last executing test programs: 6.989202265s ago: executing program 0 (id=94): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) 6.98908962s ago: executing program 1 (id=95): getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, &(0x7f0000000100)=0x20) 6.822332897s ago: executing program 2 (id=96): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nfsfs\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) fchdir(r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) 6.37027906s ago: executing program 3 (id=97): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000600)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_DCCP_CLOSING={0x8, 0x6, 0x1, 0x0, 0x7ff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4050080) 6.01733912s ago: executing program 1 (id=98): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) 6.010616031s ago: executing program 0 (id=99): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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") chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000040)={0x0, 0xb, @value}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x20041a, &(0x7f00000001c0)={[{@grpjquota}, {@errors_continue}, {@abort}, {@bh}]}, 0x12, 0x51a, &(0x7f0000001200)="$eJzs3U9sI1cZAPBvJsnam6ZNCj0AKnQphQWt1k68bVT1QjlVCFVC9MhhGxInimLHUeyUJuwhe+SORCVOcOLMAYkDUk/ckTjAjUs5IBVYgRokJFx5bGedP06sbGJv499PGvnNvLG/93Y071mfN/MCGFu3ImI/Im5ExLsRMds5nnS2eLO9tc775NGD5YNHD5aTaDbf+WeS1beORc97Wp7pfGY+In7wVsSPkmNB/xRR393bWKpUytudQ8VGdatY3927u15dWiuvlTdLpcWFxfnX771WurS+vlT9zcc3I+L3v/vyR3/c/9ZPWs2a6dT19uMytbs+dRinZTIivncVwUZgotOfGxd584XexGVKI+JzEfFydv/PxkR2NY86epm+PcTWAQBXodmcjeZs7z4AcN2lWQ4sSQudXMBMpGmh0M7hvRDTaaVWb9xZre1srrRzZXMxla6uV8rznVzhXEwlq+uT5YWs3N2vlEvH9u9FxPMR8bPczWy/sFyrrIzyiw8AjLFnjs3//8m1538A4JrLPy7mRtkOAGB48qNuAAAwdOZ/ABg/5n8AGD/mfwAYP+Z/ABg/5n8AGCvff/vt1tY86Dz/euW93Z2N2nt3V8r1jUJ1Z7mwXNveKqzVamvZM3uq531epVbbWng1dt4vNsr1RrG+u3e/WtvZbNzPnut9vzw1lF4BAGd5/qUP/5JExP4bN7Mtep73f+5c/eJVtw64SumoGwCMzMSoGwCMzMnVvoBxIR8P4+v/zWYzetbujYiHh6Weh4H2/S9CHwwUJrVuKDx9bn/xCfL/wGea/D+Mr4vl/32Xh+tA/h/GV7OZWPMfAMaMHD+QnFPf+/v/fLNnZ7Df/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBamsm2JC101gKfiTQtFCKejYi5mEpW1yvl+Yh4LiL+nJvKtfYXIsK6QQDwWZb+Pems/3V79pWZ47U3cv/NZa8R8eNfvPPz95caje2FiBvJvw6PNz7oHC+Nov0AwHm683R3Hu/65NGD5e42zPZ8/J324qKtuAedrV0zGZPZaz7LNUz/O+nst7W+r0xcQvz9hxHxhdP6n2S5kbnOyqfH47diPzvU+OmR+GlW135t/Vt8/hLaAuPmw9b48+Zp918at7LX0+//fDZCPbnu+HdwYvxLD8e/iT7j361BY7z6h++eONicbdc9jPjSZMRB98N7xp9u/KRP/FcGjP/XF7/ycr+65i8jbsdp/U+OxCo2qlvF+u7e3fXq0lp5rbxZKi0uLM6/fu+1UjHLURe7meqT/vHGnef6xW/1f7pP/Pw5/f/6gP3/1f/e/eFXz4j/za+dfv1fOCN+a078xoDxl6Z/m+9X14q/0qf/513/OwPG/+hveysDngoADEF9d29jqVIpbz95IX/mOellhBigkETsX3GIx4Xcr3/61vkn54bWngsWol/VxNPSwmtTyD0dzRigMOqRCbhqj2/6UbcEAAAAAAAAAAAAAADoZxh/TjTqPgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB9fRoAAP//j4/W2A==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x64, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000140)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) bind$inet6(r1, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x44}}, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r4, 0x0, 0x0) listen(r0, 0x2) 5.667370722s ago: executing program 3 (id=100): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) inotify_init() 4.847486064s ago: executing program 1 (id=102): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323", 0xad) sendto$inet(r1, 0x0, 0x0, 0x200240d5, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6871139d7521a64a00000000ff00000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x29, "8fcd52568a39a94724527dfcd07dfffeca1df5a22e8281f2ced3d3a76d9ab9b392f3a6a366a1132970"}, &(0x7f0000000200)=0x31) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000480)=r8, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x4000884) syz_emit_ethernet(0xc6, 0x0, 0x0) 4.701219946s ago: executing program 4 (id=103): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, 0x0, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 4.525677096s ago: executing program 3 (id=104): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x1f6, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.385292268s ago: executing program 0 (id=105): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit, @alu={0x5, 0x1, 0xa, 0xa, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket(0x2b, 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x20000001, 0x20000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000005c0)='kfree\x00', r2}, 0x18) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, 0x0, 0x8) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00(', @ANYRES16=r4, @ANYBLOB="00032dbd7000fddbdf250100000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB='\b\x00', @ANYRES32=r7, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x10000080}, 0x40) r8 = creat(&(0x7f0000000200)='./file0\x00', 0x20) close(r8) openat$rtc(0xffffffffffffff9c, 0x0, 0x600402, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) timer_create(0x2, 0x0, &(0x7f0000000800)=0x0) timer_settime(r9, 0x0, &(0x7f0000000880)={{}, {0x0, 0x989680}}, 0x0) clock_gettime(0x2, &(0x7f0000000b40)) 3.982919192s ago: executing program 2 (id=106): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) 3.699964833s ago: executing program 4 (id=107): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) 2.9716226s ago: executing program 0 (id=108): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x82, 0x2800) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0xfffffffc, 0x9b, 0x3004, 0x1, 0x6, 0xa, 0x2, 0x700}}) 2.580626088s ago: executing program 4 (id=109): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 2.465323181s ago: executing program 3 (id=110): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.389286699s ago: executing program 2 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) 2.092320317s ago: executing program 0 (id=112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0xffffffffffff8d7a}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) 2.081475143s ago: executing program 1 (id=113): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x9) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64], 0x20) 1.566951397s ago: executing program 4 (id=114): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty=0xfffffdfd}}) 1.543045509s ago: executing program 2 (id=124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.461739212s ago: executing program 3 (id=115): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}}}) 1.041432367s ago: executing program 0 (id=116): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x480, &(0x7f0000000000), 0x1, 0x786, &(0x7f0000000f80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRES8=r2], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7a680000) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x10001, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$vbi(&(0x7f0000000200), 0x3, 0x2) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/nfsfs\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd0}}, 0x0) fchdir(r5) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x40) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r7, 0x40085112, &(0x7f0000000100)=@e={0xff, 0x9, 0x0, 0x0, @generic}) 890.236307ms ago: executing program 1 (id=117): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r0, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) 820.36372ms ago: executing program 2 (id=118): write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB='target '], 0x17) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04de220c"], 0x7) 652.840502ms ago: executing program 4 (id=119): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0x80) 457.582341ms ago: executing program 3 (id=120): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x11, 0x1000, 0xa30, 0x80, 0x0, 0x5, 0xa, 0x40, 0x3000000}}) 85.014594ms ago: executing program 1 (id=121): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 56.315867ms ago: executing program 4 (id=122): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xbc}}, 0x0) 0s ago: executing program 2 (id=123): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee17688a2003c000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323", 0xad) sendto$inet(r1, 0x0, 0x0, 0x200240d5, &(0x7f0000000040)={0x2, 0x1, @local}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6871139d7521a64a00000000ff00000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(r3, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x15, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) recvmsg(r3, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f00000036c0)={&(0x7f00000004c0)={0x50, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'syzkaller\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}]}, 0x50}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000400)={0x0, 0x29, "8fcd52568a39a94724527dfcd07dfffeca1df5a22e8281f2ced3d3a76d9ab9b392f3a6a366a1132970"}, &(0x7f0000000200)=0x31) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000480)=r8, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r9, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000020000f0000f901000000000002"], 0x1c}}, 0x4000884) syz_emit_ethernet(0xc6, 0x0, 0x0) kernel console output (not intermixed with test programs): DUID 00:04:3a:94:3d:08:32:ab:1b:84:d2:06:3b:ca:d8:e3:7c:b6 forked to background, child pid 5432 [ 154.912879][ T5433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.962707][ T5433] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.7' (ED25519) to the list of known hosts. syzkaller login: [ 208.721436][ T5761] cgroup: Unknown subsys name 'net' [ 208.899161][ T5761] cgroup: Unknown subsys name 'cpuset' [ 208.922676][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 229.495574][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.502317][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.080178][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 269.478446][ T5779] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.488415][ T5779] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.493499][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 269.498844][ T5779] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.506589][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 269.522856][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 269.527730][ T5779] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.541751][ T5779] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 269.551485][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.553449][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 269.570571][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 269.581456][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 269.689458][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 269.698011][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.700239][ T5783] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 269.715848][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.725534][ T5790] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 269.735288][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.752745][ T5790] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 269.762747][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.776481][ T5790] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 269.787404][ T5790] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 269.852934][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.886693][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 269.921997][ T5783] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.949423][ T5790] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.972990][ T5790] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 270.155679][ T5790] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 270.179880][ T5790] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 270.199417][ T5790] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.119391][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 271.638129][ T5790] Bluetooth: hci0: command tx timeout [ 271.646748][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 271.710599][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 271.735258][ T5790] Bluetooth: hci1: command tx timeout [ 271.950252][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 271.957536][ T5790] Bluetooth: hci2: command tx timeout [ 271.964465][ T5790] Bluetooth: hci3: command tx timeout [ 272.275912][ T5790] Bluetooth: hci4: command tx timeout [ 272.753130][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.761338][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.769415][ T5777] bridge_slave_0: entered allmulticast mode [ 272.779261][ T5777] bridge_slave_0: entered promiscuous mode [ 272.847900][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 272.870928][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.881067][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.889012][ T5777] bridge_slave_1: entered allmulticast mode [ 272.898605][ T5777] bridge_slave_1: entered promiscuous mode [ 272.909654][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.917990][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.925939][ T5785] bridge_slave_0: entered allmulticast mode [ 272.935574][ T5785] bridge_slave_0: entered promiscuous mode [ 273.122652][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.131441][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.139445][ T5778] bridge_slave_0: entered allmulticast mode [ 273.148994][ T5778] bridge_slave_0: entered promiscuous mode [ 273.164731][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.172514][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.180413][ T5785] bridge_slave_1: entered allmulticast mode [ 273.190197][ T5785] bridge_slave_1: entered promiscuous mode [ 273.357426][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.365511][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.373341][ T5778] bridge_slave_1: entered allmulticast mode [ 273.383042][ T5778] bridge_slave_1: entered promiscuous mode [ 273.576990][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.600942][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.609738][ T5786] bridge_slave_0: entered allmulticast mode [ 273.625993][ T5786] bridge_slave_0: entered promiscuous mode [ 273.643693][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.651688][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.659841][ T5786] bridge_slave_1: entered allmulticast mode [ 273.669438][ T5786] bridge_slave_1: entered promiscuous mode [ 273.691204][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.741749][ T5790] Bluetooth: hci0: command tx timeout [ 273.816501][ T5790] Bluetooth: hci1: command tx timeout [ 273.843778][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.914769][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.942995][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.978669][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.997991][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.035049][ T5790] Bluetooth: hci3: command tx timeout [ 274.040747][ T5790] Bluetooth: hci2: command tx timeout [ 274.081550][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.156184][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.332655][ T5785] team0: Port device team_slave_0 added [ 274.348930][ T5777] team0: Port device team_slave_0 added [ 274.370374][ T5790] Bluetooth: hci4: command tx timeout [ 274.451630][ T5785] team0: Port device team_slave_1 added [ 274.501359][ T5777] team0: Port device team_slave_1 added [ 274.551769][ T5786] team0: Port device team_slave_0 added [ 274.560089][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.568399][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.576339][ T5787] bridge_slave_0: entered allmulticast mode [ 274.586054][ T5787] bridge_slave_0: entered promiscuous mode [ 274.646244][ T5778] team0: Port device team_slave_0 added [ 274.744785][ T5786] team0: Port device team_slave_1 added [ 274.752782][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.761627][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.771620][ T5787] bridge_slave_1: entered allmulticast mode [ 274.780147][ T5787] bridge_slave_1: entered promiscuous mode [ 274.798427][ T5778] team0: Port device team_slave_1 added [ 274.847485][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.854835][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.881362][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.044536][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.051711][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.078197][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.101039][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.115911][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.123117][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.149510][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.271467][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.325552][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.332736][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.359225][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.373545][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.382375][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.410022][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.428291][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.435752][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.462360][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.480548][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.487930][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.514611][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.530288][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.537748][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.564599][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.719678][ T5787] team0: Port device team_slave_0 added [ 275.787696][ T5785] hsr_slave_0: entered promiscuous mode [ 275.798298][ T5785] hsr_slave_1: entered promiscuous mode [ 275.811166][ T5790] Bluetooth: hci0: command tx timeout [ 275.833235][ T5787] team0: Port device team_slave_1 added [ 275.874372][ T5790] Bluetooth: hci1: command tx timeout [ 276.093474][ T5778] hsr_slave_0: entered promiscuous mode [ 276.103173][ T5778] hsr_slave_1: entered promiscuous mode [ 276.112004][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.120190][ T5778] Cannot create hsr debugfs directory [ 276.121328][ T5790] Bluetooth: hci2: command tx timeout [ 276.127540][ T5078] Bluetooth: hci3: command tx timeout [ 276.216007][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.223214][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.250815][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.322029][ T5777] hsr_slave_0: entered promiscuous mode [ 276.331729][ T5777] hsr_slave_1: entered promiscuous mode [ 276.340686][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.348672][ T5777] Cannot create hsr debugfs directory [ 276.378491][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.386155][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.412574][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.443784][ T5078] Bluetooth: hci4: command tx timeout [ 276.458760][ T5786] hsr_slave_0: entered promiscuous mode [ 276.469153][ T5786] hsr_slave_1: entered promiscuous mode [ 276.478099][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.486117][ T5786] Cannot create hsr debugfs directory [ 276.604065][ T5787] hsr_slave_0: entered promiscuous mode [ 276.615077][ T5787] hsr_slave_1: entered promiscuous mode [ 276.624071][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.631994][ T5787] Cannot create hsr debugfs directory [ 277.874670][ T5078] Bluetooth: hci0: command tx timeout [ 277.954409][ T5078] Bluetooth: hci1: command tx timeout [ 278.204364][ T5078] Bluetooth: hci2: command tx timeout [ 278.210069][ T5078] Bluetooth: hci3: command tx timeout [ 278.232655][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.268134][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.316421][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.379885][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.522936][ T5078] Bluetooth: hci4: command tx timeout [ 278.543731][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 278.669936][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 278.720548][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 278.769493][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 278.793775][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 278.816869][ T5786] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 278.842017][ T5786] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 278.866346][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 278.888329][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.043797][ T5786] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.071796][ T5786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.113143][ T5787] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 279.141160][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.204741][ T5787] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 279.304981][ T5787] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 279.397305][ T5787] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 280.465659][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.535541][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.573867][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.750562][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.821208][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.859590][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.895631][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.930584][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.938440][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.001735][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.009606][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.098140][ T4121] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.106042][ T4121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.122635][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.130508][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.147267][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.155274][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.315528][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.332436][ T4121] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.340361][ T4121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.373879][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.528984][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.537217][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.595125][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.716904][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.724910][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.871974][ T3567] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.879855][ T3567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.999959][ T3567] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.007836][ T3567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.231266][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.366967][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.646969][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.739203][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.790072][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.084958][ T5786] veth0_vlan: entered promiscuous mode [ 285.266125][ T5786] veth1_vlan: entered promiscuous mode [ 285.280769][ T5777] veth0_vlan: entered promiscuous mode [ 285.406303][ T5777] veth1_vlan: entered promiscuous mode [ 285.463128][ T5785] veth0_vlan: entered promiscuous mode [ 285.594698][ T5778] veth0_vlan: entered promiscuous mode [ 285.647234][ T5785] veth1_vlan: entered promiscuous mode [ 285.712812][ T5786] veth0_macvtap: entered promiscuous mode [ 285.812185][ T5786] veth1_macvtap: entered promiscuous mode [ 285.845366][ T5778] veth1_vlan: entered promiscuous mode [ 285.972995][ T5777] veth0_macvtap: entered promiscuous mode [ 286.080024][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.120682][ T5777] veth1_macvtap: entered promiscuous mode [ 286.231210][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.266654][ T5785] veth0_macvtap: entered promiscuous mode [ 286.373195][ T5785] veth1_macvtap: entered promiscuous mode [ 286.401299][ T5786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.410919][ T5786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.420230][ T5786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.429618][ T5786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.462887][ T5778] veth0_macvtap: entered promiscuous mode [ 286.497372][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.508268][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.524871][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.562125][ T5778] veth1_macvtap: entered promiscuous mode [ 286.616787][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.627846][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.643497][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.676040][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.687147][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.700013][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.712597][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.730935][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.784807][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.793983][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.804063][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.813405][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.881074][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.895791][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.907694][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 286.918514][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.934506][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.982208][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.992282][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.003001][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.012285][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.121013][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.133757][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.145555][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.158319][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.168468][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.179320][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.200871][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.352176][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.364882][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.376827][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.389553][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.403278][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.415995][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.431845][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.649469][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.660022][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.669457][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.682507][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.501421][ T5787] veth0_vlan: entered promiscuous mode [ 288.616881][ T5787] veth1_vlan: entered promiscuous mode [ 289.070385][ T5787] veth0_macvtap: entered promiscuous mode [ 289.161048][ T5787] veth1_macvtap: entered promiscuous mode [ 289.339911][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.353933][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.364480][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.375424][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.385639][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.396627][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.406822][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.417797][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.433743][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.622185][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.634387][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.646229][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.658173][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.668358][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.679334][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.689510][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.700351][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.716175][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.055420][ T5787] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.064662][ T5787] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.073713][ T5787] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.082991][ T5787] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.949147][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 290.956146][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 294.419113][ T4189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.428132][ T4189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.711721][ T4073] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.720275][ T4073] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.080091][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.088480][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.123931][ T4121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.132252][ T4121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.246583][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.255003][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.286612][ T5786] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 295.340305][ T2877] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.350265][ T2877] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.007684][ T4738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.016059][ T4738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.176014][ T4738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.184454][ T4738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.225428][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 297.572476][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 297.586653][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 130, setting to 64 [ 297.811173][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.4b [ 297.821900][ T10] usb 2-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 297.830529][ T10] usb 2-1: Product: syz [ 298.527366][ T10] usb 2-1: config 0 descriptor?? [ 299.053796][ T5964] overlayfs: failed to resolve './file0': -2 [ 299.211034][ T10] ath6kl: Failed to submit usb control message: -71 [ 299.221189][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 299.229412][ T10] ath6kl: Unable to send get target info: -71 [ 299.292372][ T10] ath6kl: Failed to init ath6kl core: -71 [ 299.308799][ T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 299.483498][ T10] usb 2-1: USB disconnect, device number 2 [ 299.775941][ T2877] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.784036][ T2877] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.886920][ T4121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.896211][ T4121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.960255][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 300.969524][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 301.241099][ T5975] loop2: detected capacity change from 0 to 4096 [ 301.415785][ T5989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10'. [ 301.526840][ T5975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.976322][ T5975] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 302.375255][ T6000] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 302.946850][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.204261][ T3639] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.240571][ T6013] loop3: detected capacity change from 0 to 512 [ 304.392697][ T6013] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.16: bg 0: block 16: invalid block bitmap [ 304.495559][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 304.513049][ T6013] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 304.554837][ T6013] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.16: attempt to clear invalid blocks 1669132790 len 1 [ 304.579866][ T6013] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.16: invalid indirect mapped block 4294967295 (level 1) [ 304.597927][ T6013] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.16: invalid indirect mapped block 4294967295 (level 2) [ 304.634694][ T6013] EXT4-fs (loop3): 1 truncate cleaned up [ 304.648381][ T6013] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.704796][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 304.738349][ T10] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 304.750571][ T10] usb 2-1: config 0 has no interface number 0 [ 304.759003][ T10] usb 2-1: config 0 interface 2 has no altsetting 0 [ 304.844338][ T10] usb 2-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=a5.66 [ 304.857378][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.867111][ T10] usb 2-1: Product: syz [ 304.871616][ T10] usb 2-1: Manufacturer: syz [ 304.876592][ T10] usb 2-1: SerialNumber: syz [ 305.027447][ T10] usb 2-1: config 0 descriptor?? [ 305.160313][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.395337][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 305.447148][ T10] usb 2-1: invalid MIDI in EP 0 [ 305.862988][ T10] snd-usb-audio 2-1:0.2: probe with driver snd-usb-audio failed with error -22 [ 305.992623][ T10] usb 2-1: USB disconnect, device number 3 [ 306.682249][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.038966][ T6039] loop1: detected capacity change from 0 to 1024 [ 307.095829][ T6039] ======================================================= [ 307.095829][ T6039] WARNING: The mand mount option has been deprecated and [ 307.095829][ T6039] and is ignored by this kernel. Remove the mand [ 307.095829][ T6039] option from the mount to silence this warning. [ 307.095829][ T6039] ======================================================= [ 307.229912][ T5078] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 307.398726][ T6039] hfsplus: failed to load root directory [ 307.639700][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 307.954450][ T5078] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 307.963304][ T5078] Bluetooth: hci3: Injecting HCI hardware error event [ 307.973714][ T6050] loop4: detected capacity change from 0 to 512 [ 307.974000][ T5078] Bluetooth: hci3: hardware error 0x00 [ 308.192327][ T6050] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.210427][ T6050] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 308.352325][ T6050] xt_socket: unknown flags 0x10 [ 308.666404][ T6056] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #12: comm syz.4.29: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 309.262564][ T6050] infiniband syz!: set active [ 309.267918][ T6050] infiniband syz!: added team_slave_0 [ 309.570996][ T6062] vivid-003: disconnect [ 309.589666][ T6062] vivid-003: reconnect [ 309.655593][ T6050] RDS/IB: syz!: added [ 309.667014][ T6050] smc: adding ib device syz! with port count 1 [ 309.673457][ T6050] smc: ib device syz! port 1 has pnetid [ 309.723702][ T6068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.33'. [ 309.733468][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.741487][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.350259][ T6068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.360966][ T6068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.422628][ T5078] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 310.902571][ T6076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 313.644579][ T29] audit: type=1326 audit(1737627907.755:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 313.670624][ T29] audit: type=1326 audit(1737627907.755:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 313.994257][ T29] audit: type=1326 audit(1737627907.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.016472][ T29] audit: type=1326 audit(1737627907.945:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.038687][ T29] audit: type=1326 audit(1737627907.945:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.061376][ T29] audit: type=1326 audit(1737627907.945:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.087013][ T29] audit: type=1326 audit(1737627907.945:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.110605][ T29] audit: type=1326 audit(1737627907.945:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.132818][ T29] audit: type=1326 audit(1737627907.955:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.155521][ T29] audit: type=1326 audit(1737627907.955:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6080 comm="syz.1.35" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa0579 code=0x7ffc0000 [ 314.254876][ T6075] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 314.262789][ T6075] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 314.278902][ T6075] veth0_virt_wifi: entered allmulticast mode [ 314.289671][ T6075] veth0_virt_wifi: entered promiscuous mode [ 314.298665][ T6075] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 314.306682][ T6075] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 315.277085][ T5787] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.463413][ T6089] loop3: detected capacity change from 0 to 128 [ 315.577556][ T6089] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 315.825488][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38'. [ 315.834889][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.0.38'. [ 315.843933][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38'. [ 315.853227][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.38'. [ 316.030021][ T6095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.40'. [ 316.175212][ T6097] mmap: syz.4.39 (6097) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 316.369980][ T6099] loop2: detected capacity change from 0 to 512 [ 316.414923][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 316.461829][ T6099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 316.470355][ T6099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 316.495268][ T6099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 316.578301][ T6099] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 316.589041][ T6099] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 316.629692][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 316.653024][ T6099] EXT4-fs (loop2): 1 truncate cleaned up [ 316.661375][ T6099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 316.698603][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.743676][ T10] usb 2-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 316.753432][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.762394][ T10] usb 2-1: Product: syz [ 316.766944][ T10] usb 2-1: Manufacturer: syz [ 316.771792][ T10] usb 2-1: SerialNumber: syz [ 316.897018][ T6099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 316.905895][ T6099] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 316.957621][ T10] usb 2-1: config 0 descriptor?? [ 317.017189][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 317.198858][ T10] gspca_sunplus: reg_r err -32 [ 317.249503][ T6106] loop0: detected capacity change from 0 to 256 [ 317.449537][ T5786] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.688106][ T6109] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 317.759375][ T6106] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 317.786885][ T6109] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 317.805976][ T6109] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 318.764812][ T6106] syz.0.43: attempt to access beyond end of device [ 318.764812][ T6106] loop0: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 318.909306][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 318.909383][ T29] audit: type=1800 audit(1737627913.035:35): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.43" name="file1" dev="loop0" ino=1048600 res=0 errno=0 [ 320.927629][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 321.003508][ T10] usb 2-1: USB disconnect, device number 4 [ 321.071036][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.1.47'. [ 321.080479][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.088512][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.284615][ T6123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.292458][ T6123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.392057][ T29] audit: type=1326 audit(1737627916.485:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 322.423685][ T6133] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 322.431844][ T6133] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 322.440705][ T6133] veth0_virt_wifi: entered allmulticast mode [ 322.494195][ T6133] veth0_virt_wifi: entered promiscuous mode [ 322.503630][ T6133] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 322.511671][ T6133] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 322.687889][ T6135] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 322.896064][ T29] audit: type=1326 audit(1737627916.795:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 322.919272][ T29] audit: type=1326 audit(1737627916.795:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 322.942117][ T29] audit: type=1326 audit(1737627916.805:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 323.617063][ T29] audit: type=1326 audit(1737627917.255:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 323.639564][ T29] audit: type=1326 audit(1737627917.295:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 323.661861][ T29] audit: type=1326 audit(1737627917.295:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 323.684292][ T29] audit: type=1326 audit(1737627917.325:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 323.710859][ T29] audit: type=1326 audit(1737627917.325:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 324.441733][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 324.441813][ T29] audit: type=1326 audit(1737627917.865:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 324.471034][ T29] audit: type=1326 audit(1737627917.865:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6126 comm="syz.4.50" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73dd579 code=0x7ffc0000 [ 324.666997][ T6144] xt_TCPMSS: Only works on TCP SYN packets [ 325.468754][ T6152] loop3: detected capacity change from 0 to 512 [ 325.550493][ T6152] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 325.559010][ T6152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 325.621191][ T6152] EXT4-fs (loop3): orphan cleanup on readonly fs [ 325.669140][ T6152] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949761 > max in inode 13 [ 325.680072][ T6152] EXT4-fs warning (device loop3): ext4_block_to_path:107: block 3279949762 > max in inode 13 [ 325.777408][ T6152] EXT4-fs (loop3): 1 truncate cleaned up [ 325.816215][ T6152] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 325.876232][ T6152] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 325.884721][ T6152] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002] [ 325.890475][ T6159] loop1: detected capacity change from 0 to 256 [ 326.077660][ T6159] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d) [ 326.187149][ T6161] netlink: 32 bytes leftover after parsing attributes in process `syz.4.57'. [ 326.228240][ T6159] syz.1.56: attempt to access beyond end of device [ 326.228240][ T6159] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256 [ 326.276222][ T5777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.433472][ T6159] syz.1.56: attempt to access beyond end of device [ 326.433472][ T6159] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256 [ 326.447918][ T6159] syz.1.56: attempt to access beyond end of device [ 326.447918][ T6159] loop1: rw=0, sector=280, nr_sectors = 8 limit=256 [ 326.478401][ T29] audit: type=1800 audit(1737627920.595:54): pid=6159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.56" name="file1" dev="loop1" ino=1048601 res=0 errno=0 [ 326.692892][ T6163] netlink: 32 bytes leftover after parsing attributes in process `syz.2.58'. [ 327.178435][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 327.404617][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 327.435122][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.545072][ T10] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 327.554851][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.563156][ T10] usb 3-1: Product: syz [ 327.567995][ T10] usb 3-1: Manufacturer: syz [ 327.572877][ T10] usb 3-1: SerialNumber: syz [ 327.759296][ T10] usb 3-1: config 0 descriptor?? [ 327.861535][ T10] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 327.996227][ T6172] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 328.007461][ T6172] netdevsim netdevsim0: Falling back to sysfs fallback for: ./file0 [ 328.769282][ T10] gspca_sunplus: reg_r err -32 [ 330.374597][ T29] audit: type=1326 audit(1737627924.415:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 330.398284][ T29] audit: type=1326 audit(1737627924.415:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 330.420618][ T29] audit: type=1326 audit(1737627924.465:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=236 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 330.442995][ T29] audit: type=1326 audit(1737627924.465:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.030064][ T29] audit: type=1326 audit(1737627924.595:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.052725][ T29] audit: type=1326 audit(1737627924.595:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.080234][ T29] audit: type=1326 audit(1737627924.595:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.104393][ T29] audit: type=1326 audit(1737627924.605:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.127380][ T29] audit: type=1326 audit(1737627924.605:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.149616][ T29] audit: type=1326 audit(1737627924.605:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6180 comm="syz.3.64" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 331.754845][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 331.824770][ T10] usb 3-1: USB disconnect, device number 2 [ 332.717224][ T5833] hid-generic 0005:07C0:0058.0001: item fetching failed at offset 0/1 [ 332.769594][ T5833] hid-generic 0005:07C0:0058.0001: probe with driver hid-generic failed with error -22 [ 334.664600][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 334.862580][ T5833] usb 4-1: Using ep0 maxpacket: 8 [ 334.908023][ T5833] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 334.917593][ T5833] usb 4-1: config 179 has no interface number 0 [ 334.924418][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 334.936254][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 334.948142][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 334.965160][ T5833] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 334.977665][ T5833] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 334.991543][ T5833] usb 4-1: config 179 interface 65 has no altsetting 0 [ 334.998945][ T5833] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 335.008801][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.187182][ T6224] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 335.286932][ T5833] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input7 [ 335.572985][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 335.582009][ T5833] usb 4-1: USB disconnect, device number 2 [ 335.590440][ T5833] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 336.548844][ T6240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.93'. [ 336.653863][ T6240] infiniband syz!: set active [ 336.845543][ T6245] team0: No ports can be present during mode change [ 336.975767][ T6240] vlan0: entered promiscuous mode [ 337.020833][ T6240] team0: Port device vlan0 added [ 337.112514][ T6245] tipc: Started in network mode [ 337.118757][ T6245] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 337.127420][ T6245] tipc: Enabled bearer , priority 0 [ 337.250890][ T6247] loop2: detected capacity change from 0 to 2048 [ 337.483341][ T6247] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 337.550063][ T6252] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 337.805700][ T6247] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 337.827614][ T6247] EXT4-fs (loop2): This should not happen!! Data will be lost [ 337.827614][ T6247] [ 337.840887][ T6247] EXT4-fs (loop2): Total free blocks count 0 [ 337.847428][ T6247] EXT4-fs (loop2): Free/Dirty block details [ 337.853721][ T6247] EXT4-fs (loop2): free_blocks=4096 [ 337.859746][ T6247] EXT4-fs (loop2): dirty_blocks=16 [ 337.865593][ T6247] EXT4-fs (loop2): Block reservation details [ 337.872200][ T6247] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 337.957621][ T6256] loop0: detected capacity change from 0 to 64 [ 337.973381][ T6257] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 338.125418][ T5833] tipc: Node number set to 11578026 [ 338.189191][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 338.189269][ T29] audit: type=1326 audit(1737627932.315:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 338.354591][ T29] audit: type=1326 audit(1737627932.355:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 338.377193][ T29] audit: type=1326 audit(1737627932.395:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=291 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 338.400341][ T29] audit: type=1326 audit(1737627932.395:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6258 comm="syz.3.100" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73bd579 code=0x7ffc0000 [ 338.686401][ T29] audit: type=1326 audit(1737627932.575:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6246 comm="syz.2.96" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf73cd579 code=0x0 [ 341.789951][ T6293] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 342.006834][ T6296] Zero length message leads to an empty skb [ 342.918954][ T6302] loop0: detected capacity change from 0 to 2048 [ 343.051717][ T6302] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 343.345966][ T6302] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 343.369322][ T6302] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 343.382853][ T6302] EXT4-fs (loop0): This should not happen!! Data will be lost [ 343.382853][ T6302] [ 343.393006][ T6302] EXT4-fs (loop0): Total free blocks count 0 [ 343.403166][ T6302] EXT4-fs (loop0): Free/Dirty block details [ 343.410352][ T6302] EXT4-fs (loop0): free_blocks=4096 [ 343.415933][ T6302] EXT4-fs (loop0): dirty_blocks=16 [ 343.421287][ T6302] EXT4-fs (loop0): Block reservation details [ 343.427734][ T6302] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 343.437982][ T6314] ===================================================== [ 343.439656][ T6315] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 343.445365][ T6314] BUG: KMSAN: uninit-value in nsim_get_ringparam+0xa8/0xe0 [ 343.445491][ T6314] nsim_get_ringparam+0xa8/0xe0 [ 343.476224][ T6314] ethtool_set_ringparam+0x268/0x570 [ 343.481874][ T6314] dev_ethtool+0x126d/0x2a40 [ 343.486919][ T6314] dev_ioctl+0xb0e/0x1280 [ 343.491600][ T6314] compat_sock_ioctl+0xeea/0x1360 [ 343.497632][ T6314] __se_compat_sys_ioctl+0x80f/0x1020 [ 343.503680][ T6314] __ia32_compat_sys_ioctl+0x93/0xe0 [ 343.509415][ T6314] ia32_sys_call+0x2226/0x4180 [ 343.514544][ T6314] __do_fast_syscall_32+0xb0/0x110 [ 343.519882][ T6314] do_fast_syscall_32+0x38/0x80 [ 343.525285][ T6314] do_SYSENTER_32+0x1f/0x30 [ 343.530020][ T6314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.536769][ T6314] [ 343.539224][ T6314] Local variable kernel_ringparam created at: [ 343.547313][ T6314] ethtool_set_ringparam+0x96/0x570 [ 343.552742][ T6314] dev_ethtool+0x126d/0x2a40 [ 343.562060][ T6314] [ 343.566045][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.3.120 Not tainted 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 343.576780][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.588638][ T6314] ===================================================== [ 343.595940][ T6314] Disabling lock debugging due to kernel taint [ 343.602258][ T6314] Kernel panic - not syncing: kmsan.panic set ... [ 343.608882][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.3.120 Tainted: G B 6.13.0-syzkaller-04788-g7004a2e46d16 #0 [ 343.620885][ T6314] Tainted: [B]=BAD_PAGE [ 343.625205][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.635461][ T6314] Call Trace: [ 343.638898][ T6314] [ 343.641979][ T6314] dump_stack_lvl+0x216/0x2d0 [ 343.646939][ T6314] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 343.653015][ T6314] dump_stack+0x1e/0x24 [ 343.657430][ T6314] panic+0x4e2/0xcf0 [ 343.661575][ T6314] ? kmsan_get_metadata+0xf1/0x1c0 [ 343.666942][ T6314] kmsan_report+0x2c7/0x2d0 [ 343.671707][ T6314] ? __msan_warning+0x95/0x120 [ 343.676684][ T6314] ? nsim_get_ringparam+0xa8/0xe0 [ 343.681937][ T6314] ? ethtool_set_ringparam+0x268/0x570 [ 343.687656][ T6314] ? dev_ethtool+0x126d/0x2a40 [ 343.692706][ T6314] ? dev_ioctl+0xb0e/0x1280 [ 343.697456][ T6314] ? compat_sock_ioctl+0xeea/0x1360 [ 343.702937][ T6314] ? __se_compat_sys_ioctl+0x80f/0x1020 [ 343.708828][ T6314] ? __ia32_compat_sys_ioctl+0x93/0xe0 [ 343.714579][ T6314] ? ia32_sys_call+0x2226/0x4180 [ 343.719762][ T6314] ? __do_fast_syscall_32+0xb0/0x110 [ 343.725289][ T6314] ? do_fast_syscall_32+0x38/0x80 [ 343.730549][ T6314] ? do_SYSENTER_32+0x1f/0x30 [ 343.735454][ T6314] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.742235][ T6314] ? __do_fast_syscall_32+0xb0/0x110 [ 343.747759][ T6314] ? do_fast_syscall_32+0x38/0x80 [ 343.753116][ T6314] ? do_SYSENTER_32+0x1f/0x30 [ 343.758024][ T6314] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.764802][ T6314] ? kmsan_get_metadata+0x13e/0x1c0 [ 343.770248][ T6314] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 343.776894][ T6314] ? kmsan_get_metadata+0x13e/0x1c0 [ 343.782382][ T6314] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 343.788452][ T6314] ? kmsan_get_metadata+0x13e/0x1c0 [ 343.793888][ T6314] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 343.800452][ T6314] ? kmsan_get_metadata+0x13e/0x1c0 [ 343.805898][ T6314] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 343.812065][ T6314] __msan_warning+0x95/0x120 [ 343.816889][ T6314] nsim_get_ringparam+0xa8/0xe0 [ 343.821971][ T6314] ? __pfx_nsim_set_ringparam+0x10/0x10 [ 343.827762][ T6314] ? __pfx_nsim_get_ringparam+0x10/0x10 [ 343.833548][ T6314] ethtool_set_ringparam+0x268/0x570 [ 343.839079][ T6314] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 343.845235][ T6314] dev_ethtool+0x126d/0x2a40 [ 343.850138][ T6314] dev_ioctl+0xb0e/0x1280 [ 343.854732][ T6314] compat_sock_ioctl+0xeea/0x1360 [ 343.860048][ T6314] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 343.865792][ T6314] __se_compat_sys_ioctl+0x80f/0x1020 [ 343.871442][ T6314] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 343.878139][ T6314] ? kmsan_get_metadata+0x13e/0x1c0 [ 343.883555][ T6314] __ia32_compat_sys_ioctl+0x93/0xe0 [ 343.889109][ T6314] ia32_sys_call+0x2226/0x4180 [ 343.894079][ T6314] __do_fast_syscall_32+0xb0/0x110 [ 343.899409][ T6314] ? irqentry_exit+0x16/0x60 [ 343.904241][ T6314] do_fast_syscall_32+0x38/0x80 [ 343.909292][ T6314] do_SYSENTER_32+0x1f/0x30 [ 343.913990][ T6314] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 343.920562][ T6314] RIP: 0023:0xf73bd579 [ 343.924791][ T6314] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 343.944630][ T6314] RSP: 002b:00000000f504655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 343.953252][ T6314] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000008946 [ 343.961424][ T6314] RDX: 0000000020000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 343.969551][ T6314] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 343.977674][ T6314] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 343.985795][ T6314] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 343.993935][ T6314] [ 343.997491][ T6314] Kernel Offset: disabled [ 344.001908][ T6314] Rebooting in 86400 seconds..