] EXT4-fs (loop0): group descriptors corrupted! [ 485.893928][T10339] xt_CT: You must specify a L4 protocol and not use inversions on it [ 486.070373][T10344] dccp_close: ABORT with 80 bytes unread [ 486.172738][T10353] loop2: detected capacity change from 0 to 512 [ 486.214656][T10353] EXT4-fs (loop2): Ignoring removed bh option [ 486.226626][T10353] EXT4-fs (loop2): orphan cleanup on readonly fs [ 486.228396][T10353] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 486.266338][T10353] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1638: invalid indirect mapped block 8 (level 2) [ 486.274344][T10353] EXT4-fs (loop2): Remounting filesystem read-only [ 486.276399][T10353] EXT4-fs (loop2): 1 truncate cleaned up [ 486.279791][T10353] EXT4-fs (loop2): mounted filesystem without journal. Opts: bh,errors=continue,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.smackfsfloor=ext4. Quota mode: writeback. [ 486.291606][T10367] loop0: detected capacity change from 0 to 256 [ 486.699240][T10392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1654'. [ 486.719429][T10392] nbd: must specify a device to reconfigure [ 486.839908][T10401] loop2: detected capacity change from 0 to 512 [ 486.868120][T10403] udc-core: couldn't find an available UDC or it's busy [ 486.872964][T10403] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 486.885691][T10401] EXT2-fs (loop2): warning: feature flags set on rev 0 fs, running e2fsck is recommended [ 486.896484][T10401] EXT2-fs (loop2): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c] [ 487.685301][T10419] udc-core: couldn't find an available UDC or it's busy [ 487.689590][T10419] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 488.282978][T10439] loop2: detected capacity change from 0 to 128 [ 490.315858][T10470] loop2: detected capacity change from 0 to 40427 [ 490.357673][T10470] F2FS-fs (loop2): invalid crc value [ 490.393240][T10470] F2FS-fs (loop2): Found nat_bits in checkpoint [ 490.427373][T10470] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 490.440280][T10470] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 492.613378][T10508] udc-core: couldn't find an available UDC or it's busy [ 492.615162][T10508] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 496.346787][T10560] loop3: detected capacity change from 0 to 16 [ 496.389928][T10560] erofs: (device loop3): mounted with root inode @ nid 36. [ 496.609330][T10566] loop4: detected capacity change from 0 to 1024 [ 496.641099][T10566] hfsplus: invalid extent max_key_len 0 [ 496.644078][T10566] hfsplus: failed to load extents file [ 497.039908][T10580] loop2: detected capacity change from 0 to 256 [ 497.168389][ T3770] Bluetooth: hci4: command 0x0406 tx timeout [ 497.185791][T10588] loop0: detected capacity change from 0 to 1024 [ 497.228416][T10592] loop4: detected capacity change from 0 to 128 [ 497.348711][T10592] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 497.696005][T10605] loop2: detected capacity change from 0 to 256 [ 497.711663][T10607] loop4: detected capacity change from 0 to 1024 [ 497.757872][T10607] hfsplus: invalid extent max_key_len 0 [ 497.759555][T10607] hfsplus: failed to load extents file [ 497.773713][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 497.782656][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 497.812818][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 497.835934][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 497.847208][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 497.856636][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 497.879011][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 497.883954][T10605] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 497.886515][T10605] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 498.083589][T10620] udc-core: couldn't find an available UDC or it's busy [ 498.085421][T10620] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 498.094461][T10622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1735'. [ 498.096791][T10622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1735'. [ 498.126059][T10623] trusted_key: encrypted_key: insufficient parameters specified [ 498.143919][T10622] device bridge1 entered promiscuous mode [ 498.473635][T10637] loop2: detected capacity change from 0 to 1024 [ 498.537626][T10637] hfsplus: invalid extent max_key_len 0 [ 498.539357][T10637] hfsplus: failed to load extents file [ 498.688391][T10648] tmpfs: Bad value for 'mpol' [ 498.739074][T10651] udc-core: couldn't find an available UDC or it's busy [ 498.743287][T10651] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 498.803101][T10656] udc-core: couldn't find an available UDC or it's busy [ 498.805045][T10656] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 498.825725][T10626] chnl_net:caif_netlink_parms(): no params data found [ 499.130530][ T3985] Bluetooth: Wrong link type (-71) [ 499.155992][T10626] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.172890][T10626] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.175522][T10626] device bridge_slave_0 entered promiscuous mode [ 499.179319][T10626] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.181849][T10626] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.184382][T10626] device bridge_slave_1 entered promiscuous mode [ 499.257750][T10626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.280991][T10626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.328849][T10684] udc-core: couldn't find an available UDC or it's busy [ 499.332134][T10684] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 499.352812][T10626] team0: Port device team_slave_0 added [ 499.361536][T10626] team0: Port device team_slave_1 added [ 499.397580][T10626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.401878][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.427845][T10626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.438636][T10626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.447692][T10626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 499.457346][T10626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.542180][T10626] device hsr_slave_0 entered promiscuous mode [ 499.600506][T10626] device hsr_slave_1 entered promiscuous mode [ 499.634098][T10626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.636469][T10626] Cannot create hsr debugfs directory [ 499.798138][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 499.802967][T10626] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.825249][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 499.945683][T10626] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.129287][ T26] audit: type=1326 audit(500.074:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.159881][ T26] audit: type=1326 audit(500.074:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.198411][ T26] audit: type=1326 audit(500.074:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.234791][ T26] audit: type=1326 audit(500.074:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=69 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.252176][T10626] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.263635][ T26] audit: type=1326 audit(500.074:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.276881][ T26] audit: type=1326 audit(500.074:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=190 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.288015][ T26] audit: type=1326 audit(500.074:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.402731][ T26] audit: type=1326 audit(500.074:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.566067][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 500.590944][ T26] audit: type=1326 audit(500.074:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 500.770220][ T26] audit: type=1326 audit(500.074:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10704 comm="syz.4.1769" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=198 compat=0 ip=0xffff84e3e328 code=0x7ffc0000 [ 501.516717][T10626] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.915782][T10626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.026293][ T4016] Bluetooth: hci0: command 0x041b tx timeout [ 503.706508][T10626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.841770][T10626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 503.996455][T10626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.214536][T10626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.229347][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 504.232229][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 504.245406][T10626] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.251253][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 504.268992][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 504.273435][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 504.277179][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.279041][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.296344][ T9136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 504.298903][ T9136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 504.302653][ T9136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 504.306699][ T9136] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.308659][ T9136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.316562][ T9136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 504.348177][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 504.351796][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 504.355138][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 504.366386][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 504.371002][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 504.375948][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 504.379400][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 504.387984][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 504.393988][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 504.417675][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 504.423042][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 504.611469][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.614363][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.620696][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.632862][ T13] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 504.635260][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.668959][ T13] usb 1-1: config 0 descriptor?? [ 504.701148][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 504.703272][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 504.709184][T10626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.863567][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 504.866371][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 505.070070][ T4016] Bluetooth: hci0: command 0x040f tx timeout [ 505.698369][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 505.701099][ T4016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 505.705515][T10626] device veth0_vlan entered promiscuous mode [ 505.743689][ T13] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 505.769951][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 505.772464][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 505.777765][T10626] device veth1_vlan entered promiscuous mode [ 505.974892][ T9736] usb 1-1: USB disconnect, device number 9 [ 505.980363][T10804] tmpfs: Bad value for 'mpol' [ 506.045117][T10807] loop0: detected capacity change from 0 to 7 [ 506.061144][ T4540] device hsr_slave_0 left promiscuous mode [ 506.420896][ T4540] device hsr_slave_1 left promiscuous mode [ 506.679898][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.681852][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.699775][T10807] Dev loop0: unable to read RDB block 7 [ 506.701173][T10807] loop0: AHDI p3 p4 [ 506.702172][T10807] loop0: partition table partially beyond EOD, truncated [ 506.704705][T10807] loop0: p3 start 6514546 is beyond EOD, truncated [ 506.713572][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.718026][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.768842][ T4540] device bridge_slave_1 left promiscuous mode [ 506.774240][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.871608][ T4540] device bridge_slave_0 left promiscuous mode [ 506.873361][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.931787][T10812] tmpfs: Bad value for 'mpol' [ 507.659566][ T9136] Bluetooth: hci0: command 0x0419 tx timeout [ 507.951801][ T4540] device veth1_macvtap left promiscuous mode [ 507.953589][ T4540] device veth0_macvtap left promiscuous mode [ 507.955422][ T4540] device veth1_vlan left promiscuous mode [ 507.957579][ T4540] device veth0_vlan left promiscuous mode [ 508.136211][T10863] loop0: detected capacity change from 0 to 7 [ 508.146496][T10863] Dev loop0: unable to read RDB block 7 [ 508.152943][T10863] loop0: AHDI p3 p4 [ 508.153946][T10863] loop0: partition table partially beyond EOD, truncated [ 508.162732][T10863] loop0: p3 start 6514546 is beyond EOD, truncated [ 508.301571][T10867] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1812'. [ 508.960232][ T4540] team0 (unregistering): Port device team_slave_1 removed [ 509.029967][ T4540] team0 (unregistering): Port device team_slave_0 removed [ 509.055886][ T4540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.820260][ T4540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.187619][ T4540] bond0 (unregistering): Released all slaves [ 510.381414][T10626] device veth0_macvtap entered promiscuous mode [ 510.403225][T10626] device veth1_macvtap entered promiscuous mode [ 510.441160][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.443969][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.446491][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.478160][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.482730][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.485393][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.487823][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.501638][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.520914][T10626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.531747][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.534532][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.549749][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.552498][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.554914][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.557473][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.588461][T10626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 510.599810][T10626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.608894][T10626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.626104][T10626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.628447][T10626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.639688][T10626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.642096][T10626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.740123][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 510.742821][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 510.745465][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 510.747900][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 510.750555][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 510.753283][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 510.755935][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 510.759290][ T9736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 510.943923][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.946278][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.959002][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 510.983497][ T4456] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.985820][ T4456] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.846134][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 511.877448][T10904] loop0: detected capacity change from 0 to 7 [ 511.890802][T10904] Dev loop0: unable to read RDB block 7 [ 511.892355][T10904] loop0: AHDI p3 p4 [ 511.893398][T10904] loop0: partition table partially beyond EOD, truncated [ 511.930575][T10904] loop0: p3 start 6514546 is beyond EOD, truncated [ 512.628177][T10923] udc-core: couldn't find an available UDC or it's busy [ 512.641392][T10923] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 514.454025][T10944] udc-core: couldn't find an available UDC or it's busy [ 514.455935][T10944] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 514.749978][T10953] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1838'. [ 514.895911][T10956] loop0: detected capacity change from 0 to 7 [ 514.924425][T10956] Dev loop0: unable to read RDB block 7 [ 515.100269][T10956] loop0: AHDI p3 p4 [ 515.101531][T10956] loop0: partition table partially beyond EOD, truncated [ 515.117815][T10956] loop0: p3 start 6514546 is beyond EOD, truncated [ 515.428110][T10963] udc-core: couldn't find an available UDC or it's busy [ 515.436811][T10963] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 516.051664][T10983] tmpfs: Bad value for 'mpol' [ 517.595297][T11008] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1857'. [ 518.873115][T11022] udc-core: couldn't find an available UDC or it's busy [ 518.874960][T11022] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 519.360056][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 519.482449][T11033] loop4: detected capacity change from 0 to 512 [ 519.599760][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 519.610429][T11033] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 519.628732][T11033] EXT4-fs (loop4): orphan cleanup on readonly fs [ 519.640874][T11033] EXT4-fs (loop4): 1 truncate cleaned up [ 519.644134][ T4431] __quota_error: 4 callbacks suppressed [ 519.644145][ T4431] Quota error (device loop4): free_dqentry: Quota structure has offset to other block (1) than it should (5) [ 519.663150][ T4431] EXT4-fs error (device loop4): ext4_release_dquot:6219: comm kworker/u4:11: Failed to release dquot type 1 [ 519.705068][T11033] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=,noblock_validity,discard,barrier=0x0000000000000003,noinit_itable,noinit_itable,noauto_da_alloc,resgid=0x0000000000000000,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 519.719856][ T13] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 519.722415][ T13] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 519.725148][ T13] usb 1-1: config 135 has no interface number 0 [ 519.726719][ T13] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.959957][ T13] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 519.962707][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.964871][ T13] usb 1-1: Product: syz [ 519.966010][ T13] usb 1-1: Manufacturer: syz [ 519.968330][ T13] usb 1-1: SerialNumber: syz [ 520.225506][ T13] usb 1-1: USB disconnect, device number 10 [ 520.902459][T11073] udc-core: couldn't find an available UDC or it's busy [ 520.904306][T11073] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 530.181450][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1925'. [ 530.185654][T11201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1925'. [ 530.753283][T11215] xt_TCPMSS: Only works on TCP SYN packets [ 532.139002][T11227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1934'. [ 532.164537][T11227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1934'. [ 532.231858][T11230] loop0: detected capacity change from 0 to 1764 [ 534.743721][T11254] xt_TCPMSS: Only works on TCP SYN packets [ 535.491902][T11261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1946'. [ 535.537917][T11261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1946'. [ 535.558188][T11265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1948'. [ 536.420183][T11265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1948'. [ 536.561547][T11276] loop3: detected capacity change from 0 to 1764 [ 536.970867][T11291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1953'. [ 537.298548][T11300] xt_TCPMSS: Only works on TCP SYN packets [ 537.747430][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1959'. [ 537.758905][T11309] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1959'. [ 537.999390][T11317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 538.003770][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 539.105324][T11326] loop1: detected capacity change from 0 to 1764 [ 539.636964][T11345] xt_TCPMSS: Only works on TCP SYN packets [ 539.941861][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1971'. [ 540.561437][T11367] __nla_validate_parse: 3 callbacks suppressed [ 540.561451][T11367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 540.572480][T11367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 540.964733][T11378] loop2: detected capacity change from 0 to 1764 [ 543.029595][T11397] xt_TCPMSS: Only works on TCP SYN packets [ 543.234911][T11404] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 543.434636][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1987'. [ 543.560008][T11402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1988'. [ 543.563863][T11402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1988'. [ 543.756474][T11415] xt_TCPMSS: Only works on TCP SYN packets [ 543.923085][T11417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'. [ 543.940656][T11417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1991'. [ 546.132779][T11439] loop3: detected capacity change from 0 to 1764 [ 546.417614][T11448] xt_TCPMSS: Only works on TCP SYN packets [ 546.879179][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2002'. [ 546.899125][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2002'. [ 547.447023][T11470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2006'. [ 547.457763][T11470] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2006'. [ 547.746871][T11477] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2007'. [ 547.757900][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2007'. [ 548.405910][T11480] loop0: detected capacity change from 0 to 1764 [ 548.747790][T11498] xt_TCPMSS: Only works on TCP SYN packets [ 549.648523][T11521] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2020'. [ 549.659484][T11521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2020'. [ 549.674857][T11522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2021'. [ 549.690813][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2021'. [ 549.991606][T11528] xt_TCPMSS: Only works on TCP SYN packets [ 551.289399][T11540] loop1: detected capacity change from 0 to 1764 [ 551.680317][T11553] xt_TCPMSS: Only works on TCP SYN packets [ 552.270590][T11561] __nla_validate_parse: 2 callbacks suppressed [ 552.270603][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2032'. [ 552.302207][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2032'. [ 552.382841][T11571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2033'. [ 552.473144][T11563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 552.569583][T11576] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2037'. [ 553.355929][T11585] xt_TCPMSS: Only works on TCP SYN packets [ 554.298279][T11593] loop0: detected capacity change from 0 to 1764 [ 554.396307][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2041'. [ 554.403588][T11602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2041'. [ 554.493181][T11604] xt_TCPMSS: Only works on TCP SYN packets [ 554.834452][T11614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 554.859135][T11614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 555.186299][T11625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2050'. [ 557.285111][T11655] __nla_validate_parse: 1 callbacks suppressed [ 557.285126][T11655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 557.309075][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2059'. [ 557.424194][T11662] xt_TCPMSS: Only works on TCP SYN packets [ 557.522288][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2061'. [ 557.558160][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2061'. [ 558.488808][T11683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2067'. [ 558.749817][T11683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2067'. [ 560.356438][T11714] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 560.361558][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2075'. [ 560.376660][T11713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2076'. [ 560.397016][T11713] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2076'. [ 560.476743][T11724] xt_TCPMSS: Only works on TCP SYN packets [ 560.641319][ T13] binder: undelivered death notification, 0000000000000000 [ 561.958326][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.960037][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.124146][T11772] __nla_validate_parse: 2 callbacks suppressed [ 563.124161][T11772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 563.162766][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2092'. [ 564.761368][T11808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2103'. [ 564.765095][T11808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2103'. [ 564.839414][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2104'. [ 564.850439][T11813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2104'. [ 564.930189][T11817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2105'. [ 564.939195][T11817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2105'. [ 567.330472][T11846] xt_TCPMSS: Only works on TCP SYN packets [ 567.717695][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 567.748635][T11861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2118'. [ 569.078322][ T9135] Bluetooth: hci5: command 0x0406 tx timeout [ 570.056282][T11906] xt_TCPMSS: Only works on TCP SYN packets [ 571.143561][T11918] __nla_validate_parse: 6 callbacks suppressed [ 571.143576][T11918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 571.192702][T11918] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2134'. [ 571.225053][T11914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2135'. [ 571.259098][T11914] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2135'. [ 571.767822][T11931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 571.795318][T11931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2137'. [ 571.803665][T11938] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2139'. [ 571.922638][T11938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'. [ 573.075094][T11957] xt_TCPMSS: Only works on TCP SYN packets [ 573.914055][T11975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2148'. [ 573.961884][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2148'. [ 576.152834][T12008] __nla_validate_parse: 4 callbacks suppressed [ 576.152847][T12008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2158'. [ 576.204807][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2158'. [ 576.880184][T12020] xt_TCPMSS: Only works on TCP SYN packets [ 577.328815][T12028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2163'. [ 577.426648][T12028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2163'. [ 577.736469][T12038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2167'. [ 577.766159][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2167'. [ 579.017966][T12059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2173'. [ 579.022178][T12059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2173'. [ 579.145712][T12064] xt_TCPMSS: Only works on TCP SYN packets [ 580.009624][T12071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2178'. [ 580.692148][T12071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2178'. [ 582.728391][T12122] xt_TCPMSS: Only works on TCP SYN packets [ 582.808287][T12123] __nla_validate_parse: 2 callbacks suppressed [ 582.808300][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2190'. [ 582.882792][T12123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2190'. [ 583.488040][T12144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2196'. [ 583.538559][T12143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2196'. [ 585.221360][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2202'. [ 585.231944][T12166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2202'. [ 585.585664][T12179] xt_TCPMSS: Only works on TCP SYN packets [ 585.690788][T12181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2206'. [ 585.696963][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2206'. [ 586.613528][T12187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2209'. [ 586.642270][T12187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2209'. [ 587.425482][T12220] xt_TCPMSS: Only works on TCP SYN packets [ 588.299324][T12229] __nla_validate_parse: 2 callbacks suppressed [ 588.299337][T12229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2221'. [ 588.329199][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2221'. [ 589.419324][T12237] loop3: detected capacity change from 0 to 47 [ 589.613289][T12237] 9pnet: Insufficient options for proto=fd [ 589.665556][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2226'. [ 589.670456][T12243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 590.181404][T12259] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2230'. [ 590.188011][T12259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2230'. [ 591.522186][T12276] xt_TCPMSS: Only works on TCP SYN packets [ 592.186605][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2234'. [ 592.207493][T12277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 592.384086][T12285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2237'. [ 592.393048][T12285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 594.417693][T12333] xt_TCPMSS: Only works on TCP SYN packets [ 595.340273][T12344] __nla_validate_parse: 2 callbacks suppressed [ 595.340286][T12344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2253'. [ 595.368543][T12344] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2253'. [ 595.567312][T12357] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2255'. [ 595.584529][T12357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2255'. [ 595.601512][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2256'. [ 595.767640][T12361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2256'. [ 596.320723][T12376] loop2: detected capacity change from 0 to 128 [ 596.423807][T12376] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 596.446351][T12376] EXT4-fs warning (device loop2): __ext4_ioctl:881: Setting inode version is not supported with metadata_csum enabled. [ 596.578944][T12389] xt_TCPMSS: Only works on TCP SYN packets [ 596.589577][T12389] loop0: detected capacity change from 0 to 16384 [ 597.320300][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2269'. [ 597.324263][T12401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2269'. [ 597.496738][T12405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2271'. [ 597.821388][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2271'. [ 598.814087][T12423] loop2: detected capacity change from 0 to 4 [ 598.827356][T12423] Dev loop2: unable to read RDB block 4 [ 598.828773][T12423] loop2: unable to read partition table [ 598.850073][T12423] loop2: partition table beyond EOD, truncated [ 598.851832][T12423] loop_reread_partitions: partition scan of loop2 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 598.851832][T12423] ) failed (rc=-5) [ 598.917525][T12428] binder: 12427:12428 tried to acquire reference to desc 0, got 1 instead [ 598.926478][T12428] binder: 12427:12428 ioctl 400c620e 200001c0 returned -22 [ 599.204545][T12439] xt_TCPMSS: Only works on TCP SYN packets [ 599.207080][T12439] loop0: detected capacity change from 0 to 16384 [ 599.554151][T12426] loop1: detected capacity change from 0 to 40427 [ 599.863894][T12426] F2FS-fs (loop1): Found nat_bits in checkpoint [ 599.920317][T12426] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 600.033777][T10626] attempt to access beyond end of device [ 600.033777][T10626] loop1: rw=2049, want=45104, limit=40427 [ 602.434213][T12495] xt_TCPMSS: Only works on TCP SYN packets [ 602.453893][T12495] loop0: detected capacity change from 0 to 16384 [ 603.205885][T12501] binder: 12499:12501 tried to acquire reference to desc 0, got 1 instead [ 603.209054][T12501] binder: 12499:12501 ioctl 400c620e 200001c0 returned -22 [ 603.260854][T12504] __nla_validate_parse: 8 callbacks suppressed [ 603.260866][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2298'. [ 603.276149][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2298'. [ 603.395747][T12511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 603.559220][T12520] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2302'. [ 603.568139][T12520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2302'. [ 604.761202][T12537] xt_TCPMSS: Only works on TCP SYN packets [ 605.774101][T12546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 605.784197][T12546] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2312'. [ 605.797252][T12550] binder: 12548:12550 tried to acquire reference to desc 0, got 1 instead [ 605.805961][T12550] binder: 12548:12550 ioctl 400c620e 200001c0 returned -22 [ 606.039583][T12563] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2315'. [ 606.171784][T12564] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2318'. [ 606.185103][T12564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2318'. [ 607.249028][T12583] xt_TCPMSS: Only works on TCP SYN packets [ 608.821188][T12600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2327'. [ 608.824962][T12600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2327'. [ 609.054629][T12605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2330'. [ 609.152512][T12611] binder: 12610:12611 ioctl 400c620e 200001c0 returned -22 [ 609.606568][T12618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2332'. [ 609.618148][T12618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2332'. [ 610.419434][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2334'. [ 610.660711][T12639] xt_TCPMSS: Only works on TCP SYN packets [ 611.531366][T12647] binder: 12646:12647 ioctl 400c620e 200001c0 returned -22 [ 611.606104][T12651] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2341'. [ 611.611721][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2341'. [ 611.617551][T12650] loop1: detected capacity change from 0 to 1764 [ 611.973868][T12650] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2343'. [ 612.856258][T12674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2347'. [ 612.919094][T12676] xt_TCPMSS: Only works on TCP SYN packets [ 612.923076][T12676] loop0: detected capacity change from 0 to 16384 [ 614.393852][T12695] xt_TCPMSS: Only works on TCP SYN packets [ 614.633240][T12700] binder: 12699:12700 ioctl 400c620e 200001c0 returned -22 [ 614.857817][T12707] __nla_validate_parse: 2 callbacks suppressed [ 614.857832][T12707] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2356'. [ 614.869168][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2356'. [ 615.924729][T12722] loop0: detected capacity change from 0 to 1764 [ 616.002729][T12728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2362'. [ 616.006476][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2362'. [ 616.141298][T12733] xt_TCPMSS: Only works on TCP SYN packets [ 616.144246][T12733] loop0: detected capacity change from 0 to 16384 [ 616.285383][T12722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2360'. [ 616.825649][T12746] binder: 12745:12746 ioctl 400c620e 200001c0 returned -22 [ 617.017560][T12752] xt_TCPMSS: Only works on TCP SYN packets [ 617.906676][T12764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 618.085691][T12772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2374'. [ 618.099532][T12772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2374'. [ 618.322551][T12779] loop0: detected capacity change from 0 to 1764 [ 618.820843][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2376'. [ 618.877635][T12786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2378'. [ 619.248600][T12800] binder: 12799:12800 ioctl 400c620e 200001c0 returned -22 [ 619.466536][T12803] xt_TCPMSS: Only works on TCP SYN packets [ 620.238906][T12814] __nla_validate_parse: 1 callbacks suppressed [ 620.238920][T12814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2385'. [ 620.441422][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2387'. [ 620.466831][T12822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2387'. [ 620.497247][T12823] loop0: detected capacity change from 0 to 1764 [ 620.642662][T12823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2389'. [ 620.938556][T12835] xt_TCPMSS: Only works on TCP SYN packets [ 621.055850][T12842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2393'. [ 621.073543][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2393'. [ 621.389229][T12845] binder: 12844:12845 ioctl 400c620e 200001c0 returned -22 [ 622.419578][T12860] xt_TCPMSS: Only works on TCP SYN packets [ 622.610234][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.611877][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.735584][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2399'. [ 622.763275][T12866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2399'. [ 622.804310][T12869] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 622.820697][T12869] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2400'. [ 623.113258][T12873] loop1: detected capacity change from 0 to 1764 [ 625.266473][ T9736] Bluetooth: hci0: command 0x0406 tx timeout [ 625.422648][T12909] xt_TCPMSS: Only works on TCP SYN packets [ 625.691277][T12915] __nla_validate_parse: 3 callbacks suppressed [ 625.691290][T12915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2413'. [ 625.729251][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2413'. [ 625.958309][T12924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2415'. [ 625.998651][T12920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2415'. [ 627.196795][T12940] loop3: detected capacity change from 0 to 1764 [ 628.113192][T12940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2420'. [ 628.121840][T12949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2423'. [ 628.137242][T12949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2423'. [ 628.378052][T12965] xt_TCPMSS: Only works on TCP SYN packets [ 628.801372][T12972] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2428'. [ 628.845694][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'. [ 628.974131][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2430'. [ 630.342331][T13003] loop1: detected capacity change from 0 to 1764 [ 631.670411][T13020] binder: 13019:13020 ioctl 400c620e 200001c0 returned -22 [ 631.686304][T13021] __nla_validate_parse: 2 callbacks suppressed [ 631.686318][T13021] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2441'. [ 631.707267][T13021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2441'. [ 631.894091][T13027] xt_TCPMSS: Only works on TCP SYN packets [ 632.285999][T13032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2445'. [ 632.304872][T13032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2445'. [ 632.691806][T13038] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2446'. [ 632.711655][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2446'. [ 633.791382][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2450'. [ 634.741277][T13069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2455'. [ 634.751817][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2455'. [ 634.843511][T13075] xt_TCPMSS: Only works on TCP SYN packets [ 634.993494][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2457'. [ 637.202256][T13113] loop2: detected capacity change from 0 to 1764 [ 637.587574][T13123] xt_TCPMSS: Only works on TCP SYN packets [ 638.454706][T13113] __nla_validate_parse: 3 callbacks suppressed [ 638.454719][T13113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2467'. [ 638.677918][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2472'. [ 638.721406][T13135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2472'. [ 638.907843][T13147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2473'. [ 638.910974][T13144] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2474'. [ 638.924282][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2473'. [ 638.935414][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2474'. [ 638.980481][T13146] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 638.989480][T13146] overlayfs: failed to set xattr on upper [ 639.012282][T13146] overlayfs: ...falling back to index=off,metacopy=off. [ 639.037004][T13146] overlayfs: maximum fs stacking depth exceeded [ 639.513863][T13166] loop0: detected capacity change from 0 to 1764 [ 639.567908][T13166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2483'. [ 640.491615][T13178] xt_TCPMSS: Only works on TCP SYN packets [ 640.746787][T13184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2485'. [ 640.774146][T13184] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 641.153712][T13191] loop1: detected capacity change from 0 to 1024 [ 641.813943][T13216] loop2: detected capacity change from 0 to 1764 [ 642.535068][T13229] xt_TCPMSS: Only works on TCP SYN packets [ 642.784014][T13234] binder: 13233:13234 ioctl 400c620e 200001c0 returned -22 [ 643.568880][T13265] __nla_validate_parse: 11 callbacks suppressed [ 643.568893][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2508'. [ 644.947454][T13294] xt_TCPMSS: Only works on TCP SYN packets [ 645.462876][T13306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2518'. [ 645.499564][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 645.611819][T13310] loop3: detected capacity change from 0 to 1764 [ 645.716032][T13315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2519'. [ 645.730789][T13315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 645.821311][T13310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2520'. [ 647.063902][T13339] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2527'. [ 647.091173][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2527'. [ 647.488855][T13348] xt_TCPMSS: Only works on TCP SYN packets [ 647.854810][T13356] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2531'. [ 647.888289][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2531'. [ 649.416104][T13396] __nla_validate_parse: 3 callbacks suppressed [ 649.416118][T13396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2540'. [ 649.476698][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2540'. [ 650.376053][T13394] xt_TCPMSS: Only works on TCP SYN packets [ 651.436916][T13427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2551'. [ 651.450961][T13427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2551'. [ 651.547100][T13430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2550'. [ 651.551154][T13430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2550'. [ 651.868547][T13436] loop1: detected capacity change from 0 to 1764 [ 651.890479][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2553'. [ 652.863644][T13450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2555'. [ 652.922155][T13450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2555'. [ 654.216325][T13477] xt_TCPMSS: Only works on TCP SYN packets [ 654.974837][T13481] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2562'. [ 654.993485][T13483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2563'. [ 654.993921][T13481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2562'. [ 655.001134][T13483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2563'. [ 655.111734][T13493] xt_TCPMSS: Only works on TCP SYN packets [ 655.225142][T13491] loop0: detected capacity change from 0 to 1764 [ 655.361294][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2567'. [ 655.599380][T13502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2568'. [ 655.652782][T13502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2568'. [ 658.271352][T13538] xt_TCPMSS: Only works on TCP SYN packets [ 658.942127][T13545] loop1: detected capacity change from 0 to 1764 [ 659.000793][T13543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2579'. [ 659.004749][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2579'. [ 659.090432][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2580'. [ 659.329747][T13559] xt_TCPMSS: Only works on TCP SYN packets [ 661.164182][T13590] xt_TCPMSS: Only works on TCP SYN packets [ 661.833199][T13595] loop1: detected capacity change from 0 to 1764 [ 661.865722][T13595] __nla_validate_parse: 3 callbacks suppressed [ 661.865735][T13595] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2593'. [ 661.903930][T13600] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2592'. [ 661.913602][T13600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2592'. [ 662.018295][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2594'. [ 662.282004][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2597'. [ 662.343060][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2597'. [ 662.581225][T13632] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2602'. [ 662.593674][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2602'. [ 663.701204][T13651] xt_TCPMSS: Only works on TCP SYN packets [ 663.852789][T13649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2607'. [ 663.863286][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2607'. [ 664.714891][T13677] xt_TCPMSS: Only works on TCP SYN packets [ 666.070207][T13702] xt_TCPMSS: Only works on TCP SYN packets [ 667.020567][T13727] xt_TCPMSS: Only works on TCP SYN packets [ 667.194091][T13734] __nla_validate_parse: 9 callbacks suppressed [ 667.194105][T13734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2625'. [ 667.449612][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2629'. [ 667.477674][T13739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 667.652816][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2631'. [ 667.663102][T13746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2631'. [ 667.937302][T13754] xt_TCPMSS: Only works on TCP SYN packets [ 668.540470][T13754] rdma_op 0000000008b23526 conn xmit_rdma 0000000000000000 [ 668.565593][T13754] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 668.612078][T13754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 668.652885][T13754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 668.672564][T13754] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 668.781812][T13762] loop1: detected capacity change from 0 to 1764 [ 668.787596][T13759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2635'. [ 668.792900][T13759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2635'. [ 668.908350][T13762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2636'. [ 669.052880][T13772] xt_TCPMSS: Only works on TCP SYN packets [ 669.709364][T13786] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'. [ 670.035501][T13791] xt_TCPMSS: Only works on TCP SYN packets [ 670.675671][T13795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2645'. [ 671.845937][T13826] xt_TCPMSS: Only works on TCP SYN packets [ 671.914198][T13822] loop0: detected capacity change from 0 to 1764 [ 672.450398][T13822] __nla_validate_parse: 4 callbacks suppressed [ 672.450412][T13822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 672.868345][T13849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2659'. [ 672.887547][T13849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2659'. [ 674.071131][T13870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2665'. [ 674.080712][T13870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2665'. [ 674.229353][T13875] xt_TCPMSS: Only works on TCP SYN packets [ 674.775380][T13864] loop1: detected capacity change from 0 to 32768 [ 674.811112][T13864] jfs: Unrecognized mount option "iocharseȼ ÿt=cp437" or missing value [ 674.875979][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2669'. [ 674.966870][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2668'. [ 674.973470][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 674.977567][T13891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2668'. [ 674.981697][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 676.899814][T13916] xt_TCPMSS: Only works on TCP SYN packets [ 677.515979][T13931] loop1: detected capacity change from 0 to 1764 [ 677.870403][T13938] __nla_validate_parse: 2 callbacks suppressed [ 677.870418][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2683'. [ 677.885164][T13931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'. [ 677.908588][T13938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2683'. [ 678.016127][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2685'. [ 678.021098][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2685'. [ 679.436882][T13941] loop2: detected capacity change from 0 to 32768 [ 679.918512][T13976] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2693'. [ 679.922825][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2693'. [ 680.157668][T13980] xt_TCPMSS: Only works on TCP SYN packets [ 680.450933][T13985] loop3: detected capacity change from 0 to 1764 [ 681.059611][T13997] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'. [ 681.301823][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 681.582715][T14003] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2700'. [ 681.834820][T14014] binder: 14012:14014 ioctl 400c620e 200001c0 returned -22 [ 682.329297][T14037] xt_TCPMSS: Only works on TCP SYN packets [ 683.623490][T14051] xt_TCPMSS: Only works on TCP SYN packets [ 684.004251][T14060] __nla_validate_parse: 4 callbacks suppressed [ 684.004265][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2714'. [ 684.042545][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 684.044221][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.062896][T14060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 684.243105][T14068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2717'. [ 684.246922][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2717'. [ 684.319371][T14069] loop3: detected capacity change from 0 to 1764 [ 684.416143][T14075] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2719'. [ 684.429984][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2719'. [ 684.473549][T14077] binder: 14076:14077 ioctl 400c620e 200001c0 returned -22 [ 684.537826][T14069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2718'. [ 685.994705][T14106] xt_TCPMSS: Only works on TCP SYN packets [ 686.144846][T14107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2729'. [ 686.166612][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2729'. [ 686.299015][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2730'. [ 686.496970][T14116] binder: 14115:14116 ioctl 400c620e 200001c0 returned -22 [ 686.636972][T14118] loop1: detected capacity change from 0 to 1764 [ 688.678117][T14165] xt_TCPMSS: Only works on TCP SYN packets [ 689.457744][T14181] __nla_validate_parse: 8 callbacks suppressed [ 689.457758][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 689.479314][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2748'. [ 689.524548][T14184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2749'. [ 689.528484][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2749'. [ 690.296156][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2752'. [ 691.601558][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2756'. [ 691.611360][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 691.932050][T14219] loop2: detected capacity change from 0 to 256 [ 692.039612][T14221] xt_TCPMSS: Only works on TCP SYN packets [ 692.193046][T14189] loop0: detected capacity change from 0 to 65536 [ 692.223713][T14227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'. [ 692.245592][T14225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2761'. [ 692.249343][T14225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2761'. [ 692.303351][T14219] FAT-fs (loop2): Directory bread(block 64) failed [ 692.325690][T14219] FAT-fs (loop2): Directory bread(block 65) failed [ 692.327496][T14219] FAT-fs (loop2): Directory bread(block 66) failed [ 692.329241][T14219] FAT-fs (loop2): Directory bread(block 67) failed [ 692.361990][T14219] FAT-fs (loop2): Directory bread(block 68) failed [ 692.371180][T14189] XFS (loop0): Mounting V5 Filesystem [ 692.378912][T14219] FAT-fs (loop2): Directory bread(block 69) failed [ 692.388191][T14219] FAT-fs (loop2): Directory bread(block 70) failed [ 692.418767][T14219] FAT-fs (loop2): Directory bread(block 71) failed [ 692.437511][T14219] FAT-fs (loop2): Directory bread(block 72) failed [ 692.443362][T14189] XFS (loop0): Ending clean mount [ 692.449272][T14219] FAT-fs (loop2): Directory bread(block 73) failed [ 692.901506][ T8778] XFS (loop0): Unmounting Filesystem [ 694.536105][T14278] xt_TCPMSS: Only works on TCP SYN packets [ 695.093422][T14285] __nla_validate_parse: 6 callbacks suppressed [ 695.093437][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2774'. [ 695.124125][T14284] loop0: detected capacity change from 0 to 1764 [ 695.144446][T14285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 695.306094][T14284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2763'. [ 695.504496][T14298] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2776'. [ 695.519459][T14298] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2776'. [ 695.736313][T14307] binder: 14305:14307 ioctl 400c620e 0 returned -14 [ 696.861203][ T4540] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.142617][ T4540] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.479996][ T9135] Bluetooth: hci1: command 0x0409 tx timeout [ 697.862579][T14292] chnl_net:caif_netlink_parms(): no params data found [ 697.956820][ T4540] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.992754][T14329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2784'. [ 698.001522][T14324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2784'. [ 698.100791][T14334] xt_TCPMSS: Only works on TCP SYN packets [ 698.177918][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.186858][T14292] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.189542][T14292] device bridge_slave_0 entered promiscuous mode [ 698.204934][ T4540] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 698.222078][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.224055][T14292] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.226455][T14292] device bridge_slave_1 entered promiscuous mode [ 698.259175][T14292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.272585][T14292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 698.413312][T14292] team0: Port device team_slave_0 added [ 698.428493][T14337] loop3: detected capacity change from 0 to 1764 [ 698.439613][T14292] team0: Port device team_slave_1 added [ 698.518122][T14292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.529954][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.551325][T14292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.578906][T14292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.588614][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.615199][T14292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.637526][T14343] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2788'. [ 698.649290][T14343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2788'. [ 698.711121][T14337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2786'. [ 698.712322][T14292] device hsr_slave_0 entered promiscuous mode [ 698.742497][T14292] device hsr_slave_1 entered promiscuous mode [ 698.780199][T14292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 698.782172][T14292] Cannot create hsr debugfs directory [ 699.589593][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 699.917611][T14365] binder: 14364:14365 ioctl 400c620e 0 returned -14 [ 700.136213][T14370] __nla_validate_parse: 2 callbacks suppressed [ 700.136237][T14370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2796'. [ 700.523323][T14387] xt_TCPMSS: Only works on TCP SYN packets [ 700.564050][T14370] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2796'. [ 701.204588][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2801'. [ 701.211344][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2801'. [ 701.349143][T14414] loop1: detected capacity change from 0 to 1764 [ 701.486811][T14414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 701.604491][T14292] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 701.630755][ T9136] Bluetooth: hci1: command 0x040f tx timeout [ 701.655392][T14292] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 701.726191][T14292] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 701.864350][T14292] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 702.685406][T14440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2806'. [ 702.714955][T14440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2806'. [ 702.741549][T14452] binder: 14451:14452 ioctl 400c620e 0 returned -14 [ 702.871368][T14458] xt_TCPMSS: Only works on TCP SYN packets [ 703.963674][ T4018] Bluetooth: hci1: command 0x0419 tx timeout [ 704.140239][T14292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.357276][T14489] loop2: detected capacity change from 0 to 1764 [ 705.032645][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 705.035425][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 705.208806][T14292] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.227189][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 705.231884][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 705.234312][ T4018] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.236090][ T4018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.406231][ T4018] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 705.433452][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2815'. [ 706.104386][T14503] binder: 14502:14503 ioctl 400c620e 200001c0 returned -22 [ 706.132270][ T4540] device hsr_slave_0 left promiscuous mode [ 706.224583][ T4540] device hsr_slave_1 left promiscuous mode [ 706.280688][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.283565][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.356828][T14513] xt_TCPMSS: Only works on TCP SYN packets [ 706.454439][ T4540] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.456512][ T4540] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.462100][ T4540] device bridge_slave_1 left promiscuous mode [ 706.463862][ T4540] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.501124][ T4540] device bridge_slave_0 left promiscuous mode [ 706.502917][ T4540] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.511980][T14516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2823'. [ 706.525502][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2823'. [ 706.660076][ T4540] device veth1_macvtap left promiscuous mode [ 706.661811][ T4540] device veth0_macvtap left promiscuous mode [ 706.663481][ T4540] device veth1_vlan left promiscuous mode [ 707.031616][ T4540] team0 (unregistering): Port device team_slave_1 removed [ 707.043315][ T4540] team0 (unregistering): Port device team_slave_0 removed [ 707.055013][ T4540] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.089579][ T4540] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.127744][T14528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2825'. [ 707.131958][T14528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2825'. [ 707.249560][ T4540] bond0 (unregistering): Released all slaves [ 707.366957][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.369940][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.372467][ T9135] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.374282][ T9135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.394090][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 707.436108][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 707.438912][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 707.442776][T14533] binder: 14532:14533 ioctl 400c620e 0 returned -14 [ 707.448935][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 707.453108][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 707.462078][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 707.490697][T14292] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.493721][T14292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.497614][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 707.501111][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 707.504028][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 707.507159][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 707.510532][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 707.551714][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.213005][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.215278][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.231183][T14292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.766888][T14568] xt_TCPMSS: Only works on TCP SYN packets [ 710.067914][T14573] loop3: detected capacity change from 0 to 1764 [ 710.088471][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.091405][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.145141][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 710.147681][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 710.154647][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 710.165528][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 710.175461][T14292] device veth0_vlan entered promiscuous mode [ 710.185452][T14292] device veth1_vlan entered promiscuous mode [ 710.251587][T14576] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2836'. [ 710.278691][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2836'. [ 710.299385][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 710.302160][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 710.304729][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.310833][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 710.323662][T14292] device veth0_macvtap entered promiscuous mode [ 710.339543][T14292] device veth1_macvtap entered promiscuous mode [ 710.394769][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.397518][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.438401][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2835'. [ 710.441001][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.443475][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2838'. [ 710.443688][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.452704][T14581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2838'. [ 710.458676][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.462148][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.464628][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 710.467366][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.471400][T14292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.481546][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 710.484179][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 710.495448][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2837'. [ 710.508138][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 710.522155][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2837'. [ 710.525509][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 710.585472][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.588531][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.598739][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.603126][T14588] binder: 14587:14588 ioctl 400c620e 0 returned -14 [ 710.614523][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.617168][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.623730][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.626916][T14292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 710.638906][T14292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 710.644920][T14292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.659902][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 710.662581][ T9135] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 710.669181][T14292] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.672669][T14292] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.674909][T14292] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.677195][T14292] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 710.907673][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.912615][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.926478][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 710.948160][ T4459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 710.949660][T14594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2842'. [ 710.953284][ T4459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.970268][T14594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2842'. [ 711.574383][ T4778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 711.995250][T14616] xt_TCPMSS: Only works on TCP SYN packets [ 712.896989][T14624] loop3: detected capacity change from 0 to 1764 [ 712.922558][T14626] binder: 14625:14626 ioctl 400c620e 0 returned -14 [ 713.298237][T14636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2853'. [ 713.301599][T14624] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2849'. [ 713.302518][T14637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2852'. [ 713.337581][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2853'. [ 713.801900][T14654] binder: 14652:14654 ioctl 400c620e 200001c0 returned -22 [ 715.296964][T14681] xt_TCPMSS: Only works on TCP SYN packets [ 716.048593][T14678] loop0: detected capacity change from 0 to 1764 [ 716.332344][T14678] __nla_validate_parse: 5 callbacks suppressed [ 716.332358][T14678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2864'. [ 716.368183][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2867'. [ 716.375455][T14695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2867'. [ 716.741530][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2868'. [ 716.753310][T14696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 717.521040][T14714] binder: 14712:14714 ioctl 400c620e 200001c0 returned -22 [ 718.327155][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2874'. [ 719.110520][T14720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'. [ 719.205698][T14733] xt_TCPMSS: Only works on TCP SYN packets [ 719.305443][T14739] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2879'. [ 719.331035][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2879'. [ 719.371539][T14740] loop3: detected capacity change from 0 to 1764 [ 719.585484][T14743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2881'. [ 719.773516][T14756] loop4: detected capacity change from 0 to 512 [ 719.827029][T14756] EXT4-fs (loop4): Test dummy encryption mode enabled [ 719.828861][T14756] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 719.847648][T14756] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #17: comm syz.4.2886: iget: bogus i_mode (0) [ 719.851136][T14756] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.2886: couldn't read orphan inode 17 (err -117) [ 719.857445][T14756] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none. [ 719.986914][T14763] binder: 14762:14763 ioctl 400c620e 200001c0 returned -22 [ 721.493494][T14790] __nla_validate_parse: 4 callbacks suppressed [ 721.493508][T14790] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2893'. [ 721.515384][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2893'. [ 721.699378][T14797] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2896'. [ 721.709241][T14797] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2896'. [ 721.836254][T14801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2897'. [ 721.881480][T14801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2897'. [ 721.903930][T14800] loop1: detected capacity change from 0 to 1764 [ 722.973490][T14814] loop2: detected capacity change from 0 to 8192 [ 723.025125][ T4102] loop2: p1 p3 < > p4 [ 723.026272][ T4102] loop2: partition table partially beyond EOD, truncated [ 723.032466][ T4102] loop2: p3 start 3238002693 is beyond EOD, truncated [ 723.034358][ T4102] loop2: p4 start 131072 is beyond EOD, truncated [ 723.044065][T14814] loop2: p1 p3 < > p4 [ 723.045075][T14814] loop2: partition table partially beyond EOD, truncated [ 723.058017][T14814] loop2: p3 start 3238002693 is beyond EOD, truncated [ 723.067827][T14814] loop2: p4 start 131072 is beyond EOD, truncated [ 723.070554][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.080133][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.090353][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.106978][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.193266][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2908'. [ 723.217652][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2908'. [ 723.221076][T14840] loop1: detected capacity change from 0 to 4096 [ 723.287041][T14843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2909'. [ 723.300023][T14840] NILFS (loop1): invalid segment: Checksum error in segment payload [ 723.309250][T14840] NILFS (loop1): trying rollback from an earlier position [ 723.356012][T14844] loop2: detected capacity change from 0 to 1764 [ 723.369547][T14840] NILFS (loop1): recovery complete [ 723.382553][T14848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 723.435726][T14847] netlink: 'syz.0.2912': attribute type 1 has an invalid length. [ 723.437691][T14847] netlink: 'syz.0.2912': attribute type 2 has an invalid length. [ 723.452636][T14847] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2912'. [ 723.455645][T14847] tipc: Started in network mode [ 723.456900][T14847] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 723.458991][T14847] tipc: Enabled bearer , priority 16 [ 723.494301][ T3964] udevd[3964]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 723.573936][T14851] ODEBUG: Out of memory. ODEBUG disabled [ 723.692090][T14859] xt_TCPMSS: Only works on TCP SYN packets [ 723.986293][ T3964] udevd[3964]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 724.758276][ T4016] tipc: Node number set to 10922666 [ 724.907394][T14851] EXT4-fs: error -4 creating inode table initialization thread [ 724.909499][T14851] EXT4-fs (nvme0n1p2): re-mounted. Opts: (null). Quota mode: none. [ 725.438236][T14899] loop4: detected capacity change from 0 to 1764 [ 725.735848][T14909] xt_TCPMSS: Only works on TCP SYN packets [ 727.305456][T14936] __nla_validate_parse: 7 callbacks suppressed [ 727.305470][T14936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2936'. [ 727.317966][T14937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2937'. [ 727.324815][T14936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 727.630830][T14941] loop2: detected capacity change from 0 to 4096 [ 727.700358][T14941] ntfs: (device loop2): parse_options(): Unrecognized mount option 184467440737095516150x0000000000000000. [ 727.703442][T14941] ntfs: (device loop2): parse_options(): The gid option requires an argument. [ 727.977340][T14952] loop2: detected capacity change from 0 to 1764 [ 728.273523][T14961] xt_TCPMSS: Only works on TCP SYN packets [ 728.499088][T14963] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2944'. [ 728.538005][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2944'. [ 729.256693][T14981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 729.288458][T14981] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2948'. [ 729.296044][T14985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2949'. [ 729.302705][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2949'. [ 729.611056][T14992] xt_TCPMSS: Only works on TCP SYN packets [ 730.827096][T15004] loop1: detected capacity change from 0 to 1764 [ 731.255035][T15016] xt_TCPMSS: Only works on TCP SYN packets [ 731.887790][T15031] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2961'. [ 732.711693][T15032] __nla_validate_parse: 1 callbacks suppressed [ 732.711708][T15032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 732.759404][T15032] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2963'. [ 732.984311][T15048] loop1: detected capacity change from 0 to 256 [ 733.089288][T15048] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 733.134745][T15054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2968'. [ 733.138459][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 733.142156][T15053] loop3: detected capacity change from 0 to 1764 [ 733.551833][T15063] xt_TCPMSS: Only works on TCP SYN packets [ 734.152493][T15071] xt_TCPMSS: Only works on TCP SYN packets [ 734.381161][T15076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2975'. [ 734.603674][T15076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2975'. [ 735.699517][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2979'. [ 735.704486][T15089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2979'. [ 735.734284][T15095] loop0: detected capacity change from 0 to 1764 [ 735.831828][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2982'. [ 735.836309][T15103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2982'. [ 737.311526][T15120] xt_TCPMSS: Only works on TCP SYN packets [ 737.781272][T15123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2990'. [ 737.785069][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2990'. [ 738.246923][T15131] xt_TCPMSS: Only works on TCP SYN packets [ 738.462675][T15134] loop4: detected capacity change from 0 to 256 [ 740.508205][T15154] loop0: detected capacity change from 0 to 2048 [ 740.510963][T15152] loop1: detected capacity change from 0 to 1764 [ 740.559796][T15154] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 740.592194][T15156] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2998'. [ 740.596334][T15156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2998'. [ 740.736371][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3000'. [ 740.747156][T15162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3000'. [ 741.053454][T15173] xt_TCPMSS: Only works on TCP SYN packets [ 741.670898][T15175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3004'. [ 741.685327][T15175] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3004'. [ 742.872137][T15190] loop4: detected capacity change from 0 to 128 [ 742.996449][T15190] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 743.086502][T15200] loop1: detected capacity change from 0 to 512 [ 743.113388][T15199] loop3: detected capacity change from 0 to 1764 [ 743.196804][T15200] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 743.312319][T15193] loop0: detected capacity change from 0 to 32768 [ 743.392673][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3014'. [ 743.403281][T15221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3015'. [ 743.407654][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3014'. [ 743.411924][T15221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3015'. [ 743.445330][T15193] XFS (loop0): Mounting V5 Filesystem [ 743.530175][T15227] xt_TCPMSS: Only works on TCP SYN packets [ 743.782358][T15193] XFS (loop0): Ending clean mount [ 744.097781][ T8778] XFS (loop0): Unmounting Filesystem [ 745.592667][ T2047] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.594344][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 745.868211][T15253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3017'. [ 745.872422][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3017'. [ 746.077722][T15261] loop2: detected capacity change from 0 to 1764 [ 746.234842][T15265] loop0: detected capacity change from 0 to 512 [ 746.330023][T15271] xt_TCPMSS: Only works on TCP SYN packets [ 746.454775][T15267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3029'. [ 746.513956][T15267] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3029'. [ 746.808307][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3030'. [ 746.812167][T15279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3030'. [ 748.488742][T15310] loop3: detected capacity change from 0 to 1764 [ 748.503941][T15313] loop4: detected capacity change from 0 to 8 [ 748.619116][T15317] __nla_validate_parse: 2 callbacks suppressed [ 748.619198][T15317] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3042'. [ 748.669594][T15317] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 748.782882][T15322] xt_TCPMSS: Only works on TCP SYN packets [ 749.764855][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3049'. [ 749.791846][T15340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3049'. [ 750.578535][T15347] netlink: 'syz.2.3052': attribute type 29 has an invalid length. [ 750.600180][T15347] netlink: 'syz.2.3052': attribute type 29 has an invalid length. [ 750.611399][T15347] netlink: 'syz.2.3052': attribute type 29 has an invalid length. [ 750.913689][T15352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3053'. [ 750.918598][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3053'. [ 751.008341][T15362] loop1: detected capacity change from 0 to 1764 [ 751.207171][T15366] xt_TCPMSS: Only works on TCP SYN packets [ 751.800937][T15370] loop0: detected capacity change from 0 to 2048 [ 751.894381][T15370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 751.980854][T15379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3061'. [ 752.017542][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3061'. [ 752.462029][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3065'. [ 752.476482][T15388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3065'. [ 754.340626][T15401] loop2: detected capacity change from 0 to 64 [ 754.429050][T15401] hfs: request for non-existent node 293 in B*Tree [ 754.434459][ T8778] [ 754.435011][ T8778] ====================================================== [ 754.435891][T15401] hfs: request for non-existent node 293 in B*Tree [ 754.436685][ T8778] WARNING: possible circular locking dependency detected [ 754.436692][ T8778] 5.15.161-syzkaller #0 Not tainted [ 754.436699][ T8778] ------------------------------------------------------ [ 754.436703][ T8778] syz-executor/8778 is trying to acquire lock: [ 754.436710][ T8778] ffff0000d3ca63f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3} [ 754.441138][T15401] hfs: get root inode failed [ 754.441447][ T8778] , at: __jbd2_log_wait_for_space+0x1a4/0x5cc [ 754.441469][ T8778] [ 754.441469][ T8778] but task is already holding lock: [ 754.441472][ T8778] ffff0000e307abd0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 754.454031][ T8778] [ 754.454031][ T8778] which lock already depends on the new lock. [ 754.454031][ T8778] [ 754.456704][ T8778] [ 754.456704][ T8778] the existing dependency chain (in reverse order) is: [ 754.459217][ T8778] [ 754.459217][ T8778] -> #1 (&sb->s_type->i_mutex_key#9){++++}-{3:3}: [ 754.461402][ T8778] down_read+0xc0/0x398 [ 754.462595][ T8778] ext4_bmap+0x58/0x36c [ 754.463798][ T8778] bmap+0xa8/0xe8 [ 754.464871][ T8778] jbd2_journal_flush+0x63c/0xaa0 [ 754.466372][ T8778] ext4_ioctl+0x3454/0x61bc [ 754.467689][ T8778] __arm64_sys_ioctl+0x14c/0x1c8 [ 754.469108][ T8778] invoke_syscall+0x98/0x2b8 [ 754.470426][ T8778] el0_svc_common+0x138/0x258 [ 754.471773][ T8778] do_el0_svc+0x58/0x14c [ 754.473021][ T8778] el0_svc+0x7c/0x1f0 [ 754.474244][ T8778] el0t_64_sync_handler+0x84/0xe4 [ 754.475666][ T8778] el0t_64_sync+0x1a0/0x1a4 [ 754.476952][ T8778] [ 754.476952][ T8778] -> #0 (&journal->j_checkpoint_mutex){+.+.}-{3:3}: [ 754.479241][ T8778] __lock_acquire+0x32d4/0x7638 [ 754.480732][ T8778] lock_acquire+0x240/0x77c [ 754.482126][ T8778] __mutex_lock_common+0x194/0x2154 [ 754.483615][ T8778] mutex_lock_io_nested+0xcc/0x12c [ 754.485100][ T8778] __jbd2_log_wait_for_space+0x1a4/0x5cc [ 754.486665][ T8778] add_transaction_credits+0x814/0xb90 [ 754.488162][ T8778] start_this_handle+0x578/0x12a4 [ 754.489565][ T8778] jbd2__journal_start+0x29c/0x7b4 [ 754.491077][ T8778] __ext4_journal_start_sb+0x358/0x70c [ 754.492669][ T8778] __ext4_unlink+0x2e4/0x90c [ 754.494009][ T8778] ext4_unlink+0x1b4/0x6a0 [ 754.495245][ T8778] vfs_unlink+0x2f0/0x508 [ 754.496539][ T8778] do_unlinkat+0x4cc/0x830 [ 754.497865][ T8778] __arm64_sys_unlinkat+0xcc/0xfc [ 754.499320][ T8778] invoke_syscall+0x98/0x2b8 [ 754.500683][ T8778] el0_svc_common+0x138/0x258 [ 754.502074][ T8778] do_el0_svc+0x58/0x14c [ 754.503339][ T8778] el0_svc+0x7c/0x1f0 [ 754.504520][ T8778] el0t_64_sync_handler+0x84/0xe4 [ 754.505988][ T8778] el0t_64_sync+0x1a0/0x1a4 [ 754.507429][ T8778] [ 754.507429][ T8778] other info that might help us debug this: [ 754.507429][ T8778] [ 754.510152][ T8778] Possible unsafe locking scenario: [ 754.510152][ T8778] [ 754.512150][ T8778] CPU0 CPU1 [ 754.513548][ T8778] ---- ---- [ 754.514943][ T8778] lock(&sb->s_type->i_mutex_key#9); [ 754.516302][ T8778] lock(&journal->j_checkpoint_mutex); [ 754.518452][ T8778] lock(&sb->s_type->i_mutex_key#9); [ 754.520484][ T8778] lock(&journal->j_checkpoint_mutex); [ 754.521934][ T8778] [ 754.521934][ T8778] *** DEADLOCK *** [ 754.521934][ T8778] [ 754.524050][ T8778] 3 locks held by syz-executor/8778: [ 754.525423][ T8778] #0: ffff0000d3ca0460 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x44/0x9c [ 754.527772][ T8778] #1: ffff0000f63849b8 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: do_unlinkat+0x2d0/0x830 [ 754.530477][ T8778] #2: ffff0000e307abd0 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: vfs_unlink+0xd8/0x508 [ 754.533082][ T8778] [ 754.533082][ T8778] stack backtrace: [ 754.534638][ T8778] CPU: 0 PID: 8778 Comm: syz-executor Not tainted 5.15.161-syzkaller #0 [ 754.536753][ T8778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 754.539491][ T8778] Call trace: [ 754.540310][ T8778] dump_backtrace+0x0/0x530 [ 754.541498][ T8778] show_stack+0x2c/0x3c [ 754.542622][ T8778] dump_stack_lvl+0x108/0x170 [ 754.543905][ T8778] dump_stack+0x1c/0x58 [ 754.545060][ T8778] print_circular_bug+0x150/0x1b8 [ 754.546577][ T8778] check_noncircular+0x2cc/0x378 [ 754.547975][ T8778] __lock_acquire+0x32d4/0x7638 [ 754.549296][ T8778] lock_acquire+0x240/0x77c [ 754.550525][ T8778] __mutex_lock_common+0x194/0x2154 [ 754.551990][ T8778] mutex_lock_io_nested+0xcc/0x12c [ 754.553382][ T8778] __jbd2_log_wait_for_space+0x1a4/0x5cc [ 754.554911][ T8778] add_transaction_credits+0x814/0xb90 [ 754.556311][ T8778] start_this_handle+0x578/0x12a4 [ 754.557649][ T8778] jbd2__journal_start+0x29c/0x7b4 [ 754.559237][ T8778] __ext4_journal_start_sb+0x358/0x70c [ 754.560730][ T8778] __ext4_unlink+0x2e4/0x90c [ 754.561958][ T8778] ext4_unlink+0x1b4/0x6a0 [ 754.563275][ T8778] vfs_unlink+0x2f0/0x508 [ 754.564483][ T8778] do_unlinkat+0x4cc/0x830 [ 754.565764][ T8778] __arm64_sys_unlinkat+0xcc/0xfc [ 754.567061][ T8778] invoke_syscall+0x98/0x2b8 [ 754.568339][ T8778] el0_svc_common+0x138/0x258 [ 754.569632][ T8778] do_el0_svc+0x58/0x14c [ 754.570871][ T8778] el0_svc+0x7c/0x1f0 [ 754.571923][ T8778] el0t_64_sync_handler+0x84/0xe4 [ 754.573257][ T8778] el0t_64_sync+0x1a0/0x1a4 [ 754.596986][T15407] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3069'. [ 754.602930][T15407] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 754.730872][T15409] loop2: detected capacity change from 0 to 2048 [ 754.911141][T15401] loop2: detected capacity change from 0 to 64