last executing test programs: 52.283126622s ago: executing program 2 (id=3713): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00001c00330008010000022d88da291c080211000001f80a3568101e0000"], 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000ebff850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x0, 0x1c7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x18, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2000000}]}]}]}, 0x40}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1b, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000646c6c2500000000002020207b1af8ff00000000bfa10000000000000701000089ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x94) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x28014044) r10 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000040)=""/123, 0x7b}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f0000000100)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/182, 0xb6}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 52.035447683s ago: executing program 2 (id=3717): r0 = openat$ptp0(0xffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000210040007acbaed10d203d2be285feb64400001b00003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = socket$unix(0x1, 0x1, 0x0) close(r3) socket$tipc(0x1e, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000080)={0xa002a008}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0xa0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB='\fwfdno=', @ANYRESHEX=r0, @ANYBLOB=',dfltuid=', @ANYRESHEX, @ANYBLOB="2c7063723d30303030303030303030303030303030303032362c736d61636b6673726f6f743d2f6465762f70747030002c646f6e745f6d6561737572652c7375626a5f747970653d2d2a3a5e5cc05e2c00"]) unshare(0x62040200) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000fd41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r8, 0x301, 0x0, 0x0, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x20}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) tee(r10, r10, 0x3, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x4) 37.623628133s ago: executing program 3 (id=3742): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x8, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c7"}]}], {0x14}}, 0x74}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@updsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@dev}, {@in6=@loopback, 0x0, 0x33}, @in6=@dev, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'sm3\x00'}}}]}, 0x13c}}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="020a00000600000000000000000004000400030005020000ff7f00000000000001010000000000000700000003000000"], 0x30}}, 0x0) listen(r2, 0x80080400) r6 = socket$inet_dccp(0x2, 0x6, 0x0) r7 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r7, &(0x7f0000001a00)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x10, 0x3f6, 0x20, 0x70bd25, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40004) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) getsockopt$inet_int(r6, 0x10d, 0xdd, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmmsg(r1, &(0x7f0000001a40)=[{{&(0x7f00000000c0)=@rc={0x1f, @none, 0x8}, 0x80, 0x0}}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0xfffff633, @local, 0x0, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000240)="4143f1afee8041ea7b995dd40ba8115715d8b227828603a9a6335ae13fd509615a8cdc7c2a467652ea4a433e422b0000536e03d01acf6dffac530dc9b78d57f3a58338d98470e5568ceba46758cd9128fe5a6cc457a3b21ee07290a745b51b9873fc10e99b052f88309ba7d3c0b4cf60be687b7284f8dda5fcc46326690493a362ea164bc7490584bdaf949aaf4d69a66b450d6e01b7d5d8f8c84c8fa62f09ccb07ef029cb86b5a8ab8a6d431c8a628307fcdb71bef99bac44da4ad4b5e8d60f34bcc710be306ca476", 0xc9}, {&(0x7f0000000140)="60ba28d0d2928d13a2516ac52651880bf84e16487051d8edbd40cbc5fc8647f1c1eb6cf7df857a6f180eaac90a1172b0aaf4929abbfddaf92727132c8248a6282dfdf3c8b33a8d3b0cd19ed9debe894c895f7de560192c9f5e5989a571d67fc35e8783ce2561d76d35cd1ea3ca00637009a9d85890ea6df325acbffd121e", 0x7e}, {&(0x7f0000000340)="a8fcfe72449bac6c7430571b3aedcd17ab1fa84fc646b1b5fdfc075052c28476f24d61242555208c5d1191c466ae0b14efdcdc30352243d3bd6ac3a58d92700d88ba4dbefcad054c7a76356282f5beb25681bdbd", 0x54}], 0x3, &(0x7f00000004c0)=[{0x1000, 0x115, 0x8, "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"}, {0x100, 0x10d, 0x0, "a48271e50ff29d247df3cb783c78608c73292fc7549708778e1f452b11ef765190e051a2973c8c44a1984e60f53e39520c701c3869b04bf0c8212dbd3ad597e6ea1c520526ba9aca0b69e1a60a04b905fe8400972886d620560ee53cd64422ad7c3ff9c93c372b43da44511304f7350096d6c91104ce71d4cf111394a053c94cef4acb71985fe6a9e558e538090019cba5612bb32efd3f5ebbe141b945a85c8877ac528212a85bf8f21859fdff3b1d4154a67ee5bcea4ab9f17d2a10a8402c965c56030aa94e2e0eadb712ade3975025fc6ba250b9d1798b070c07756a53ee0effef1579c04fbb2fac32876a0479f4"}], 0x1100}}, {{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001600)}, {&(0x7f0000001680)="ec505fffd894adff29ac9e5e7b7398cf4dacfca342cc", 0x16}, {&(0x7f00000016c0)="e6472509fe352fa5b6ffbd87fdb1d5aa27782dac91fb41af68f29d98c99ecb5fcc7feafd18d746954cf5069a051d950fb125322f03996b5fe0aa5ace9aa3ea2b36a35fcd77c3f483f88990525be187", 0x4f}], 0x3, &(0x7f0000001780)=[{0x10, 0x1d}, {0x68, 0x114, 0x46, "21fbf85b2eab0e8918bb3dfa5c9937228c81d3bb6b4ba94214d7e548de4aea2bafcf85e730314cb05888d6208e07e61ade900e5842c15f98e2ec90adb1ed70d8381ba224fe82de1dc1f161b1c3a0a4199c917d8c20c764"}, {0xa0, 0x88, 0x120000, "642a504591a133b7111d1864f78623858e7c97f88ab6985c7516461f245c8d35de4c3b62161cb01d760a344c8d6f906441db44bf59f2142ce02cde9dc38325df302f848603b51281a530a7ec244cf21dfb99296589afd0eab02ca5cfe951b280191c5c6eb854e5949040811667f6ebc08daca5fe950b70d7d14f42697ae6b965b4ceec2d7b27f3eacb12"}, {0x20, 0x107, 0xcd, "c5679d55dceea568a0c953ca81b5e031"}, {0x68, 0x111, 0x6, "d896dd6dc38d0114a732bac02a675b87a6e31ec72883e76c4f8d04ff06bbdd79529f0b5cba1e0082eef5f539f09b56ff1c7f86ef2d500896d3041a2d93b16b941a2f21a998f2f674b5737284378d962ef1bbf5047bfd68a3"}, {0xc8, 0x1, 0xd18, "2602eae44b5b794332ee4e3a1d0d749078cf7abffdcd40ffb2cfeccd8eab6d8bb00e45653f4342cd7d3e9d9c18d2df5adb23e47e29ab51f2dda4906618b79e4d7f708a92ae051a55e2a48c704f6355c443d59b64e6e1d640a973b3ffc08a8cec7924e99224481e679b376f14ecd6fac480115fab2a8d552bf2b8bf34b2f22de7da3910bb2cbd71824ff1f4c631f44d3d6fbfa53031826745f4b50394231b8176f43bb0b068a1a28382ea841555646b98cebf5c22bc95ffa0"}], 0x268}}], 0x3, 0x2c048051) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 37.42548451s ago: executing program 3 (id=3744): r0 = syz_io_uring_setup(0xd19, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r4 = syz_open_dev$ndb(&(0x7f0000001900), 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x1, 0xfa00, {0x0, &(0x7f0000000380)={0xffffffffffffffff}, 0x2}}, 0x20) unshare(0x22020400) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x0, 0x0, 0x0) r8 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r8, 0x40085112, &(0x7f0000000040)=@l) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000080)={0x13, 0x10, 0xfa00, {&(0x7f0000000480), r6}}, 0x18) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f59190200867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d256a67fec0cbb5c4e93d5c151d97f676ab93b1efbd46f600dc964231e3257bf358", 0xe0}, {&(0x7f0000001480)="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", 0x1000}], 0x3) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000240)={[{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4}]}) ioctl$BLKPBSZGET(r4, 0x80081280, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x3, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0) shutdown(r3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) 36.263784208s ago: executing program 3 (id=3746): symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) process_vm_readv(0x0, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000480)=""/109, 0x6d}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000940)=""/231, 0xe7}, {&(0x7f0000000540)=""/11, 0xb}], 0x5, &(0x7f0000000f00)=[{&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000b80)=""/235, 0xeb}, {&(0x7f0000000c80)=""/81, 0x51}, {&(0x7f0000000d00)=""/226, 0xe2}, {&(0x7f0000001740)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000740)=""/62, 0x3e}], 0x7, 0x0) openat(r0, &(0x7f0000000500)='./file0\x00', 0x10080, 0x1aa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_create(0x0) ioprio_set$uid(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000001280)={'syztnl0\x00', 0x0, 0x0, 0x3, 0x0, 0x80000001, 0x50, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1, 0x0, 0xffffffff, 0x7}}) chdir(&(0x7f0000000100)='./file0\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) r2 = socket$inet6(0xa, 0x3, 0x103) r3 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r3, 0x28, 0x0, 0x0, &(0x7f00000001c0)=0x700) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0x52eae000) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000ffd8, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x1030000}], 0x40000000000039e, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f00000001c0)=""/96, 0x60}}, {{&(0x7f0000000580)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000000780)=""/199, 0xc7}}, {{&(0x7f0000000400)=@phonet, 0x80, &(0x7f0000000dc0)}, 0x3e}, {{&(0x7f0000000e80)=@pppoe, 0x80, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001640)=[{0x0}], 0x1}, 0x81}], 0x5, 0x100, 0x0) umount2(&(0x7f0000002900)='./file0\x00', 0xf) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/41, 0x29, 0x10001) 34.182722575s ago: executing program 3 (id=3752): syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="00431123186ca5ea15ce9fbf21d1780164ee7c8b05157dfe69e55cb0bf3d8b03000000b0c6eb226f8e"], 0x1, 0x4a4, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file2\x00', 0x10000, &(0x7f0000000280)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xf0f7}}, {@sb={'sb', 0x3d, 0x2}}]}, 0x1, 0x55a, &(0x7f0000000840)="$eJzs3d1rZGcZAPDnTDLZzW40UXtRhX5gC7tFm9l0bRu8aCuIdwWl3q8hOxvCTjJLZlI3obhZvBZBRIt3vfJG8A8QpHfeilDQG69ERSm61Ysi6pHzkc0mPaeZuDOZNvP7wZvzns/neefjzJlz3swJYGI9GRGvRMRURDwTEfPl9EZZYq8o2XLv3XtjNStJpOlrf0siKadliyVlyVwsVztfDHJpmt55MG5vZ/fmSqfT3irHW/2NW63ezu6z6xsra+219ubVq0svLL+4/PzylYqspwdo2d1DY1m7Xvrqn3/0/Z9+7aVffvHbf7j218vfyfKdK+fvt2PYisekmT0W92XZb40i2BhMle1pjjsRAAAGkh3jfzoiPp8f/8/H1EDH1oVkpJkBAAAAw5K+PBf/TvLrcwAAAMAZ1cj7wCaNxbIvwFw0GouLRR/eR+JCo9Pt9b9wo7u9eb3oK7sQzcaN9U77ykzRp3Yhmkk2vpTXD8afuz+e7D14vuGH87P5/MXVbuf6+E57AAAAwES5eOT7/z/ni+//H+JumqbpqSUIAAAADMfCuBMAAAAARu6D3//fGkseAAAAwOi4/g8AAABn2tdffTUr6f79r6+/vrN9s/v6r6Ldu7m4sb26uNrdurW41u2uddJzERvHba/T7d76Umxu3271271+q7eze22ju73Zv7Z+6BbYAAAAwCn61BNv/y6JiL0vz+YlM5P9mapZoegr0Di9DIFROdEb+U+jywM4fXUf8x80PdI8gNPnXQ2Tq1kMkuOX/Jff/IczqmYHkN4pK7Wdd349ooQAAIChu/TZ6uv/0wfnBmodNx/4aNORBybX4Nf/gbPG9X+YXE1HADDRZgdY5sj1/4PuAgNf/0/L/kMzfggEAADGZC4vSWOxvBY4F43300IsRDO5sd5pX4mIT0bEb+eb57LxpXzNZJB/GgAAAAAAAAAAAAAAAAAAAAAAAAAA8l/lTiIFAAAAzrSIxl+S8oZel+afnjt6fmAmeX8+H+Z3B3jtx7dX+v2tpWz638vpEf03y+nPneTMgzuPAwAAwKjk39O/Vw6Xxp0NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGfNe/feWN0vpxn33a9ExEJV/Ok4nw/PRzMiLvwjiWR/pScir08NIf7e3Yh4tCp+kqUVC2UWWfzpB9ZrRMTsQUajjP9YmqaV8S8+dHSYbG9n+59Xqt5/jXgyH1a//6fL8rDq93+N+/u/qYr42Z7nEwPG+Nw7P29VzzlXzJ+u3v/sx09q4j9VtcmKB+Vb39zdrcstfSviUuXnT3IoVqu/cavV29l9dn1jZa291t68enXpheUXl59fvtK6sd5pl38rY/zgsV/8ty7+u3cjLtTEXzjc/pWj7X86qzTrtnzgP+/cvveZoto8sok8/uWnqp//Rw/HP/TQTsWdcqliQ5f263tF/UGP/+w3j39Y+6/XtP+45//y8U3PPfON7/6xrKYDrgIAjFBvZ/fmSqfT3jp5ZfZka72Zpun/HeuEleyIuWbW739SNHwIsbLjoyHk/Ehdqh/lyssDLrwX7a1eeq7qxTaMp+DjWZl++JdNo/4VPqTKWHdLAADACBwc9I87EwAAAAAAAAAAAAAAAAAAAJhcp/GDZ0dj7hWDmTE0FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg1v8CAAD//54G34w=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a0000009596506221dff14f2a2b"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) mount$cgroup(0x20000000, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0xc00, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265002c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e6c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae00"/178], 0xfd, 0x285, &(0x7f0000000dc0)="$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") ptrace$getregset(0x15, r5, 0x0, 0x0) 31.864690961s ago: executing program 3 (id=3757): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_getnetconf={0x1c, 0x52, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x48000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f0000000340)={0x0, 0xffff, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) fcntl$getown(r0, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) rt_sigprocmask(0x2, &(0x7f0000000000)={[0xfffffffffffffc25]}, 0x0, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b708000000a926007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB="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"/3584], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 28.875774524s ago: executing program 3 (id=3764): r0 = socket$nl_generic(0x10, 0x3, 0x10) ftruncate(0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r4, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r5, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000000039dbd6186700002e90001799979bde08fee3cd430b172230b863f403d01a89762e0f52b9067ca5cfcc4406c23353b0673ba0a6c582d8abe15c6fb6f6e7769ea3102bc0a3199ba4d5cd00bfac26", @ANYRES32=r7, @ANYBLOB="05003400b7000000"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}}, 0x0) r10 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r11, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000001500)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x65, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000009007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000018000000850000008200000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 11.80647815s ago: executing program 1 (id=3803): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000002980)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) get_robust_list(0x0, 0x0, &(0x7f0000002900)) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c0000000000000000000000030006000000000002000000ac1414bb000000000000000002000100000000000000fb00000000000300050000200000020000000000000000000000000000000100080000000000010014"], 0x60}, 0x1, 0x7}, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000240)}], 0x1, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) process_vm_writev(r0, &(0x7f0000002c40)=[{&(0x7f00000029c0)=""/141, 0x8d}, {0x0}, {&(0x7f0000002a80)=""/32, 0x20}, {&(0x7f0000002ac0)=""/118, 0x76}, {&(0x7f0000002b40)=""/220, 0xdc}], 0x5, &(0x7f0000003100)=[{&(0x7f0000002cc0)=""/10, 0xa}, {0x0}, {&(0x7f0000002d80)=""/249, 0xf9}, {&(0x7f0000002e80)=""/93, 0x5d}, {&(0x7f0000002f00)=""/3, 0x3}, {&(0x7f0000002f40)=""/158, 0x9e}, {&(0x7f0000003000)=""/221, 0xdd}], 0x7, 0x0) sendmmsg$sock(r4, &(0x7f0000000b00)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x22004006, &(0x7f0000000680)={[{@jqfmt_vfsold}, {@noinit_itable}, {@nouser_xattr}, {@stripe={'stripe', 0x3d, 0xffff}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfffffffffffffffe}}, {@grpjquota, 0x22}], [], 0x2}, 0xc4, 0x474, &(0x7f0000000180)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc3}) 11.33349299s ago: executing program 4 (id=3806): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="08000000000000000a00000000000000ff0100000000"], 0x90) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r2 = dup3(r1, r0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1050) ioctl$EXT4_IOC_CHECKPOINT(r6, 0x4004662b, &(0x7f0000000440)=0x3) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xcc, r8, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IE={0xab, 0x2a, [@random_vendor={0xdd, 0xa5, "71db081e93a53aa88076557eac5d4f2eec8566862eadf0d6c8e380faa8b6fefdbffda3b58076de3019e786ce2697801fed1a50bb7c73598f50ef2b98a9ca658ecd37e50c9962920c253ff59467602b0eb25b5c5d523bc6d7f6d7ffa65a29df2ad4a42def5e74784f32ff46e7e02f7012a7cad836e79b885261bd404e32839603fba907cce7236308bcc6773473fbe2ea71aeb5c6207f84c8ce7005b33d7e814e4d6d5301c0"}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xcc}, 0x1, 0x0, 0x0, 0x80}, 0x20040005) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x0, 0x4, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40313008}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc5, 0x65}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x400c000) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r10, 0x541b, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r13, 0x5201) ioctl$RFKILL_IOCTL_NOINPUT(r12, 0x5201) close_range(r11, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000400)={'team0\x00', {0x2, 0x0, @dev}}) 11.047365354s ago: executing program 0 (id=3807): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x10}}, 0xac}}, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(0xffffffffffffffff, 0x10d, 0xf, &(0x7f00001c9fff)="03", 0x19) bind(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x1a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000535000/0x800000)=nil, 0x802202, 0x19) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000180)=0x81) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) syz_open_pts(r2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000080)) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) syz_emit_ethernet(0x76, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x15, 0x4, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @mptcp=@syn={0x1e, 0xc}, @sack={0x5, 0x16, [0x0, 0x0, 0x0, 0x0, 0x0]}, @md5sig={0x13, 0x12, "a4bcbcee95c6179191d2675112a6689b"}]}}}}}}}, 0x0) mbind(&(0x7f00009bc000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000200)=0x6, 0x7, 0x3) 10.216455654s ago: executing program 1 (id=3808): r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) creat(0x0, 0xd931d3864d39dcca) statx(0xffffffffffffffff, 0x0, 0x800, 0x400, 0x0) sched_setaffinity(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f00000001c0)={0x0, 0xe, 0x1, @thr={&(0x7f0000000540)="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", 0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='attr\x00') fchdir(r4) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000180)=0x400, 0x4) sendmsg$nl_route_sched(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=@gettaction={0x34, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x34}}, 0x0) 9.949598097s ago: executing program 4 (id=3809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000080), 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r5, &(0x7f0000000000)=""/35, 0x23) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) write$binfmt_script(r3, 0x0, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 8.077419366s ago: executing program 1 (id=3810): syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000380)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa10812, &(0x7f0000000600)=ANY=[@ANYBLOB='dmask=00000000000000000002621,utf8,umask=00000000000000000200000,namecase=1,discard,errors=remount-ro,umask=00000000000000000200004,umask=00000000000000000003377,namecase=1,utf8,iocharset=iso8859-4,iocharset=cp874,dmask=01777777777777777777770,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB="49440fb4005cba20653d2326292c265c2c00e79feca4a2e1053fdd2c84e7a89aa4ee02cbb47695d7ade8fd4362d0e37fbbb365b529e3d4cfa7ec78bc709784cc24ff7cfd3accb1a53fcd27bcb1794fcc15fc6eeae6dd85887fec609d9df9eb63c1eb27e9a7e7c87e551a878ce3db471a5a29b9509986d21054cc6d2e9be1e16b9e2e6e9df5b4b95e1b"], 0x21, 0x1502, &(0x7f0000002180)="$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") ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001d80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0103461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b31, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x4000, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x20005e, &(0x7f0000000480)={[{@abort}, {@errors_continue}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@errors_remount}, {@norecovery}, {@jqfmt_vfsv0}, {@nolazytime}, {@noquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@usrquota}, {@init_itable_val={'init_itable', 0x3d, 0x5}}]}, 0x1, 0x476, &(0x7f0000000700)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) open(0x0, 0x0, 0x0) 8.03137837s ago: executing program 4 (id=3811): r0 = dup(0xffffffffffffffff) socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}) fcntl$lock(r1, 0x25, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000002240)={0x2, 0x0, 0x100}) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xc, &(0x7f0000000100)=0x5, 0x4) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102399, 0x18fff}], 0x1, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x4a, &(0x7f0000000280)=0x20, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000080)={0x0, @loopback, @dev}, &(0x7f00000000c0)=0xc) recvmmsg$unix(r6, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r5, 0x4008744b, 0x0) 7.876242643s ago: executing program 2 (id=3737): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="a2", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) syz_emit_ethernet(0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be"], 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fddbdf25200000000c00060001000000010000001c002d800500010000000010080002007f360000050004"], 0x3c}}, 0x0) socket$isdn(0x22, 0x3, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x21, "9f68d3a91ea9b9c5ac0a58fba7dae8709596cf7d778f4eccb4fcee9e3436ee4bb4"}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = socket$isdn(0x22, 0x2, 0x25) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)}}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000000000000002) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xfffffffffffffdb0}}], 0x1, 0x22, 0x0) close(r2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @remote}, {}, 0x28, {0x2, 0x0, @empty}}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) 7.79458644s ago: executing program 0 (id=3812): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d01, &(0x7f00000010c0)=0x32) open$dir(0x0, 0x40000, 0x60) close(0xffffffffffffffff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000000600)={'bridge_slave_1\x00', @random='\x00\a\x00'}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r2, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x10) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000240), 0x222242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000040)={0x1, 0x5}, 0x2) r5 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10300}, &(0x7f0000000140), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r5, 0x184c, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xd8}}, 0x0) 7.472598157s ago: executing program 4 (id=3813): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "01018f", 0x28, 0x11, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], {0x0, 0x4e21, 0x28, 0x0, @wg=@data={0x4, 0x0, 0x0, "8e2527cbc17505939bfad0d3f172b116"}}}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040), 0xfffffffffffffff7, 0x151800) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) recvfrom$netrom(r4, 0x0, 0x0, 0x1, 0x0, 0x0) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)=r3) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0xe, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', r3, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x80000000}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff, @void, @value}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r6, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) socket$inet(0x2b, 0x801, 0x0) sendmsg$sock(r6, &(0x7f00000034c0)={&(0x7f0000005440)=@caif, 0x80, 0x0}, 0x0) sendfile(r6, r5, 0x0, 0xffefffff) 7.471023607s ago: executing program 2 (id=3822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000000a0a01020000000000000000000000000900010073797a3000000000a4a187fd94f80170f6110dfcb9d3c30f6ab28faada5dc956a28234e1af784bf12c5135a5727753f5f6c81d9ce0fcfbb591f0fdf3a15565c1815f773d1c98a686943b1d6a10e8a2c9a22eb8e094ad68b007ee6986bd527744bf41c036fd81b69c0fc0af6a816737780ce3e8fb4f87fabcd464a66d97142567d79de045c83d2991f2337f09a41dc3ea20addc5480719c964ca8d85fc1fa3ebd2b"], 0x20}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x80080400) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000002c0)=ANY=[], 0xc1) sched_setscheduler(0x0, 0x5, &(0x7f0000000380)) ioprio_set$pid(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200010, &(0x7f0000000300)={[{@user_xattr}, {@nombcache}, {@dioread_lock}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x4c}}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000980)="$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") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffffb, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) preadv2(r5, &(0x7f0000000400)=[{&(0x7f0000001140)=""/4096, 0x2007ffb}], 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r3, 0x0) getsockopt$inet_int(r2, 0x10d, 0xaa, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000140)={0x1, 0x6, 0xffff, 0xfffb}, 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="4400000000000000000000004e0000800c000000001910000000000014000000fe80000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c99f0c0be825a55aeeeb1525bbeca3843d2cf16e9deac929844985f82f00079446702001cacae9db10507d4287a3d946ee6d4021b67b95134745e0120eb19a0dd3bcf900000000000000000000000000000000000000000000000008bed"], 0x44}], 0x1}, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) io_uring_setup(0x0, &(0x7f0000000300)) 6.940023322s ago: executing program 4 (id=3814): bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x1fa4, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000340)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6(0xa, 0x80803, 0x87) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) write$binfmt_script(r7, &(0x7f0000000140)={'#! ', './file0'}, 0xfda6) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r9, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) pidfd_send_signal(0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x0, 0x0, 0xfff}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.89810094s ago: executing program 0 (id=3815): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x4b6, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_open_dev$usbfs(&(0x7f0000000180), 0x7fffffffffffffff, 0x80200) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f000001a000/0x3000)=nil, 0x3000, 0xf, 0x11012, r5, 0x0) pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001f00"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000400)=ANY=[@ANYBLOB="bd7000fcdbdf25ff008000000000003801000000", @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000100)=@filename='./file0\x00', 0x0, &(0x7f0000000080)={0xfffffffffffffffd, 0x2bdb, 0x2e26, 0x0, 0x2, 0x40000000000000, 0x0, 0x7fffffff, 0x278d1aff}) 4.685062373s ago: executing program 0 (id=3816): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYRESOCT], 0x1, 0x35e, &(0x7f0000000b80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) unshare(0x20000400) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x34}, 0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r0, 0x0, 0x4008001) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x2000040) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = gettid() r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/schedstat\x00', 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000140)="53a1b228144d4835415007b390c577cc8a52baa9acba00f1dd7513f66663907dd44196b10d83678ae900d813987c30ec", 0x30}, {&(0x7f0000000540)="0b8b61a9d3983220d21a6c51b2595f671ffd4f674d81bec0e74d44fc1f87c6699a37d7dc912a573f5160648d2dc6dcb9b7fadbfa5f6d0b77afb8e72fc808ca522704d3a40c10a4ec42cef49e0f14cfed658cd906fbfbd5662ad2d46f866d5822", 0x60}, {&(0x7f0000000700)="ecb0cf337e24fac56e2538eeef46cfc55416975a2b339dc2fd50692d3a8701efab83f5d5522b4d66e05b95861dbd39ec103f21789acad70354be14337dee47726ee004957151164ff869fd080c8aba3cbbb98dc6833516bd27cea00e2bcf832865128a661ee2d8bb45952d584728fc7b3d9031f3fca7780d3345a6386a1380b311cbf7dcfcc6f0cc62cef4971d77e32d4df628932e98b716b22833c4f753ae66f24ad52ad704929d72860c28223013a4", 0xb0}, {&(0x7f0000000340)="88b1b408f4505cceda1a52bd9275c1cee323958beab018ed3fcfbda5a40856fff0e5775f3964edba0dffc9d6d5781f0cd36e643553f83c877d4abcf0197bdc9e0420107e5ce648500ee9d4e1d6f9b70f882178e1d16aedb5ac18916125c173da0679e5256e3494915f76f31d", 0x6c}, {&(0x7f0000000880)="f3800fa39c041d1b847639be7e710c9d84b36d726fd1c0c270e96d7301800d1474a8eb421e917e4356d41fe994c2f77cbe4d1c995b1457fe265375b93d0921e88a50b1ecd43d26e80ac566f640c663150d78beb087b3b94a4abfe1f4595f787d80ddb07bd31da39d135514a9bb1489bef35ef7a524ce59fcada09cab615172ab3d844b24bb76d2b1443a7942708f845d143499446d609aba4d95531eb7396d6606b9d0e6f559fb04ec9352e6dc104d1f6d89e4157200fea77e", 0xb9}, {&(0x7f00000009c0)="91e63bba648258706160117885363debd7e23684aa6e7c41fd6873ca56f4cffd1550819bdaee6c6d923c1ccd95950a085ca74094eee665b3a23811bb4e193946573ddf786db600d95230e5e4771638575d297fc5d7055a5aac2323a863e69f0843e1978fcf5a8501bf0a587601a0019e315d68a38b2fbbc07016fbc5938551d39b5dafe31a7c50f47d8c9d8b0c152d5bbe2194208c2093faa1447e1bff7f78e8e715b29dc3f4ff086a0570bf519be43633f57dfa1628a5665fd75f78295733525e2952887565d265698c93b1c551e71d5b04074a6af623f6b7142de0f4608c4cfb12e49e17f0d2598ea42337393f690fe4f4f29ae7b31753f769c85387c0f22e28df35968d6353e2f0db11339b7d136bff95efb22dae41c46f2d0046486e2ab1ae862a5fe46f32ce0f40d710ef0ffe579497a49404094f2161d17b4401b85481b2d72001ff", 0x145}, {&(0x7f00000007c0)="3efce8a8cebdc7241cb440f11fea781548d34d5e722a5dba696e4537ea944559f4e059a3fe4330959c11510fa33e1c42452283b13d4c83a23330b6408a9be851c6236b43a9ea7afb34e1a990513670a5c28bc7e3214ef988fed2004e84214e139f098cdd67c5f34c9080698ef5b3624d7da6c42114782f19b032ea52", 0x7c}, {&(0x7f0000000940)="c8", 0x1}, {&(0x7f0000000640)='i', 0x1}], 0x9}}], 0x1, 0x7c9ce320e12db95) sendfile(r6, r5, 0x0, 0x4000000000010046) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) 4.684128483s ago: executing program 4 (id=3817): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a000000080003005a1e3079e8b4162f62f3baefbcc8f413d212f336aa947ea912897b2750daba3720e01bdd4b728178353e3950c5d7402c890a2fb77adcc6", @ANYRES32=r2, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x24, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f1"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x3, 0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=r10, @ANYBLOB='.'], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(0xffffffffffffffff, 0x80, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 4.581978372s ago: executing program 0 (id=3818): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x5, r1}, 0x38) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000009500008000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0100000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400200100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400200100000000000000000000000000000c00028005000100000000000800074000000000a8000d8008000100ac141400080002000000000014000500ff02000000000000000000040000000114000400fe800000"], 0x13c}}, 0x0) r7 = socket(0x10, 0x3, 0x9) connect$netlink(r7, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000b00)={&(0x7f0000000a00), 0xc, &(0x7f0000000ac0)={&(0x7f0000000400)={0x1c}, 0xdb}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.383990958s ago: executing program 2 (id=3819): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000000)='numa_maps\x00') r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001080)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a0, 0x2d8, 0xd0, 0x0, 0x3f0, 0x2d8, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x5d0, 0x6, 0x0, {[{{@uncond, 0x11e, 0xa8, 0xd0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev, [0x0, 0x0, 0x0, 0xff], [], 'batadv_slave_0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @private2, @private1, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x700) r6 = dup(r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0) r9 = fanotify_init(0x200, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000", @ANYRES32=r10, @ANYRES64=r10], 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r3}}) accept4$vsock_stream(r6, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB(r9, 0xc400941b, &(0x7f0000000500)={0x0, 0x1, 0x9}) 3.746687173s ago: executing program 1 (id=3820): openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000000)=0x655e, 0x4) r5 = dup2(r4, r4) writev(r5, &(0x7f0000000400)=[{&(0x7f00000001c0)="d848aa11ee80a1e8f7d33041fc", 0xd}, {&(0x7f0000000240)="fe8ba6b8618d6af85d99dffda44fb2718ec16e2d6531c85f679c95", 0x1b}], 0x2) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000580)=0x7ff, 0x4) recvmmsg(r5, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) 3.53854675s ago: executing program 0 (id=3821): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8086, &(0x7f0000000480)={[{@grpquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa2a4}}]}, 0x1, 0x4a9, &(0x7f0000001040)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r5]) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffb000/0x2000)=nil) r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x88) r8 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r8, r7, 0x0, 0x3a) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r10, 0x8983, &(0x7f0000000280)={0x3, 'vlan0\x00', {0x10000}, 0x9}) 1.954723095s ago: executing program 1 (id=3823): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x6, 0x7fff}, &(0x7f0000000240)) r1 = open$dir(&(0x7f0000000280)='./file0\x00', 0x208101, 0x1a3) unlinkat(r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x2172, r0, 0x4000) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) setrlimit(0xc, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000000300), 0x1c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x7d, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d80)={r5, &(0x7f0000001d00), &(0x7f0000001d40)=@tcp6=r4, 0x1}, 0x20) 1.30000244s ago: executing program 1 (id=3824): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x22, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e289000002", 0x41) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0xc4, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x40, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xe169}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x9}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd2}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xd9}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x3c, 0x11d, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xd0}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x3d, 0x8, 0x8d}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x0, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x4}]}]}, 0xc4}}, 0x4008010) r6 = socket$unix(0x1, 0x1, 0x0) connect$unix(r6, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r7 = open(&(0x7f0000000280)='./file0\x00', 0x0, 0x80) write$binfmt_script(r3, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'cgroup.subtree_control\x00'}, {0x20, '([&-'}, {0x20, '#]/'}, {0x20, 'cgroup2\x00'}, {0x20, '/&:#'}, {0x20, '#!'}, {0x20, ')'}, {0x20, '(8/+[))'}, {}, {0x20, 'nl80211\x00'}], 0xa, "edcc6e07cabe092de11d102225ff7798252ef72e509d9ea64896784d1e1468f468a4b309aa1e43f5438fabbdc1c057c05f46e7a3a7bc884353379590aaa9761bc33be3c6f5ef88927a9fe8dd2cd5a0d3012068db92d633109519570075ebde9da25a2b1fefa28d8d36f814ce9338636c0d24326cb884631668446a4f8f936ceb0cd7c669b13c557dbd0aa0c77850ed0be6e7d3d22a24d22cc306f098782e7b1d73b2472dbbaa252bd38dbde4dbddba751d930f1c"}, 0x105) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) fstat(r7, &(0x7f00000004c0)) r8 = openat$cgroup_subtree(r7, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)={[{0x2d, 'pids'}]}, 0x6) socket$key(0xf, 0x3, 0x2) 0s ago: executing program 2 (id=3825): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getuid() sendmsg$kcm(r2, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001440)="a9a5e911adab45f1da597720dde7b803f504ebc6e6e2808eb542029b5685", 0x1e}, {&(0x7f0000001480)="9304", 0x2}, {&(0x7f0000001540)="9313a358f8608471a7ed925e17241ae55316698a811f2c5cb14f8c9fd550019452edda2efa29fd44c098c4c2191d6f7c7c8df96b8c163491c2288986bf057bcad2fdaf029e59251f9e7c6119c3d1004d64d5ea254fa558993ce0d5f48b2280537580b70df45f2004b77a3f426019c47e72a8abe14ba880dbcf0c3ed41ab3e8134cda4752fafe32f024b57a5f4a6f7013cb01352886177343b6bd5dc738ea7a47de0f900b0cd8ffac40d9cfdc698f324969a043fa6885620a270defd32fdd58d425f8efd198165274fa8d6af5cdd6097d79585f5eae0705bfe5b89417d701985a6b0e67bc024be14bf795be2e406cb909c6ed7e939df80290d5ce59", 0xfb}, {&(0x7f0000001640)="cf96ae03e396db4cbde7f2362684cb6b26eeb39de2e2ff87cb0beb4c5403f68eddca26b41275820801259787a5f4795d3123a2191a5ee1fc080fde5090f81b26d3be3675db16acbe17d4820117dbe05776af6630a0bad5cd", 0x58}, {&(0x7f00000016c0)="57a166b558e774942ab2d3ac4cda7fbfcf2e1ea4ebed93e9ac2bfa77a53b9e5d9a96965ffd2bc4c20cda5e611042fd506eec0f2f4c4868b470884c81460683ca0dd024bd7e0ae1ecba1cefb96842e6e29064588bbbd6fce73176cd1ec188df5f941e105083c4881ec864a57d923f", 0x6e}], 0x5}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002480)=@delchain={0x74, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8}, @TCA_FLOW_BASECLASS={0x8}, @TCA_FLOW_MODE={0x8}]}}, @filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}]}}]}, 0x74}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) r5 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r5, 0x101, 0x5, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, 0x0, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xd, 0x0, &(0x7f0000000400)) r6 = socket(0x10, 0x803, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x27, 0x0, 0x0, 0x0, 0x0, 0xd50, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 23.762214][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.770435][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.798484][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.805938][ T26] audit: type=1326 audit(2000000483.907:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1423.838731][ T3826] device bridge_slave_1 left promiscuous mode [ 1423.844972][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.862620][ T3826] device bridge_slave_0 left promiscuous mode [ 1423.886103][ T26] audit: type=1326 audit(2000000483.907:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1423.918078][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.925619][ T26] audit: type=1326 audit(2000000483.907:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1423.950996][ T26] audit: type=1326 audit(2000000483.917:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1423.988123][ T3826] device veth1_macvtap left promiscuous mode [ 1423.995739][ T3826] device veth0_macvtap left promiscuous mode [ 1424.002379][ T26] audit: type=1326 audit(2000000483.917:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1424.026930][ T3826] device veth1_vlan left promiscuous mode [ 1424.034098][ T3826] device veth0_vlan left promiscuous mode [ 1424.058954][ T26] audit: type=1326 audit(2000000483.917:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1424.107997][ T26] audit: type=1326 audit(2000000483.917:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1424.157807][ T26] audit: type=1326 audit(2000000483.917:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18424 comm="syz.1.3417" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30e893ff9 code=0x7ffc0000 [ 1424.252333][ T3826] team0 (unregistering): Port device team_slave_1 removed [ 1424.266263][ T3826] team0 (unregistering): Port device team_slave_0 removed [ 1424.279251][ T3826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1424.292107][ T3826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1424.363292][ T3826] bond0 (unregistering): Released all slaves [ 1424.407822][T12318] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1424.431108][T14629] usb 3-1: USB disconnect, device number 42 [ 1424.871735][T18459] netlink: 'syz.1.3422': attribute type 11 has an invalid length. [ 1424.881430][T18459] netlink: 'syz.1.3422': attribute type 5 has an invalid length. [ 1424.898383][T18305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.975359][T12318] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1424.995702][T12318] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1425.008657][T12318] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1425.017997][T12318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.059065][T18449] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1425.107495][T18305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.308854][T18305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.452082][T18305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.259346][T18301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1426.299210][T18301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1426.320225][T18301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1426.351429][T18301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1426.409141][T18305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1426.435157][T18305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1426.458776][T18305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1426.494884][T18305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1426.536184][ T5700] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1426.653062][T18301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.700829][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1426.711204][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1426.727522][T18301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.768156][T18305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.786071][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1426.796002][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 1426.806535][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1426.835314][ T3827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.842443][ T3827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.873300][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1426.912084][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1426.937634][ T5700] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1426.979451][T18512] Cannot find add_set index 0 as target [ 1427.028185][ T5700] usb 3-1: New USB device found, idVendor=13d3, idProduct=3395, bcdDevice=9e.61 [ 1427.059682][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1427.112872][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.132169][ T3827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.139313][ T3827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.203580][ T5700] usb 3-1: config 0 descriptor?? [ 1427.233206][T14841] usb 1-1: USB disconnect, device number 44 [ 1427.245970][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1427.361076][T18305] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.377534][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1427.391491][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1427.426583][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1427.434635][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1427.825773][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1428.509670][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1428.620445][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1428.650323][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1428.669250][T18529] loop1: detected capacity change from 0 to 128 [ 1428.686114][ T3686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1428.693197][ T3686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1428.701293][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1428.719761][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1428.732988][ T3686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1428.740120][ T3686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1428.751367][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1428.759096][T14841] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1428.786444][T18529] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1428.794474][T14841] Bluetooth: hci4: Injecting HCI hardware error event [ 1428.802628][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1428.812561][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1428.832448][ T3577] Bluetooth: hci4: hardware error 0x00 [ 1428.863344][T18529] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1428.868057][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1428.883461][T18529] ext4 filesystem being mounted at /172/mnt supports timestamps until 2038 (0x7fffffff) [ 1428.898622][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1428.926145][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1428.945257][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1428.961437][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1428.988889][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1429.010951][T18301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1429.025729][T18301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1429.064513][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1429.073302][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1429.095246][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1429.114913][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1429.145597][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1429.180385][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1429.194515][T12318] usb 3-1: USB disconnect, device number 43 [ 1429.202064][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1429.242974][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1429.268043][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1429.351518][T18549] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1429.362845][T18549] PKCS7: Only support pkcs7_signedData type [ 1429.397790][T18305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1429.639834][T18301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1429.679299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1429.694322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1429.731898][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1429.745234][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1429.799676][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1429.831769][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1429.871538][T18301] device veth0_vlan entered promiscuous mode [ 1429.895481][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1429.921787][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1430.031254][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1430.039648][T17237] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1430.053929][T18305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.086081][T18301] device veth1_vlan entered promiscuous mode [ 1430.163758][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1430.172392][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1430.204525][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1430.231680][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1430.254330][T18301] device veth0_macvtap entered promiscuous mode [ 1430.267830][T18301] device veth1_macvtap entered promiscuous mode [ 1430.310295][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.333476][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.349303][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.360732][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.371264][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.382744][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.393163][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1430.404373][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1430.427592][T18301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1430.438165][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1430.490507][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1430.537562][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1430.661398][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1430.879450][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1430.970998][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.081561][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.092770][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.102997][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.121736][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.131745][T18301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1431.142385][T18301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1431.164333][T18301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1431.193113][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1431.213580][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1431.249019][T18301] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.262942][T18301] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.271804][T18301] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.300206][T18301] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1431.322098][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1431.346439][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1431.405723][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1431.433457][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1431.448756][T18305] device veth0_vlan entered promiscuous mode [ 1431.480979][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1431.493516][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1431.531908][T18305] device veth1_vlan entered promiscuous mode [ 1431.600490][T18305] device veth0_macvtap entered promiscuous mode [ 1431.636575][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1431.670520][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1431.697599][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1431.716862][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1431.733055][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.805790][T18305] device veth1_macvtap entered promiscuous mode [ 1431.811114][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.861318][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1431.871671][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1431.897348][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1431.932799][T16571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1431.941522][T16571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1431.983085][T18609] loop0: detected capacity change from 0 to 2048 [ 1431.995650][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1432.011951][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.068958][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.098236][T18609] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1432.109684][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.147847][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.158536][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.169426][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.180642][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.196120][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.206267][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1432.222407][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.241730][T18305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.265246][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1432.277773][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1432.553243][T18624] loop3: detected capacity change from 0 to 32768 [ 1432.568558][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.595323][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.627533][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1432.699776][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1432.884081][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.049248][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.193517][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.271593][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.290107][T18305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1433.310301][T18305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1433.322005][T18305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1433.336018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1433.347564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1433.355998][T18624] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.3398 (18624) [ 1433.408055][T18305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.425462][T18624] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1433.434284][T18624] BTRFS info (device loop3): using free space tree [ 1433.440809][T18624] BTRFS info (device loop3): has skinny extents [ 1433.453243][T18305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.466126][T18305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.476656][T18305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1433.604981][T18652] loop2: detected capacity change from 0 to 128 [ 1433.617272][ T3686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.645463][ T3686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1433.833294][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1433.980661][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.153268][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1434.191645][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1434.311761][T18624] BTRFS info (device loop3): enabling ssd optimizations [ 1434.581735][T18683] loop0: detected capacity change from 0 to 8 [ 1434.712741][T18686] loop4: detected capacity change from 0 to 128 [ 1434.719029][T18683] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1434.773580][T18683] SQUASHFS error: Failed to read block 0x91: -5 [ 1434.800463][T18683] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1434.807820][T18683] SQUASHFS error: Unable to read inode 0x11f [ 1434.902628][T18686] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1434.940452][T18686] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 1435.048539][T18683] loop0: detected capacity change from 0 to 128 [ 1435.211014][T18683] VFS: unable to find oldfs superblock on device loop0 [ 1438.080837][T18693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3445'. [ 1438.289386][T18728] netlink: 'syz.4.3449': attribute type 13 has an invalid length. [ 1438.338210][T18724] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3450'. [ 1438.344926][T18728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3449'. [ 1438.971511][T18745] loop3: detected capacity change from 0 to 4096 [ 1439.158968][T18745] __ntfs_error: 19 callbacks suppressed [ 1439.159009][T18745] ntfs: (device loop3): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 1439.177377][T18745] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 1439.206285][T18745] ntfs: (device loop3): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 1439.218208][T18745] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 1439.231980][T18745] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1439.253714][T18745] ntfs: volume version 3.1. [ 1439.265450][T18745] ntfs: (device loop3): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 1439.277795][T18745] ntfs: (device loop3): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 1439.293172][T18745] ntfs: (device loop3): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 1439.304380][T18745] ntfs: (device loop3): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 1439.315897][T18745] ntfs: (device loop3): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 1441.037859][ T3826] device hsr_slave_0 left promiscuous mode [ 1441.869464][ T3826] device hsr_slave_1 left promiscuous mode [ 1442.044789][ T3826] device veth1_macvtap left promiscuous mode [ 1442.052202][ T3826] device veth0_macvtap left promiscuous mode [ 1442.081143][ T3826] device veth1_vlan left promiscuous mode [ 1442.087025][ T3826] device veth0_vlan left promiscuous mode [ 1443.818181][T18780] loop1: detected capacity change from 0 to 1764 [ 1444.015107][T18781] loop4: detected capacity change from 0 to 1024 [ 1444.116914][T18781] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (2915!=35945) [ 1444.127531][T18781] EXT4-fs (loop4): group descriptors corrupted! [ 1444.556522][T18783] netlink: 'syz.4.3464': attribute type 2 has an invalid length. [ 1444.564580][T18783] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3464'. [ 1444.810681][ T3826] bond0 (unregistering): Released all slaves [ 1444.923428][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.039405][T18790] loop4: detected capacity change from 0 to 4096 [ 1446.103271][T18790] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 1446.138333][ C0] vkms_vblank_simulate: vblank timer overrun [ 1446.149221][T18790] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1446.161386][T18790] ntfs3: loop4: Failed to load $UpCase. [ 1446.260732][T18799] No such timeout policy "syz0" [ 1446.319909][T18792] loop1: detected capacity change from 0 to 1024 [ 1447.360195][T18806] loop0: detected capacity change from 0 to 1024 [ 1447.455261][T18808] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3472'. [ 1447.514287][T18808] tipc: Failed to obtain node identity [ 1447.518359][T18806] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1447.547296][T18808] tipc: Enabling of bearer rejected, failed to enable media [ 1447.922626][T18815] netlink: 'syz.4.3473': attribute type 1 has an invalid length. [ 1448.231372][ T3558] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1448.300870][T18792] EXT4-fs (loop1): unsupported inode size: 0 [ 1448.481345][ T3558] usb 5-1: Using ep0 maxpacket: 8 [ 1448.601391][ T3558] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1448.643481][ T3558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1448.672686][T18826] loop3: detected capacity change from 0 to 1024 [ 1448.719109][ T3558] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1448.759670][ T3558] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1448.964974][ T3558] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1448.976257][ T3558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.994040][T18826] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 1449.496797][T18792] EXT4-fs (loop1): blocksize: 1024 [ 1449.584847][ T3558] usb 5-1: usb_control_msg returned -71 [ 1449.591315][ T3558] usbtmc 5-1:16.0: can't read capabilities [ 1449.612774][ T3558] usb 5-1: USB disconnect, device number 32 [ 1450.330347][ T3609] Bluetooth: hci2: command 0x0405 tx timeout [ 1450.408999][T18849] devtmpfs: Bad value for 'size' [ 1450.685594][T18850] loop3: detected capacity change from 0 to 64 [ 1450.951305][T18851] loop4: detected capacity change from 0 to 64 [ 1451.152488][T18855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3485'. [ 1451.228321][T18850] overlayfs: unrecognized mount option "fowner<00000000000000000000" or missing value [ 1451.273915][T18855] batman_adv: batadv1: Adding interface: netdevsim0 [ 1451.287401][T18855] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1451.364470][T18855] batman_adv: batadv1: Interface activated: netdevsim0 [ 1451.913554][T18877] program syz.1.3484 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1452.247607][T18880] loop0: detected capacity change from 0 to 1764 [ 1452.435727][T18883] loop3: detected capacity change from 0 to 8192 [ 1454.829703][T18910] devtmpfs: Bad value for 'size' [ 1456.631067][T18926] loop3: detected capacity change from 0 to 128 [ 1456.761352][T18921] loop1: detected capacity change from 0 to 4096 [ 1456.794709][T18926] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1457.523467][T18926] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,,errors=continue. Quota mode: none. [ 1457.541369][T18926] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038 (0x7fffffff) [ 1458.824650][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 1458.824665][ T26] audit: type=1804 audit(2000000519.561:643): pid=18944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3504" name="/newroot/146/bus/file0" dev="overlay" ino=843 res=1 errno=0 [ 1458.852850][ C0] vkms_vblank_simulate: vblank timer overrun [ 1460.789198][T18964] loop3: detected capacity change from 0 to 1024 [ 1460.816252][T18961] loop0: detected capacity change from 0 to 512 [ 1461.072711][T18961] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 1462.675474][T18961] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 1462.724792][T18961] EXT4-fs (loop0): 1 truncate cleaned up [ 1462.730471][T18961] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 1462.784301][T18964] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1462.813118][T18977] loop4: detected capacity change from 0 to 1024 [ 1462.830833][T18964] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038 (0x7fffffff) [ 1462.854009][T18961] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.3509: Logical block already allocated [ 1462.913712][T18961] EXT4-fs (loop0): Remounting filesystem read-only [ 1463.113306][T18977] hfsplus: failed to load catalog file [ 1463.834109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.225497][T18970] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 1465.515985][ C0] vkms_vblank_simulate: vblank timer overrun [ 1465.531963][T18989] loop4: detected capacity change from 0 to 256 [ 1465.584711][T18989] exfat: Deprecated parameter 'utf8' [ 1465.590565][T18989] exfat: Deprecated parameter 'namecase' [ 1465.714616][T18994] QAT: Invalid ioctl 1076925456 [ 1465.737484][T18989] exfat: Deprecated parameter 'namecase' [ 1465.760575][T18991] netlink: 'syz.2.3517': attribute type 16 has an invalid length. [ 1465.761630][T18989] exfat: Deprecated parameter 'utf8' [ 1465.768550][T18991] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.3517'. [ 1465.827581][T18989] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1466.748145][T19005] loop0: detected capacity change from 0 to 512 [ 1466.821792][T19005] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1466.829255][T19005] UDF-fs: Scanning with blocksize 512 failed [ 1466.835886][T19005] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1466.843784][T19005] UDF-fs: Scanning with blocksize 1024 failed [ 1466.859433][T19005] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 1466.866898][T19005] UDF-fs: Scanning with blocksize 2048 failed [ 1466.873686][T19005] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 1466.919274][T19005] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1466.967624][ T26] audit: type=1800 audit(2000000527.681:644): pid=19005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3518" name="file1" dev="loop0" ino=26 res=0 errno=0 [ 1467.044617][T19011] loop4: detected capacity change from 0 to 2048 [ 1468.155140][T19011] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1468.380278][T19024] fuse: Bad value for 'fd' [ 1470.139319][T19028] loop2: detected capacity change from 0 to 1024 [ 1470.227782][ T3558] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1470.482171][ T3558] usb 5-1: Using ep0 maxpacket: 16 [ 1470.587057][T19030] attempt to access beyond end of device [ 1470.587057][T19030] loop2: rw=0, want=5780, limit=1024 [ 1470.601393][ T3558] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1470.619067][T19030] attempt to access beyond end of device [ 1470.619067][T19030] loop2: rw=0, want=5780, limit=1024 [ 1470.630927][T19030] Buffer I/O error on dev loop2, logical block 2889, async page read [ 1470.639791][ T26] audit: type=1800 audit(2000000531.323:645): pid=19030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3525" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 1470.643169][T19030] attempt to access beyond end of device [ 1470.643169][T19030] loop2: rw=0, want=5780, limit=1024 [ 1470.692483][ T3558] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1470.757229][ T3558] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1470.807002][ T3558] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1470.836387][ T3558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1470.893179][T19026] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1470.913921][ T3558] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1470.938341][T19027] attempt to access beyond end of device [ 1470.938341][T19027] loop2: rw=0, want=5780, limit=1024 [ 1471.075336][ T3558] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 1471.118746][ T3558] usb 5-1: USB disconnect, device number 33 [ 1471.399649][T19032] loop0: detected capacity change from 0 to 1024 [ 1471.577702][T19032] EXT4-fs (loop0): Ignoring removed orlov option [ 1471.588024][T19032] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 1471.679401][T19032] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 1472.944102][T19054] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3532'. [ 1472.997724][T19058] loop0: detected capacity change from 0 to 256 [ 1473.061055][T19058] exfat: Deprecated parameter 'utf8' [ 1473.067715][T19058] exfat: Deprecated parameter 'namecase' [ 1473.085921][T19058] exfat: Deprecated parameter 'namecase' [ 1473.103093][T19058] exfat: Deprecated parameter 'utf8' [ 1473.202301][T19058] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1473.298657][T19068] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3524'. [ 1475.342125][ T26] audit: type=1326 audit(2000000535.999:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19080 comm="syz.3.3537" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efee3d69ff9 code=0x0 [ 1475.422424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1475.665530][T19100] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'. [ 1475.713829][T19070] team0: Port device veth5 added [ 1475.969382][T19106] input: syz1 as /devices/virtual/input/input21 [ 1476.792430][T19115] loop2: detected capacity change from 0 to 128 [ 1478.338943][T19125] loop3: detected capacity change from 0 to 1024 [ 1478.601790][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1478.666301][T19131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1478.727702][T19128] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1478.763762][T19131] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3546'. [ 1478.914661][T19135] loop0: detected capacity change from 0 to 128 [ 1479.093988][T19139] loop4: detected capacity change from 0 to 256 [ 1479.152612][T19139] FAT-fs (loop4): Unrecognized mount option "iocha)Sù‡=iso8859-2" or missing value [ 1479.224451][T19135] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1479.279819][T19135] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038 (0x7fffffff) [ 1479.379451][T19145] loop3: detected capacity change from 0 to 8 [ 1479.388185][T19133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1479.437581][T19133] netlink: 'syz.0.3549': attribute type 1 has an invalid length. [ 1479.471224][T19145] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1479.479377][T19145] SQUASHFS error: Failed to read block 0x1dd: -5 [ 1479.485811][T19145] SQUASHFS error: Unable to read metadata cache entry [1db] [ 1479.493105][T19145] SQUASHFS error: Unable to read inode 0xa7 [ 1479.572473][T19133] netlink: 'syz.0.3549': attribute type 2 has an invalid length. [ 1479.590408][T19137] loop4: detected capacity change from 0 to 40427 [ 1479.652777][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3549'. [ 1479.670191][T19137] F2FS-fs (loop4): invalid crc value [ 1479.732971][T19137] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1479.778552][T19137] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 1479.795495][T19137] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1480.336497][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.358599][T19153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.430985][T19154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1480.489734][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.640693][T19160] loop2: detected capacity change from 0 to 128 [ 1480.693958][T19138] chnl_net:caif_netlink_parms(): no params data found [ 1481.256372][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.335352][ T3609] Bluetooth: hci5: command 0x0409 tx timeout [ 1481.715651][T19176] input: syz1 as /devices/virtual/input/input23 [ 1482.029421][T19178] loop3: detected capacity change from 0 to 128 [ 1483.501151][ T3609] Bluetooth: hci5: command 0x041b tx timeout [ 1484.024401][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.072411][T19188] loop0: detected capacity change from 0 to 1024 [ 1484.136417][T19138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1484.144938][T19138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1484.158632][T19138] device bridge_slave_0 entered promiscuous mode [ 1484.174365][T19138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1484.320521][T19138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1484.413698][T19138] device bridge_slave_1 entered promiscuous mode [ 1485.664784][ T9434] Bluetooth: hci5: command 0x040f tx timeout [ 1485.745290][T19201] loop3: detected capacity change from 0 to 512 [ 1486.507481][T19138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1486.581420][T19138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1486.614628][T19201] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3564: inode #1: comm syz.3.3564: iget: illegal inode # [ 1486.641351][T19201] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3564: error while reading EA inode 1 err=-117 [ 1486.664875][T19201] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3564: inode #1: comm syz.3.3564: iget: illegal inode # [ 1486.782358][T19201] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3564: error while reading EA inode 1 err=-117 [ 1486.820661][T19201] EXT4-fs (loop3): 1 orphan inode deleted [ 1486.829687][T19201] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,abort,delalloc,usrjquota=,,errors=continue. Quota mode: none. [ 1486.959420][ C0] vkms_vblank_simulate: vblank timer overrun [ 1487.100511][T19210] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1488.167380][ T9434] Bluetooth: hci5: command 0x0419 tx timeout [ 1488.485078][T19138] team0: Port device team_slave_0 added [ 1488.640122][T19138] team0: Port device team_slave_1 added [ 1488.914946][T19138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1488.933899][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.081952][T19138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1489.130902][T19229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3570'. [ 1489.405549][T19138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1489.473630][T19138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1489.786369][T19138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1490.524075][T19138] device hsr_slave_0 entered promiscuous mode [ 1490.574587][T19138] device hsr_slave_1 entered promiscuous mode [ 1490.615190][T19138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1490.639516][T19259] loop0: detected capacity change from 0 to 128 [ 1490.646315][T19138] Cannot create hsr debugfs directory [ 1492.811210][ T26] audit: type=1326 audit(2000000553.351:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19273 comm="syz.3.3578" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efee3d69ff9 code=0x0 [ 1492.872020][T19277] loop3: detected capacity change from 0 to 256 [ 1493.004575][T19277] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1493.591176][T18301] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 1493.612412][T18301] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000953a) [ 1493.629555][T19289] loop0: detected capacity change from 0 to 1024 [ 1494.009780][ T3826] hfsplus: b-tree write err: -5, ino 4 [ 1494.024062][ T155] device hsr_slave_0 left promiscuous mode [ 1494.024566][ T155] device hsr_slave_1 left promiscuous mode [ 1494.025121][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1494.025201][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1494.025647][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1494.025672][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1494.026347][ T155] device bridge_slave_1 left promiscuous mode [ 1494.027731][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.029788][ T155] device bridge_slave_0 left promiscuous mode [ 1494.029959][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.046668][ T155] device veth1_macvtap left promiscuous mode [ 1494.046720][ T155] device veth0_macvtap left promiscuous mode [ 1494.046796][ T155] device veth1_vlan left promiscuous mode [ 1494.046838][ T155] device veth0_vlan left promiscuous mode [ 1494.248368][ T155] team0 (unregistering): Port device veth5 removed [ 1494.357592][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1494.464936][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1494.630546][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.178634][T19314] loop2: detected capacity change from 0 to 4096 [ 1495.215803][ C0] vkms_vblank_simulate: vblank timer overrun [ 1495.216988][T19314] ntfs3: Unknown parameter './file0' [ 1495.242085][ T155] bond0 (unregistering): Released all slaves [ 1495.343076][T19320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3587'. [ 1495.500306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1496.314102][T19138] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1496.431267][T19312] loop2: detected capacity change from 0 to 4096 [ 1496.433219][T19324] device syzkaller0 entered promiscuous mode [ 1496.501688][T19138] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1496.510063][T19312] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 1496.538307][T19138] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1496.597843][T19138] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1496.906250][ C0] vkms_vblank_simulate: vblank timer overrun [ 1496.938635][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.185359][T19138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1497.344166][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.394446][T19359] loop0: detected capacity change from 0 to 128 [ 1497.530756][T19138] 8021q: adding VLAN 0 to HW filter on device team0 [ 1497.579138][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1497.599861][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1497.649695][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1497.670628][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1497.703447][ T3826] bridge0: port 1(bridge_slave_0) entered blocking state [ 1497.710662][ T3826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1497.763434][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1497.793703][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1497.817100][ T3826] bridge0: port 2(bridge_slave_1) entered blocking state [ 1497.824343][ T3826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1497.943565][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1497.957137][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1497.993857][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1498.019449][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1498.089935][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1498.133142][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1498.162895][T19342] chnl_net:caif_netlink_parms(): no params data found [ 1498.314515][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1498.356147][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1498.396780][ C0] vkms_vblank_simulate: vblank timer overrun [ 1498.441655][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1498.470749][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1498.515563][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1498.544147][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1498.581898][T19379] loop4: detected capacity change from 0 to 2048 [ 1498.631460][T19138] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1498.778418][ T9434] Bluetooth: hci0: command 0x0409 tx timeout [ 1498.823589][T19342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1498.856306][T19379] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1498.885646][T19342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1499.003212][T19342] device bridge_slave_0 entered promiscuous mode [ 1499.240630][T19342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1499.558848][T19342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1499.567105][T19342] device bridge_slave_1 entered promiscuous mode [ 1500.868642][ T3558] Bluetooth: hci0: command 0x041b tx timeout [ 1501.080987][T19342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1501.153837][T19342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.486052][T19416] openvswitch: netlink: Flow key attr not present in new flow. [ 1502.881876][ T26] audit: type=1326 audit(2000000563.379:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.2.3600" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x0 [ 1502.971810][ T9434] Bluetooth: hci0: command 0x040f tx timeout [ 1503.055330][T19423] loop2: detected capacity change from 0 to 512 [ 1503.085362][T19138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1503.121764][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1503.137660][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1503.194511][T19423] EXT4-fs (loop2): error: could not find journal device path: error -2 [ 1503.194749][T19342] team0: Port device team_slave_0 added [ 1503.331009][T19342] team0: Port device team_slave_1 added [ 1503.355429][T19427] trusted_key: encrypted_key: insufficient parameters specified [ 1503.409359][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1503.448122][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1503.655819][T19342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1503.667004][T19342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.896708][T19342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.909797][T19342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.916832][T19342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.968947][T19342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1504.049783][T19138] device veth0_vlan entered promiscuous mode [ 1504.108797][T19138] device veth1_vlan entered promiscuous mode [ 1504.182742][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1504.196388][T19440] loop4: detected capacity change from 0 to 64 [ 1504.203522][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1504.220776][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1504.224847][T19438] loop2: detected capacity change from 0 to 256 [ 1504.251581][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1504.259579][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1504.486444][T19342] device hsr_slave_0 entered promiscuous mode [ 1504.581711][T19342] device hsr_slave_1 entered promiscuous mode [ 1504.623433][T19443] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 1504.706748][T19342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1504.989286][T19444] loop2: detected capacity change from 0 to 16 [ 1505.009327][T19342] Cannot create hsr debugfs directory [ 1505.161878][T19444] erofs: (device loop2): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 1505.236870][ T9434] Bluetooth: hci0: command 0x0419 tx timeout [ 1505.275518][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1505.294591][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1505.374374][T19138] device veth0_macvtap entered promiscuous mode [ 1505.492646][T19138] device veth1_macvtap entered promiscuous mode [ 1505.603013][T19449] loop2: detected capacity change from 0 to 512 [ 1505.664949][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1505.758836][T19449] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 1505.911250][T19449] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 1506.090141][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.172575][T19449] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz.2.3607: bg 0: block 18: invalid block bitmap [ 1506.265425][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.299104][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.300420][T19449] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 1506.309350][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.364462][T19449] EXT4-fs (loop2): 1 truncate cleaned up [ 1506.370226][T19449] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 1506.390826][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.451101][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.451212][T19449] ext2 filesystem being mounted at /169/file0 supports timestamps until 2038 (0x7fffffff) [ 1506.480344][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.508782][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1506.545562][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1506.651229][T19138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1506.737316][T19449] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 3: comm syz.2.3607: lblock 0 mapped to illegal pblock 3 (length 1) [ 1507.224639][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1507.233496][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1507.399396][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.443092][T19463] omfs: Invalid superblock (0) [ 1507.461243][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.471220][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.482383][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.493712][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.495968][T19467] netlink: 'syz.4.3610': attribute type 1 has an invalid length. [ 1507.504496][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.523315][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.535107][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.585352][T19138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1507.606054][T19138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1507.635868][T19138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1507.709428][T19471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3612'. [ 1507.732134][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1507.763060][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1507.786355][T19138] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.852473][T19138] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1507.895998][T19138] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.010947][T19138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1508.804913][T19342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.081050][T19493] netlink: 'syz.4.3615': attribute type 1 has an invalid length. [ 1509.111824][T19493] loop4: detected capacity change from 0 to 65 [ 1509.693657][T19342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1509.738136][ T1423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.751083][T19493] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1509.754997][ T1423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1509.768203][T19493] BFS-fs: bfs_fill_super(): Last block not available on loop4: 262208 [ 1509.784324][T16571] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1509.792827][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1509.860054][T19342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.020193][T16571] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1510.713474][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1510.851079][T19342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.975740][T19505] loop4: detected capacity change from 0 to 256 [ 1510.988446][T19504] loop0: detected capacity change from 0 to 512 [ 1511.236317][T19505] exfat: Deprecated parameter 'utf8' [ 1511.266150][T19505] exfat: Deprecated parameter 'namecase' [ 1511.303022][T19505] exfat: Deprecated parameter 'namecase' [ 1511.334734][T19505] exfat: Deprecated parameter 'utf8' [ 1511.624790][T19505] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1511.738674][T19504] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1511.826129][T19504] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e12c, mo2=0002] [ 1511.845512][T19504] EXT4-fs (loop0): orphan cleanup on readonly fs [ 1511.965868][T19504] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.3620: bg 0: block 361: padding at end of block bitmap is not set [ 1511.993216][T19504] EXT4-fs (loop0): Remounting filesystem read-only [ 1512.299264][T19504] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6185: Corrupt filesystem [ 1512.308154][ T26] audit: type=1326 audit(2000000572.618:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1512.495908][T19504] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.3620: attempt to clear invalid blocks 33619980 len 1 [ 1512.512216][T19342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1512.519987][ T26] audit: type=1326 audit(2000000572.618:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1512.573958][T19342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1512.626127][T19342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1512.626680][T19527] loop2: detected capacity change from 0 to 128 [ 1512.648337][ T26] audit: type=1326 audit(2000000572.628:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1513.355280][ T26] audit: type=1326 audit(2000000572.628:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1513.374908][T19504] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3620: invalid indirect mapped block 1811939328 (level 0) [ 1513.395564][T19342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1513.408565][T19532] loop4: detected capacity change from 0 to 1024 [ 1513.461688][ T26] audit: type=1326 audit(2000000572.638:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1513.474551][T19504] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.3620: invalid indirect mapped block 2185560079 (level 1) [ 1513.665351][T19504] EXT4-fs (loop0): 1 truncate cleaned up [ 1513.713440][T19504] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000000000000. Quota mode: none. [ 1513.760417][ T26] audit: type=1326 audit(2000000572.648:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1513.807005][ T3754] hfsplus: b-tree write err: -5, ino 4 [ 1513.878810][ T26] audit: type=1326 audit(2000000572.648:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1513.972162][ T26] audit: type=1326 audit(2000000572.648:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1514.033603][ T26] audit: type=1326 audit(2000000572.718:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19513 comm="syz.2.3621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f49bf08aff9 code=0x7ffc0000 [ 1516.157478][T19342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1516.318771][T19342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1516.345883][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1516.866722][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1516.973612][T14846] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1517.278247][T19565] loop2: detected capacity change from 0 to 256 [ 1517.303003][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1517.317817][T19565] exfat: Deprecated parameter 'utf8' [ 1517.333552][T19565] exfat: Deprecated parameter 'namecase' [ 1517.352252][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1517.370248][T19565] exfat: Deprecated parameter 'namecase' [ 1517.417548][T19565] exfat: Deprecated parameter 'utf8' [ 1517.427906][ T3643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1517.434982][ T3643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1517.497428][T14846] usb 5-1: Using ep0 maxpacket: 16 [ 1517.521263][T19565] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1517.607796][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1517.628108][T14846] usb 5-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=a3.85 [ 1517.740716][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1517.758732][T14846] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.781113][T14846] usb 5-1: config 0 descriptor?? [ 1517.944790][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1518.049068][T14846] usb 5-1: interface 1 not found [ 1518.230369][ T3643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1518.237654][ T3643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1518.278140][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1518.307939][T14846] usb 5-1: USB disconnect, device number 34 [ 1518.308807][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1518.456719][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1518.577607][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1518.612585][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1518.668714][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1518.720325][T19577] loop2: detected capacity change from 0 to 8 [ 1518.740476][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1518.817600][T19342] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1519.720211][T19342] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1520.338291][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1520.444038][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1520.815946][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1520.865740][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1520.909099][T19598] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3640'. [ 1520.909240][ T3643] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1521.237837][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1521.248621][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1521.400333][T19342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1521.451190][T19608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3640'. [ 1521.488817][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1521.500841][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1521.527363][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1521.587014][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1521.632776][T19342] device veth0_vlan entered promiscuous mode [ 1521.640261][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1521.649938][ T3827] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1521.667265][T19342] device veth1_vlan entered promiscuous mode [ 1521.920210][T19621] loop4: detected capacity change from 0 to 128 [ 1521.954735][T19342] device veth0_macvtap entered promiscuous mode [ 1521.962788][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1522.692184][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1522.705563][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1522.715187][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1522.882231][T19342] device veth1_macvtap entered promiscuous mode [ 1523.128442][T19623] tap0: tun_chr_ioctl cmd 1074025677 [ 1523.134165][T19623] tap0: linktype set to 6 [ 1523.290483][T19632] loop1: detected capacity change from 0 to 128 [ 1523.397304][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1523.410356][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1523.622871][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1523.634971][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.054634][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.159502][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.296047][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.321639][T19641] loop4: detected capacity change from 0 to 512 [ 1524.346750][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.400276][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.418132][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.438427][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.473503][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.495935][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.506992][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.537700][T19342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.553285][T19641] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1524.617256][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1524.689055][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1524.739525][T19641] EXT4-fs (loop4): 1 orphan inode deleted [ 1524.746953][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.764394][T19641] EXT4-fs (loop4): 1 truncate cleaned up [ 1524.770299][T19641] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x000000000000002e,inode_readahead_blks=0x0000000000010000,block_validity,quota,. Quota mode: writeback. [ 1524.798887][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.818440][T19641] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1439: inode #12: block 7: comm syz.4.3650: path /58/bus/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 1524.824086][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.844363][T19648] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3652'. [ 1524.859771][T19641] EXT4-fs (loop4): Remounting filesystem read-only [ 1524.926913][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.953117][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.979480][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.990300][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.015599][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.026020][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.041502][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.052211][T19342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1525.092353][T19342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1525.116024][T19342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.128973][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1525.144590][ T3754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1525.280508][T19656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3656'. [ 1525.295766][T19342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.334141][T19342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.354060][T19342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.372351][T19659] loop1: detected capacity change from 0 to 512 [ 1525.373746][T19342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.474878][T19659] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1525.529381][ T155] device hsr_slave_0 left promiscuous mode [ 1525.549796][ T155] device hsr_slave_1 left promiscuous mode [ 1525.551152][T19659] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1525.575761][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1525.603430][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1525.619432][T19659] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038 (0x7fffffff) [ 1525.631537][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1525.652046][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1525.691225][ T155] device bridge_slave_1 left promiscuous mode [ 1525.803687][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1525.816665][ T155] device bridge_slave_0 left promiscuous mode [ 1525.827484][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1525.981939][ T155] device veth1_macvtap left promiscuous mode [ 1525.988083][ T155] device veth0_macvtap left promiscuous mode [ 1526.260747][ T155] device veth1_vlan left promiscuous mode [ 1526.266568][ T155] device veth0_vlan left promiscuous mode [ 1526.639366][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1526.692076][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1526.707083][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.743008][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.774196][T19683] loop4: detected capacity change from 0 to 128 [ 1526.843118][ T155] bond0 (unregistering): Released all slaves [ 1527.700426][T19690] loop0: detected capacity change from 0 to 128 [ 1527.722386][ T3827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.772319][ T3827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1527.780966][T16541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1527.944472][T16541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1528.373990][T19693] loop1: detected capacity change from 0 to 128 [ 1528.509518][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1528.574267][ T3826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1528.778916][ T26] audit: type=1326 audit(2000000589.176:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19697 comm="syz.2.3665" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f49bf08aff9 code=0x0 [ 1529.376723][T19709] netlink: 'syz.3.3590': attribute type 4 has an invalid length. [ 1529.599042][T19715] loop4: detected capacity change from 0 to 256 [ 1529.616498][T19717] loop1: detected capacity change from 0 to 512 [ 1529.707437][T19716] loop2: detected capacity change from 0 to 2364 [ 1532.059551][T19717] EXT4-fs (loop1): 1 orphan inode deleted [ 1532.065318][T19717] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1532.119166][T19717] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038 (0x7fffffff) [ 1532.211521][T19731] netlink: 20 bytes leftover after parsing attributes in process `%7'. [ 1532.250102][T19731] blktrace: Concurrent blktraces are not allowed on sg0 [ 1534.327005][T19749] ALSA: seq fatal error: cannot create timer (-22) [ 1534.370395][T19751] loop4: detected capacity change from 0 to 128 [ 1537.520308][T19777] loop2: detected capacity change from 0 to 512 [ 1537.569504][T19779] loop4: detected capacity change from 0 to 164 [ 1537.607873][T19781] loop1: detected capacity change from 0 to 512 [ 1537.641460][T19777] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1537.662520][T19781] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value [ 1537.720054][T19777] EXT4-fs (loop2): 1 truncate cleaned up [ 1537.736214][T19777] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback. [ 1538.135533][T19788] ubi: mtd0 is already attached to ubi0 [ 1538.146747][T19788] program syz.4.3685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1539.760339][T19784] chnl_net:caif_netlink_parms(): no params data found [ 1539.874376][ T3612] Bluetooth: hci4: command 0x0409 tx timeout [ 1539.880621][ T3655] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1540.313715][ T3655] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1540.497682][ T3655] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1540.669645][ T3655] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1540.696640][ T3655] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 110, changing to 10 [ 1540.714640][ T3655] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25972, setting to 1024 [ 1540.901783][T19820] loop2: detected capacity change from 0 to 16 [ 1540.937847][ T3655] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1540.950993][ T3655] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1540.955296][T19820] erofs: (device loop2): mounted with root inode @ nid 36. [ 1540.961674][ T3655] usb 2-1: Product: syz [ 1540.971242][ T3655] usb 2-1: Manufacturer: syz [ 1541.015551][T19795] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1541.036453][ T3655] cdc_wdm 2-1:1.0: skipping garbage [ 1541.172660][T19827] loop4: detected capacity change from 0 to 128 [ 1541.189466][ T3655] cdc_wdm 2-1:1.0: skipping garbage [ 1541.196904][ T3655] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1541.202842][ T3655] cdc_wdm 2-1:1.0: Unknown control protocol [ 1541.225423][T19784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1541.253016][T14846] usb 2-1: USB disconnect, device number 34 [ 1541.260162][T19784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.267687][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 1541.267891][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 1541.267911][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1541.391202][T19829] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 511999 of nid 36 [ 1541.401377][T19829] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 1541.423967][T19829] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 511999 of nid 36 [ 1541.434059][T19829] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 1542.000105][T19795] cdc_wdm 2-1:1.0: Tx URB error: -19 [ 1542.270847][ T3655] Bluetooth: hci4: command 0x041b tx timeout [ 1542.571915][T19828] erofs: (device loop2): z_erofs_map_blocks_iter: unknown type 3 @ offset 511999 of nid 36 [ 1542.585099][T19828] erofs: (device loop2): z_erofs_readpage: failed to read, err [-95] [ 1542.920871][T19784] device bridge_slave_0 entered promiscuous mode [ 1542.971542][T19784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.005933][ T3655] Bluetooth: hci2: command 0x0406 tx timeout [ 1543.068045][T19784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1543.089798][T19784] device bridge_slave_1 entered promiscuous mode [ 1543.280384][T19784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1543.349060][T19784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.446297][T19784] team0: Port device team_slave_0 added [ 1543.467767][T19784] team0: Port device team_slave_1 added [ 1544.126873][T19784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1544.133970][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.160440][T19784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1544.172833][T19784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1544.179856][T19784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1544.218760][T19784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1544.477333][ T3655] Bluetooth: hci4: command 0x040f tx timeout [ 1546.772536][ T3655] Bluetooth: hci4: command 0x0419 tx timeout [ 1546.879542][T19863] loop4: detected capacity change from 0 to 256 [ 1546.925349][T19784] device hsr_slave_0 entered promiscuous mode [ 1546.965314][T19867] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1546.977798][T19784] device hsr_slave_1 entered promiscuous mode [ 1546.992155][T19784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1546.994626][T19863] FAT-fs (loop4): unable to read block(4294967296) for building NFS inode [ 1547.010017][T19784] Cannot create hsr debugfs directory [ 1547.016394][T19867] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1547.064899][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1547.115630][T19861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3702'. [ 1547.135096][T19863] ubi: mtd0 is already attached to ubi0 [ 1547.212570][ T26] audit: type=1800 audit(2000000607.552:659): pid=19874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3703" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1547.337512][T19784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.388047][T19877] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.3704'. [ 1547.514879][T19784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1547.691951][T19784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1548.260738][T19886] delete_channel: no stack [ 1550.341721][T19784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1550.540400][T19895] xt_NFQUEUE: number of total queues is 0 [ 1550.610715][T19899] loop1: detected capacity change from 0 to 1024 [ 1550.776198][T19899] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1550.824143][T19784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1550.940788][T19905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 1550.969389][T19905] 9pnet: Unknown protocol version 9 [ 1551.180837][T19899] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,quota,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 1551.448522][T19784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1551.607078][T19914] loop3: detected capacity change from 0 to 256 [ 1551.621213][T19784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1551.668321][T19784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1551.675941][T19914] exfat: Deprecated parameter 'utf8' [ 1551.681279][T19914] exfat: Deprecated parameter 'namecase' [ 1551.690530][T19914] exfat: Deprecated parameter 'namecase' [ 1551.696935][T19914] exfat: Deprecated parameter 'utf8' [ 1551.723259][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3714'. [ 1551.748374][T19914] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1551.919170][ T3655] kernel write not supported for file /snd/seq (pid: 3655 comm: kworker/1:8) [ 1552.681804][T19923] loop4: detected capacity change from 0 to 8192 [ 1552.834407][T19784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1552.853599][T19784] 8021q: adding VLAN 0 to HW filter on device team0 [ 1552.861994][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1552.878840][T19923] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1552.897221][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1552.907983][T19923] REISERFS (device loop4): using ordered data mode [ 1552.914537][T19923] reiserfs: using flush barriers [ 1552.921813][T19923] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1552.938923][T19923] REISERFS (device loop4): checking transaction log (loop4) [ 1552.953907][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1552.974049][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1552.997935][T16541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1553.005084][T16541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1553.017306][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1553.026344][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1553.056429][T16541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1553.063497][T16541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1553.081667][T19932] loop3: detected capacity change from 0 to 512 [ 1553.088030][T18710] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1553.192801][T19932] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3719: inode #1: comm syz.3.3719: iget: illegal inode # [ 1553.222702][T19932] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3719: error while reading EA inode 1 err=-117 [ 1553.246060][T19932] EXT4-fs (loop3): 1 orphan inode deleted [ 1553.274770][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1553.285678][T19932] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000000003,debug_want_extra_isize=0x0000000000000040,minixdf,max_batch_time=0x0000000000000006,grpquota,usrjquota=,,errors=continue. Quota mode: writeback. [ 1553.286392][T19923] REISERFS (device loop4): Using tea hash to sort names [ 1553.323038][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1553.327924][T19923] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1553.389586][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1553.398972][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1553.446841][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1553.456053][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1553.474639][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1553.602949][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1553.611901][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1553.633213][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1553.640850][T18710] usb 2-1: New USB device found, idVendor=0711, idProduct=0200, bcdDevice=2b.e7 [ 1554.378484][T18710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1554.414448][T19784] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1554.455526][T18710] usb 2-1: Product: syz [ 1554.459696][T18710] usb 2-1: Manufacturer: syz [ 1554.476469][T19784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1554.490375][T18710] usb 2-1: SerialNumber: syz [ 1554.492961][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1554.511160][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1554.519455][T18710] usb 2-1: config 0 descriptor?? [ 1554.562642][T18710] hub 2-1:0.0: bad descriptor, ignoring hub [ 1554.568578][T18710] hub: probe of 2-1:0.0 failed with error -5 [ 1554.576690][T18710] mct_u232 2-1:0.0: MCT U232 converter detected [ 1554.604296][T18710] mct_u232 ttyUSB0: expected endpoint missing [ 1554.779312][T19784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1554.792310][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1554.801726][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1554.853103][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1554.863897][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1554.938658][ T23] usb 2-1: USB disconnect, device number 35 [ 1554.946484][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1554.950420][ T23] mct_u232 2-1:0.0: device disconnected [ 1554.963261][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1555.004837][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1555.020578][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1555.064443][T19784] device veth0_vlan entered promiscuous mode [ 1555.130062][T19784] device veth1_vlan entered promiscuous mode [ 1555.246298][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1555.257045][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1555.267518][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1555.277590][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1555.291874][T19784] device veth0_macvtap entered promiscuous mode [ 1555.294711][T19947] sctp: [Deprecated]: syz.4.3722 (pid 19947) Use of int in max_burst socket option deprecated. [ 1555.294711][T19947] Use struct sctp_assoc_value instead [ 1555.309698][T19784] device veth1_macvtap entered promiscuous mode [ 1555.502886][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1555.521298][T16571] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1555.576878][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.624922][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.665196][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.696374][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.721425][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.732945][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.744830][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.755987][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.766341][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.777294][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.787672][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1555.799171][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.810978][T19784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1555.828646][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.839261][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.850049][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.862269][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.883671][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.925095][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.953742][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1555.975402][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1555.992271][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.005048][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.080845][T19957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3726'. [ 1556.185455][T19784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1556.276547][T19784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1556.418236][T19784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1556.833924][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1556.866269][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1557.033548][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1557.370266][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1557.415514][T19968] loop4: detected capacity change from 0 to 512 [ 1557.623979][T19964] tipc: Started in network mode [ 1557.629346][T19964] tipc: Node identity 00000000000000000000ffffe0000001, cluster identity 4711 [ 1557.688964][T19964] tipc: Enabling of bearer rejected, failed to enable media [ 1557.690307][T19968] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1557.706276][T19784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.710434][T19968] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038 (0x7fffffff) [ 1557.717585][T19784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.757908][T19784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1557.767693][T19784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.590136][ T26] audit: type=1326 audit(2000000619.892:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1559.703745][T19990] loop4: detected capacity change from 0 to 128 [ 1559.723898][ T26] audit: type=1326 audit(2000000619.892:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1559.793911][T19993] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1559.795943][ T26] audit: type=1326 audit(2000000619.932:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1559.864001][ T3826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.895076][ T26] audit: type=1326 audit(2000000619.932:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1559.918573][ T26] audit: type=1326 audit(2000000619.932:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1559.926067][ T3826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.951411][ T26] audit: type=1326 audit(2000000619.932:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1559.983999][ T26] audit: type=1326 audit(2000000619.932:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1560.008217][ T26] audit: type=1326 audit(2000000619.932:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1560.035066][ T26] audit: type=1326 audit(2000000619.932:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f5e1f657ff9 code=0x7ffc0000 [ 1560.092629][T19994] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1560.107807][T19996] loop4: detected capacity change from 0 to 512 [ 1560.116404][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1560.118148][ T26] audit: type=1326 audit(2000000619.932:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19989 comm="syz.4.3731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f5e1f658033 code=0x7ffc0000 [ 1564.213857][T19996] EXT4-fs warning (device loop4): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop4. [ 1565.046502][ T155] device hsr_slave_0 left promiscuous mode [ 1565.064563][ T155] device hsr_slave_1 left promiscuous mode [ 1565.074888][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1565.082654][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1565.105797][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1565.113426][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1565.136503][ T155] device bridge_slave_1 left promiscuous mode [ 1565.142739][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.255434][ T155] device bridge_slave_0 left promiscuous mode [ 1565.261945][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1565.284219][ T155] device veth1_macvtap left promiscuous mode [ 1565.290506][ T155] device veth0_macvtap left promiscuous mode [ 1565.300379][ T155] device veth1_vlan left promiscuous mode [ 1565.311862][ T155] device veth0_vlan left promiscuous mode [ 1565.420880][T20017] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1565.691556][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1565.706480][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1565.719283][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.733167][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.819914][ T155] bond0 (unregistering): Released all slaves [ 1565.912854][T16541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1565.927359][T20017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3740'. [ 1565.965591][T16541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1566.125580][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1566.413419][T20025] loop4: detected capacity change from 0 to 512 [ 1566.499950][T20035] dccp_xmit_packet: Payload too large (65475) for featneg. [ 1566.788053][T20025] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1567.225473][T20027] dccp_close: ABORT with 65475 bytes unread [ 1567.232479][T20027] dccp_close: ABORT with 11 bytes unread [ 1567.275811][T20025] EXT4-fs (loop4): 1 truncate cleaned up [ 1567.307322][ T5700] Bluetooth: hci3: command 0x0409 tx timeout [ 1567.315821][T20025] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,data=journal,noblock_validity,,errors=continue. Quota mode: none. [ 1567.337991][T20023] netlink: 576 bytes leftover after parsing attributes in process `syz.4.3741'. [ 1567.695071][T20054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1567.717745][T20013] chnl_net:caif_netlink_parms(): no params data found [ 1567.999329][T20062] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1569.491488][ T5700] Bluetooth: hci3: command 0x041b tx timeout [ 1569.611614][T20073] loop3: detected capacity change from 0 to 128 [ 1569.624072][T20013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1569.631374][T20013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.641981][T20013] device bridge_slave_0 entered promiscuous mode [ 1569.679555][T20013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1569.697197][T20013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.728617][T20073] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1569.734876][T20013] device bridge_slave_1 entered promiscuous mode [ 1569.805621][T20073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1571.593463][T20089] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 1571.782353][T18717] Bluetooth: hci3: command 0x040f tx timeout [ 1572.037333][T20090] netlink: 'syz.4.3756': attribute type 4 has an invalid length. [ 1572.486704][T20013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1572.553479][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3756'. [ 1573.673642][T20104] loop1: detected capacity change from 0 to 256 [ 1573.814507][T20013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1573.879179][T20104] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1573.911678][ T23] Bluetooth: hci3: command 0x0419 tx timeout [ 1574.540883][T20104] Process accounting resumed [ 1574.688874][T20118] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ï£žßä“X\x§ÃãEµ [ 1574.700715][T20013] team0: Port device team_slave_0 added [ 1574.712424][T20013] team0: Port device team_slave_1 added [ 1574.748127][T20109] device syzkaller1 entered promiscuous mode [ 1574.882260][T20113] Process accounting resumed [ 1574.895466][T20013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1574.928320][T20013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1574.965305][T20013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1575.004492][T20013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1575.011699][T20013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1575.042181][T20013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1575.103450][T20013] device hsr_slave_0 entered promiscuous mode [ 1575.245923][T20013] device hsr_slave_1 entered promiscuous mode [ 1576.072852][T20013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1576.144499][T20013] Cannot create hsr debugfs directory [ 1576.242166][T20130] loop1: detected capacity change from 0 to 16 [ 1576.528363][T20130] erofs: (device loop1): mounted with root inode @ nid 36. [ 1577.153137][T20143] erofs: (device loop1): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 9 of nid 36 [ 1577.168370][T20143] attempt to access beyond end of device [ 1577.168370][T20143] loop1: rw=0, want=40, limit=16 [ 1577.182381][T20143] attempt to access beyond end of device [ 1577.182381][T20143] loop1: rw=0, want=40, limit=16 [ 1577.203616][T20143] attempt to access beyond end of device [ 1577.203616][T20143] loop1: rw=0, want=40, limit=16 [ 1577.288359][T20143] attempt to access beyond end of device [ 1577.288359][T20143] loop1: rw=0, want=40, limit=16 [ 1577.320760][T20143] attempt to access beyond end of device [ 1577.320760][T20143] loop1: rw=0, want=328, limit=16 [ 1577.332614][T20143] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 0 of nid 36 [ 1577.536050][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3771'. [ 1577.738309][T20013] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1577.890955][T20160] loop4: detected capacity change from 0 to 512 [ 1578.010263][T20013] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.568070][T20160] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1578.576716][T20160] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1578.586449][T20160] EXT4-fs (loop4): 1 truncate cleaned up [ 1578.592343][T20160] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,noblock_validity,. Quota mode: writeback. [ 1578.643828][T20159] EXT4-fs (loop4): re-mounted. Opts: (null). Quota mode: writeback. [ 1578.692894][T20013] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1578.905512][T18717] Bluetooth: hci0: command 0x0409 tx timeout [ 1580.221061][T20132] chnl_net:caif_netlink_parms(): no params data found [ 1580.325736][T20013] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 1580.365951][T20013] batman_adv: batadv1: Removing interface: netdevsim0 [ 1580.383880][T20189] loop4: detected capacity change from 0 to 128 [ 1580.411703][T20013] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.436882][T20189] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿ01777777777777777777777" or missing value [ 1581.628803][T18717] Bluetooth: hci0: command 0x041b tx timeout [ 1582.643176][T20208] fuse: Bad value for 'fd' [ 1582.669638][ T26] kauditd_printk_skb: 48 callbacks suppressed [ 1582.669805][ T26] audit: type=1804 audit(2000000642.937:718): pid=20202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3780" name="/newroot/9/file0/file1" dev="overlay" ino=63 res=1 errno=0 [ 1582.996321][T20214] loop4: detected capacity change from 0 to 512 [ 1583.133519][T20214] EXT4-fs (loop4): corrupt root inode, run e2fsck [ 1583.149170][T20132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1583.159409][T20214] EXT4-fs (loop4): mount failed [ 1583.169871][T20132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1583.181243][T20132] device bridge_slave_0 entered promiscuous mode [ 1583.208364][T20132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1583.216159][T20132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1583.241681][T20132] device bridge_slave_1 entered promiscuous mode [ 1583.312685][ T26] audit: type=1326 audit(2000000643.576:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20223 comm="syz.0.3785" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc699ae6ff9 code=0x0 [ 1583.631217][T10303] Bluetooth: hci5: Received unexpected HCI Event 00000000 [ 1583.968541][T12318] Bluetooth: hci0: command 0x040f tx timeout [ 1584.002981][T20132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1584.022354][T20132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1584.055596][T20132] team0: Port device team_slave_0 added [ 1584.089125][T20132] team0: Port device team_slave_1 added [ 1584.108585][T20013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1584.161384][T20013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1584.535707][T20013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1584.556877][T20132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.580731][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.743465][T20132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.781755][T20252] loop1: detected capacity change from 0 to 8 [ 1584.807806][T20013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1584.818020][T20246] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1584.835035][T20254] netlink: 'syz.4.3789': attribute type 10 has an invalid length. [ 1584.871979][T20254] 8021q: adding VLAN 0 to HW filter on device team0 [ 1584.906640][T20252] SQUASHFS error: Unable to read directory block [631:26] [ 1584.925073][T20254] bond0: (slave team0): Enslaving as an active interface with an up link [ 1584.940030][T20252] SQUASHFS error: Unable to read directory block [631:26] [ 1584.956762][T20132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.964598][T20252] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1584.980459][T20132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.009364][T20252] SQUASHFS error: Unable to read directory block [631:26] [ 1585.020264][T20132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.108941][ T155] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.182055][T20132] device hsr_slave_0 entered promiscuous mode [ 1585.196553][T20132] device hsr_slave_1 entered promiscuous mode [ 1585.205660][T20132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1585.214663][T20132] Cannot create hsr debugfs directory [ 1585.244410][ T155] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.330505][ T155] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.414363][ T155] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1585.540745][T20013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1585.618641][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1585.633746][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1585.692859][ T3609] Bluetooth: hci5: command 0x0409 tx timeout [ 1585.733263][T20013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.013993][ T3655] Bluetooth: hci0: command 0x0419 tx timeout [ 1586.326300][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1586.864815][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1586.929139][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.936332][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1587.186168][T20285] loop4: detected capacity change from 0 to 2048 [ 1587.200517][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1587.227089][T20285] UDF-fs: bad mount option "" or missing value [ 1587.250672][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1587.270066][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1587.307798][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.315021][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1587.330182][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1587.344796][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1587.360412][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1587.450478][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1587.463225][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1587.484697][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1587.499757][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1587.559869][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1587.642781][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1587.701941][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1587.839316][T20013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1587.942213][T20290] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1588.008713][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1589.530469][T20013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1589.622822][T20013] device veth0_vlan entered promiscuous mode [ 1589.648064][T20013] device veth1_vlan entered promiscuous mode [ 1589.713271][T20013] device veth0_macvtap entered promiscuous mode [ 1589.730859][T20013] device veth1_macvtap entered promiscuous mode [ 1589.769159][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.780731][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.792530][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1589.803391][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.813535][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.640870][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.651429][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.662181][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.675074][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.686104][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.696308][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1590.707617][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.776804][T20013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1590.809138][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.820782][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.831250][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.842094][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.853793][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.864723][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.875074][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.885969][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.896586][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.918847][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.939348][T20013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1590.950182][T20013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1590.962188][T20013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1590.978114][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1590.985865][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1590.994468][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1591.003691][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1591.013611][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1591.022775][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1591.046377][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1591.060644][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1591.836442][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1591.849605][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1591.859300][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1591.868215][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1591.877518][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1591.887925][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1591.904598][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1591.913738][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1591.921727][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1591.931552][T17222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1591.950686][T20327] loop1: detected capacity change from 0 to 512 [ 1592.006325][T20013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.015625][T20013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.026753][T20013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.037726][T20013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1592.059241][T20329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1592.070254][T20329] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1592.103306][T20329] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3804'. [ 1592.446252][T20327] EXT4-fs (loop1): 1 orphan inode deleted [ 1592.457556][T20327] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 1592.503521][T20327] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038 (0x7fffffff) [ 1592.649559][T20132] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1593.613908][T20132] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1593.652440][T20132] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1593.680844][T20132] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1593.689457][ T1423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1593.705256][ T1423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1593.813953][ T1423] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1594.025011][ T3643] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1595.664770][ T3643] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1595.712132][T20368] loop1: detected capacity change from 0 to 256 [ 1595.750525][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1595.839363][T20368] exfat: Deprecated parameter 'utf8' [ 1595.854591][T20368] exfat: Deprecated parameter 'namecase' [ 1595.915408][T20368] exfat: Deprecated parameter 'namecase' [ 1595.934307][T20368] exfat: Deprecated parameter 'utf8' [ 1595.940364][T20376] delete_channel: no stack [ 1595.975439][T20368] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x822ffc2e, utbl_chksum : 0xe619d30d) [ 1596.119475][T20132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1596.268452][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1596.286610][T16541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1596.328234][T20390] loop2: detected capacity change from 0 to 1024 [ 1596.339975][T20132] 8021q: adding VLAN 0 to HW filter on device team0 [ 1596.374839][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1596.403814][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1596.443486][ T3637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1596.450597][ T3637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1596.462312][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1596.471392][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1596.483054][ T3637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1596.490162][ T3637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1596.500775][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1596.536719][T20390] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1596.547633][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1596.616796][T13568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1596.644791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1596.654966][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1596.689231][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1596.703334][T20390] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback. [ 1596.860100][T20132] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1596.888297][T20132] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1596.940378][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1596.969495][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1597.001125][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1597.382469][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1597.579527][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1597.707266][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1597.724919][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1597.743122][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1597.785363][T20414] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1597.794825][T20414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1597.802441][T20414] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1597.925028][ T26] audit: type=1804 audit(2000000658.163:720): pid=20390 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3822" name="/newroot/1/file0/bus" dev="loop2" ino=19 res=1 errno=0 [ 1598.197775][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1598.212622][ T3637] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1599.046332][T20132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1599.146238][ T155] device hsr_slave_0 left promiscuous mode [ 1599.157207][ T155] device hsr_slave_1 left promiscuous mode [ 1599.217708][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1599.256667][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1599.289223][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1599.331121][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1599.346511][ T155] device bridge_slave_1 left promiscuous mode [ 1599.352757][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1599.386931][ T155] device bridge_slave_0 left promiscuous mode [ 1599.411307][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.470426][T20446] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3818'. [ 1599.976280][ T155] device hsr_slave_0 left promiscuous mode [ 1599.989549][ T155] device hsr_slave_1 left promiscuous mode [ 1599.998961][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1600.014803][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1600.323082][T20449] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1600.419649][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1601.412597][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1601.438027][ T155] device bridge_slave_1 left promiscuous mode [ 1601.444330][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1601.463999][ T155] device bridge_slave_0 left promiscuous mode [ 1601.476577][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1601.507760][ T155] device veth1_macvtap left promiscuous mode [ 1601.513822][ T155] device veth0_macvtap left promiscuous mode [ 1601.536596][ T155] device veth1_vlan left promiscuous mode [ 1601.544683][ T155] device veth0_vlan left promiscuous mode [ 1601.562445][ T155] device veth1_macvtap left promiscuous mode [ 1601.574579][ T155] device veth0_macvtap left promiscuous mode [ 1601.586166][ T155] device veth0_vlan left promiscuous mode [ 1601.676824][T18710] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 1602.099414][T18710] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1602.117067][T18710] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1602.243589][T18710] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1602.327867][T18710] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.367231][T18710] usb 3-1: config 0 descriptor?? [ 1602.569996][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1602.597001][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1602.630656][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1602.645278][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1602.750305][T20467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1603.286756][ T155] bond0 (unregistering): Released all slaves [ 1603.453966][ T155] team0 (unregistering): Port device team_slave_1 removed [ 1603.475458][ T155] team0 (unregistering): Port device team_slave_0 removed [ 1603.490641][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1603.505549][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1603.585517][ T155] bond0 (unregistering): Released all slaves [ 1603.707901][T20442] ------------[ cut here ]------------ [ 1603.718558][T18710] usb 3-1: USB disconnect, device number 44 [ 1603.725883][T20442] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 1603.739188][T20442] WARNING: CPU: 0 PID: 20442 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x36d/0x540 [ 1603.751924][T20442] Modules linked in: [ 1603.756224][T20442] CPU: 0 PID: 20442 Comm: syz.4.3817 Not tainted 5.15.167-syzkaller #0 [ 1603.783168][T20442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1603.795374][T20442] RIP: 0010:ieee80211_bss_info_change_notify+0x36d/0x540 [ 1603.806626][T20442] Code: 04 0e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 32 97 8b 4c 89 e6 89 ea e8 03 e4 8f f7 <0f> 0b e9 21 fd ff ff e8 17 3a c4 f7 0f 0b e9 b0 fe ff ff e8 0b 3a [ 1603.809862][T20286] Bluetooth: hci5: command 0x0406 tx timeout [ 1603.834497][T20442] RSP: 0018:ffffc90002ef73f0 EFLAGS: 00010246 [ 1603.840987][T20442] RAX: b54217fe67b5d000 RBX: ffff8880205f5290 RCX: 0000000000040000 [ 1603.848980][T20442] RDX: ffffc9000398b000 RSI: 00000000000084a8 RDI: 00000000000084a9 [ 1603.857176][T20442] RBP: 0000000000000004 R08: ffffffff81668a3c R09: ffffed10172067a8 [ 1603.865796][T20442] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880205f4000 [ 1603.873926][T20442] R13: 0000000000400000 R14: dffffc0000000000 R15: ffff8880205f6298 [ 1603.882131][T20442] FS: 00007f5e1daaf6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1603.891240][T20442] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1603.897857][T20442] CR2: 00007ffa63192f98 CR3: 000000001f9ba000 CR4: 00000000003506f0 [ 1603.905953][T20442] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1603.914095][T20442] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1603.922131][T20442] Call Trace: [ 1603.925419][T20442] [ 1603.928349][T20442] ? __warn+0x15b/0x300 [ 1603.933181][T20442] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 1603.939630][T20442] ? report_bug+0x1b7/0x2e0 [ 1603.945299][T20442] ? handle_bug+0x3d/0x70 [ 1603.949649][T20442] ? exc_invalid_op+0x16/0x40 [ 1603.954445][T20442] ? asm_exc_invalid_op+0x16/0x20 [ 1603.959606][T20442] ? __wake_up_klogd+0xcc/0x100 [ 1603.964513][T20442] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 1603.971199][T20442] ieee80211_ocb_leave+0x26a/0x310 [ 1603.976343][T20442] __cfg80211_leave_ocb+0x294/0x4b0 [ 1603.981625][T20442] cfg80211_leave_ocb+0xc9/0x1b0 [ 1603.986570][T20442] cfg80211_change_iface+0x628/0x10c0 [ 1603.992070][T20442] nl80211_set_interface+0x6e4/0x9e0 [ 1603.997375][T20442] ? nl80211_dump_interface+0x6a0/0x6a0 [ 1604.003014][T20442] ? mutex_lock_nested+0x17/0x20 [ 1604.007965][T20442] genl_rcv_msg+0xfbd/0x14a0 [ 1604.012703][T20442] ? genl_bind+0x420/0x420 [ 1604.017128][T20442] ? local_bh_enable+0x5/0x20 [ 1604.021876][T20442] ? mark_lock+0x98/0x340 [ 1604.026252][T20442] ? __lock_acquire+0x1295/0x1ff0 [ 1604.031539][T20442] ? nl80211_dump_interface+0x6a0/0x6a0 [ 1604.037134][T20442] netlink_rcv_skb+0x1cf/0x410 [ 1604.042015][T20442] ? genl_bind+0x420/0x420 [ 1604.046462][T20442] ? netlink_ack+0xb10/0xb10 [ 1604.051940][T20442] ? down_read+0x1b3/0x2e0 [ 1604.056365][T20442] ? genl_rcv+0x9/0x40 [ 1604.060487][T20442] genl_rcv+0x24/0x40 [ 1604.064486][T20442] netlink_unicast+0x7b6/0x980 [ 1604.069288][T20442] ? netlink_detachskb+0x90/0x90 [ 1604.074346][T20442] ? __virt_addr_valid+0x3bb/0x460 [ 1604.079470][T20442] ? 0xffffffff81000000 [ 1604.083704][T20442] ? __check_object_size+0x300/0x410 [ 1604.089001][T20442] ? bpf_lsm_netlink_send+0x5/0x10 [ 1604.094277][T20442] netlink_sendmsg+0xa30/0xd60 [ 1604.099079][T20442] ? netlink_getsockopt+0x5b0/0x5b0 [ 1604.104377][T20442] ? aa_sock_msg_perm+0x91/0x150 [ 1604.109329][T20442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1604.114734][T20442] ? security_socket_sendmsg+0x7d/0xa0 [ 1604.120247][T20442] ? netlink_getsockopt+0x5b0/0x5b0 [ 1604.125481][T20442] __sys_sendto+0x564/0x720 [ 1604.130128][T20442] ? __ia32_sys_getpeername+0x80/0x80 [ 1604.135591][T20442] ? print_irqtrace_events+0x210/0x210 [ 1604.141085][T20442] ? vtime_user_exit+0x2d1/0x400 [ 1604.146132][T20442] __x64_sys_sendto+0xda/0xf0 [ 1604.150980][T20442] do_syscall_64+0x3b/0xb0 [ 1604.155416][T20442] ? clear_bhb_loop+0x15/0x70 [ 1604.161321][T20442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1604.167353][T20442] RIP: 0033:0x7f5e1f659e8c [ 1604.172008][T20442] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 1604.191729][T20442] RSP: 002b:00007f5e1daade20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1604.200952][T20442] RAX: ffffffffffffffda RBX: 00007f5e1daadfa0 RCX: 00007f5e1f659e8c [ 1604.209222][T20442] RDX: 0000000000000024 RSI: 00007f5e1daadff0 RDI: 000000000000000b [ 1604.217364][T20442] RBP: 0000000000000000 R08: 00007f5e1daade74 R09: 000000000000000c [ 1604.225404][T20442] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 1604.233588][T20442] R13: 0000000000000000 R14: 00007f5e1daadff0 R15: 0000000000000000 [ 1604.241741][T20442] [ 1604.244792][T20442] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1604.252103][T20442] CPU: 0 PID: 20442 Comm: syz.4.3817 Not tainted 5.15.167-syzkaller #0 [ 1604.260367][T20442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1604.270446][T20442] Call Trace: [ 1604.273731][T20442] [ 1604.276664][T20442] dump_stack_lvl+0x1e3/0x2d0 [ 1604.281337][T20442] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 1604.286982][T20442] ? panic+0x860/0x860 [ 1604.291042][T20442] ? ieee80211_bss_info_change_notify+0x320/0x540 [ 1604.297445][T20442] ? ieee80211_bss_info_change_notify+0x320/0x540 [ 1604.303855][T20442] panic+0x318/0x860 [ 1604.307778][T20442] ? __warn+0x16a/0x300 [ 1604.311950][T20442] ? fb_is_primary_device+0xd0/0xd0 [ 1604.317312][T20442] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 1604.323746][T20442] __warn+0x2b2/0x300 [ 1604.327762][T20442] ? ieee80211_bss_info_change_notify+0x36d/0x540 [ 1604.334173][T20442] report_bug+0x1b7/0x2e0 [ 1604.338514][T20442] handle_bug+0x3d/0x70 [ 1604.342682][T20442] exc_invalid_op+0x16/0x40 [ 1604.347191][T20442] asm_exc_invalid_op+0x16/0x20 [ 1604.352051][T20442] RIP: 0010:ieee80211_bss_info_change_notify+0x36d/0x540 [ 1604.359272][T20442] Code: 04 0e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 20 32 97 8b 4c 89 e6 89 ea e8 03 e4 8f f7 <0f> 0b e9 21 fd ff ff e8 17 3a c4 f7 0f 0b e9 b0 fe ff ff e8 0b 3a [ 1604.379086][T20442] RSP: 0018:ffffc90002ef73f0 EFLAGS: 00010246 [ 1604.385330][T20442] RAX: b54217fe67b5d000 RBX: ffff8880205f5290 RCX: 0000000000040000 [ 1604.393308][T20442] RDX: ffffc9000398b000 RSI: 00000000000084a8 RDI: 00000000000084a9 [ 1604.401298][T20442] RBP: 0000000000000004 R08: ffffffff81668a3c R09: ffffed10172067a8 [ 1604.409287][T20442] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880205f4000 [ 1604.417270][T20442] R13: 0000000000400000 R14: dffffc0000000000 R15: ffff8880205f6298 [ 1604.425249][T20442] ? __wake_up_klogd+0xcc/0x100 [ 1604.430114][T20442] ieee80211_ocb_leave+0x26a/0x310 [ 1604.435232][T20442] __cfg80211_leave_ocb+0x294/0x4b0 [ 1604.440436][T20442] cfg80211_leave_ocb+0xc9/0x1b0 [ 1604.445460][T20442] cfg80211_change_iface+0x628/0x10c0 [ 1604.450843][T20442] nl80211_set_interface+0x6e4/0x9e0 [ 1604.456184][T20442] ? nl80211_dump_interface+0x6a0/0x6a0 [ 1604.461853][T20442] ? mutex_lock_nested+0x17/0x20 [ 1604.466784][T20442] genl_rcv_msg+0xfbd/0x14a0 [ 1604.471370][T20442] ? genl_bind+0x420/0x420 [ 1604.475789][T20442] ? local_bh_enable+0x5/0x20 [ 1604.480470][T20442] ? mark_lock+0x98/0x340 [ 1604.484818][T20442] ? __lock_acquire+0x1295/0x1ff0 [ 1604.489836][T20442] ? nl80211_dump_interface+0x6a0/0x6a0 [ 1604.495382][T20442] netlink_rcv_skb+0x1cf/0x410 [ 1604.500355][T20442] ? genl_bind+0x420/0x420 [ 1604.504780][T20442] ? netlink_ack+0xb10/0xb10 [ 1604.509409][T20442] ? down_read+0x1b3/0x2e0 [ 1604.513832][T20442] ? genl_rcv+0x9/0x40 [ 1604.518140][T20442] genl_rcv+0x24/0x40 [ 1604.522125][T20442] netlink_unicast+0x7b6/0x980 [ 1604.526884][T20442] ? netlink_detachskb+0x90/0x90 [ 1604.531809][T20442] ? __virt_addr_valid+0x3bb/0x460 [ 1604.536910][T20442] ? 0xffffffff81000000 [ 1604.541074][T20442] ? __check_object_size+0x300/0x410 [ 1604.546360][T20442] ? bpf_lsm_netlink_send+0x5/0x10 [ 1604.551478][T20442] netlink_sendmsg+0xa30/0xd60 [ 1604.556275][T20442] ? netlink_getsockopt+0x5b0/0x5b0 [ 1604.561485][T20442] ? aa_sock_msg_perm+0x91/0x150 [ 1604.566414][T20442] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1604.571707][T20442] ? security_socket_sendmsg+0x7d/0xa0 [ 1604.577160][T20442] ? netlink_getsockopt+0x5b0/0x5b0 [ 1604.582366][T20442] __sys_sendto+0x564/0x720 [ 1604.586867][T20442] ? __ia32_sys_getpeername+0x80/0x80 [ 1604.592238][T20442] ? print_irqtrace_events+0x210/0x210 [ 1604.597963][T20442] ? vtime_user_exit+0x2d1/0x400 [ 1604.603068][T20442] __x64_sys_sendto+0xda/0xf0 [ 1604.607776][T20442] do_syscall_64+0x3b/0xb0 [ 1604.612460][T20442] ? clear_bhb_loop+0x15/0x70 [ 1604.617154][T20442] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1604.623055][T20442] RIP: 0033:0x7f5e1f659e8c [ 1604.627458][T20442] Code: 2a 5a 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5a 02 00 48 8b [ 1604.647062][T20442] RSP: 002b:00007f5e1daade20 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1604.655493][T20442] RAX: ffffffffffffffda RBX: 00007f5e1daadfa0 RCX: 00007f5e1f659e8c [ 1604.663503][T20442] RDX: 0000000000000024 RSI: 00007f5e1daadff0 RDI: 000000000000000b [ 1604.671481][T20442] RBP: 0000000000000000 R08: 00007f5e1daade74 R09: 000000000000000c [ 1604.679436][T20442] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000000000b [ 1604.687396][T20442] R13: 0000000000000000 R14: 00007f5e1daadff0 R15: 0000000000000000 [ 1604.695387][T20442] [ 1604.698635][T20442] Kernel Offset: disabled [ 1604.703476][T20442] Rebooting in 86400 seconds..